Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
File: uG3av8SJUr7ibW1fgogx9ZahVOk.mft (raw, json)
Hash identifier: 67MAzTbtF+JVnKvnXF4U8IfGsywk1B6XReINASpCpV8=
Subject key identifier: 15:88:3B:93:4F:5A:DF:FC:A4:C8:94:45:00:F8:D4:5A:E7:1E:D7:CD
Authority key identifier: B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9
Certificate issuer: /CN=b86ddabfc48952bee26d6d5f828831f596a154e9
Certificate serial: 019A4D743E6EB3F9200E274518989578EBE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
Manifest number: 0562
Signing time: Tue 04 Nov 2025 06:00:55 +0000
Manifest this update: Tue 04 Nov 2025 06:00:55 +0000
Manifest next update: Wed 05 Nov 2025 06:00:55 +0000
Files and hashes: 1: XAkJAeMsm3qGc5VmVm5cet8IGU0.roa (hash: lDEEW1AxkG0v1QYe+CdCiOCSdsED9l+6Ar+8XrHNs4Y=)
2: uG3av8SJUr7ibW1fgogx9ZahVOk.crl (hash: Ki6VirYdl1gUdrJX3m/ujl++zwQgDUSK5c5LOQ8Ivdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:3e:6e:b3:f9:20:0e:27:45:18:98:95:78:eb:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86ddabfc48952bee26d6d5f828831f596a154e9
Validity
Not Before: Nov 4 06:00:55 2025 GMT
Not After : Nov 5 06:00:55 2025 GMT
Subject: CN=15883b934f5adffca4c8944500f8d45ae71ed7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d5:f5:74:cf:b0:5a:1d:1e:a4:e1:99:ee:62:
63:b1:26:1a:7b:61:b7:4a:81:11:05:f2:30:b9:aa:
d2:24:b8:52:59:c5:32:c0:81:3a:1a:62:fa:3f:00:
db:f8:31:03:1d:d2:9c:dc:2f:f4:8d:f3:35:d5:2e:
4a:aa:27:ce:db:e5:99:e3:a0:b3:67:91:17:25:40:
37:7a:f7:bf:86:cc:86:68:cb:cc:e0:b8:83:13:19:
30:15:00:6e:cd:44:ee:fb:24:fb:45:a5:e2:c1:54:
24:0f:ed:89:26:7d:14:7a:f0:74:2f:5c:c9:38:98:
56:cb:a7:35:19:45:9a:3a:15:db:82:cd:92:1a:cc:
08:a9:f8:5e:57:08:f0:63:02:54:2c:d5:14:75:58:
8e:f8:d3:d8:b6:fe:6f:d5:cb:f7:3c:fb:c9:df:f0:
84:43:82:7f:e7:58:d6:92:ee:91:68:2d:f8:80:5b:
c5:c2:5f:82:13:e8:54:27:f9:83:43:e4:8e:e3:ce:
0c:96:8d:3e:a9:24:e9:a5:1d:4f:22:c1:a1:6b:9b:
a2:6d:f2:a1:0c:7c:e0:a8:7e:86:12:14:7f:93:dd:
a4:37:83:14:0e:a8:a0:ad:b8:7b:55:a1:9a:41:6b:
d3:ac:4d:a4:04:a1:66:17:1a:7d:69:74:06:53:9a:
90:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:88:3B:93:4F:5A:DF:FC:A4:C8:94:45:00:F8:D4:5A:E7:1E:D7:CD
X509v3 Authority Key Identifier:
keyid:B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:86:6f:08:74:e4:0d:19:f9:ec:dd:7b:10:88:d8:dc:fc:ca:
1d:78:12:ab:ec:75:a2:fc:14:96:0c:4f:ee:4d:fa:6a:a4:f4:
7a:cd:7c:15:b0:e8:62:b2:07:cc:eb:2c:ce:3b:f5:4c:7c:9a:
5a:2d:1d:97:9e:90:05:da:ec:3e:b8:03:4d:b2:a5:81:93:76:
37:69:5d:e9:0b:61:5d:e4:0f:cf:d8:e5:88:89:95:a8:b2:df:
70:61:c4:dc:bb:5c:91:57:04:57:7a:60:e1:8d:eb:2a:35:c8:
0d:d1:9b:d0:bf:a0:b0:fa:77:9d:5f:d4:29:06:e7:73:9d:a6:
f1:fd:c2:8a:9a:88:2b:2b:64:39:9d:65:57:c0:39:62:b7:e4:
36:72:bc:5c:b1:d6:e8:e9:1e:58:a5:64:e5:34:a8:20:ef:12:
fd:63:43:ce:1f:e3:87:32:07:61:9e:a8:17:9c:f9:2a:50:00:
79:4f:73:3e:e0:bb:d1:6f:b5:e8:1d:c7:5c:8d:a1:61:3a:59:
67:b4:33:5d:da:1b:90:17:ca:48:2a:26:ba:2b:7b:da:61:2d:
e7:d8:57:9f:c0:74:9c:b2:49:7d:4a:d5:39:18:00:ee:d3:01:
66:96:00:ac:4a:c5:f8:bd:17:df:7a:74:a2:a9:e5:55:bf:fc:
65:83:f2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:10 2025 by rpki-client