Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
File: uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft (raw, json)
Hash identifier: WiI1fsStn0HQonmING9/hP1RHLXYG/0dl2RJJpJiosk=
Subject key identifier: EC:8F:C4:96:F7:21:78:8E:5A:AC:38:F5:A0:82:19:87:31:CA:39:74
Authority key identifier: B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
Certificate issuer: /CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Certificate serial: 01987A52565AFC57E32FD0E959E3A20FD505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
Manifest number: 161B
Signing time: Tue 05 Aug 2025 13:01:13 +0000
Manifest this update: Tue 05 Aug 2025 13:01:13 +0000
Manifest next update: Wed 06 Aug 2025 13:01:13 +0000
Files and hashes: 1: 6KXLkC_cgd5ILMccrhh-m3RCwS8.roa (hash: Az+UEZWLV4uod4atp3pTmM4QksD0MTVrJp8g22f4T2Y=)
2: uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl (hash: affiKVZEfLMcjnsCADKoMBPzQrRmv2mfHGFyvhjma1o=)
3: wCMVD4s-MzexAEYCNnm0u-lWVks.roa (hash: 1CzqXOjbHH5Z0NSEWz+9Qkw44w+rWwhDlrc+ZZXhbB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:52:56:5a:fc:57:e3:2f:d0:e9:59:e3:a2:0f:d5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Validity
Not Before: Aug 5 13:01:13 2025 GMT
Not After : Aug 6 13:01:13 2025 GMT
Subject: CN=ec8fc496f721788e5aac38f5a082198731ca3974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2c:31:c3:b5:3b:56:0c:0f:a4:2f:39:89:40:
6d:e4:ee:68:f8:f6:5f:e5:de:5a:60:8a:e4:00:f3:
db:26:10:b6:5f:fe:29:c7:9d:e1:3d:16:ca:6a:72:
dc:34:73:6b:eb:13:f8:27:ef:2c:7c:09:dc:13:26:
3f:96:44:3f:6c:77:b7:7b:87:48:3d:ab:f4:b9:2f:
3a:9b:c1:f2:aa:4a:95:06:5a:36:db:33:5c:ee:2b:
e9:62:82:d2:31:92:db:5c:88:e3:7c:9b:9d:c4:c9:
67:fb:02:a3:91:c1:14:d8:b9:3c:05:c1:c5:bf:52:
52:35:df:71:d8:9b:0a:36:33:f9:94:5d:d0:a6:09:
79:c0:a8:a3:8a:0f:04:54:2b:f2:04:87:8e:d6:b8:
6f:11:4f:46:da:83:ee:3b:60:c8:5c:1d:51:1f:5f:
6f:40:f8:11:d7:fa:96:21:95:db:60:fa:b6:55:50:
21:9f:70:8f:d2:07:06:44:d8:bb:76:c1:ee:66:6c:
8b:3e:d5:e1:12:53:e7:d1:cf:2a:84:e4:1c:d3:40:
7f:3c:88:26:b0:d6:f7:b9:2b:f4:79:4b:27:b8:ec:
5b:b1:f3:4f:da:f5:e9:7f:1e:b0:ba:df:44:71:45:
23:2b:79:f3:1b:f5:ee:7e:8f:36:b1:3e:da:8e:f5:
61:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8F:C4:96:F7:21:78:8E:5A:AC:38:F5:A0:82:19:87:31:CA:39:74
X509v3 Authority Key Identifier:
keyid:B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:f2:8a:a0:35:02:05:2f:2d:56:13:ce:1f:37:c8:97:c8:8b:
18:4c:ee:a4:46:cc:36:a3:a5:f9:45:0d:67:a7:de:f2:6d:29:
35:00:6f:be:e0:c4:d7:23:16:c4:c2:4f:18:a6:60:0c:32:c1:
82:37:9d:de:51:ab:df:cd:7e:fc:87:28:65:c1:ea:45:09:ff:
bc:67:56:23:2e:6a:51:1c:d9:0b:17:fa:ad:cc:7f:de:03:8e:
06:10:2d:12:ce:97:54:2f:a9:c6:0a:00:23:fc:24:b0:30:0d:
0c:8f:47:7c:8f:17:99:50:83:0a:e3:5c:8f:33:5b:d0:65:51:
2e:b2:14:79:4b:c6:7b:4e:90:6e:06:4d:e4:a8:c0:c4:07:6b:
d1:e2:f9:60:84:a9:2f:b6:1e:8b:c9:f9:a9:56:fc:2f:52:5a:
c1:e0:ad:4a:4a:39:61:85:36:74:fc:28:03:99:70:e0:46:14:
2c:de:0f:aa:0a:74:2f:4f:54:31:4d:1f:e9:4d:46:7a:8f:76:
c0:26:67:e5:22:6e:0e:a8:4d:cc:fa:bf:41:ba:3e:d6:e6:18:
a8:06:80:ba:08:d3:f7:0e:8c:61:62:66:aa:3c:4f:98:bf:2c:
ff:bd:6d:c3:c6:d5:4d:3d:98:5b:48:48:e9:07:9a:ce:71:5e:
25:43:4e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 19:59:23 2025 by rpki-client