Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.mft
File: uU8woHaUohE5ZIclom6zTOSha6s.mft (raw, json)
Hash identifier: 0f6YBRQMNa3AUReG2RNtdmKmCV1Vzc4aOCF7/sb0PTY=
Subject key identifier: 15:E8:DB:22:87:75:B8:5F:68:97:DA:0F:0D:F8:B6:6A:53:D5:F7:64
Authority key identifier: B9:4F:30:A0:76:94:A2:11:39:64:87:25:A2:6E:B3:4C:E4:A1:6B:AB
Certificate issuer: /CN=b94f30a07694a21139648725a26eb34ce4a16bab
Certificate serial: 019A5187BD797E5E1EBCFB5AB35DF53DC845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uU8woHaUohE5ZIclom6zTOSha6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.mft
Manifest number: 03A2
Signing time: Wed 05 Nov 2025 01:00:41 +0000
Manifest this update: Wed 05 Nov 2025 01:00:41 +0000
Manifest next update: Thu 06 Nov 2025 01:00:41 +0000
Files and hashes: 1: uU8woHaUohE5ZIclom6zTOSha6s.crl (hash: MrK2GbwI6Mm86ATbwzSZWIFZZDk5Kb4Gig755CAaMxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uU8woHaUohE5ZIclom6zTOSha6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:bd:79:7e:5e:1e:bc:fb:5a:b3:5d:f5:3d:c8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b94f30a07694a21139648725a26eb34ce4a16bab
Validity
Not Before: Nov 5 01:00:41 2025 GMT
Not After : Nov 6 01:00:41 2025 GMT
Subject: CN=15e8db228775b85f6897da0f0df8b66a53d5f764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:99:a0:26:e7:85:f8:a2:fa:48:02:46:11:03:
b2:a5:7c:56:71:d1:8e:85:9c:9a:c9:c3:94:c4:00:
31:6a:78:8b:12:77:5f:b2:41:45:9f:a7:d6:4a:92:
04:a1:b5:a1:25:b7:d6:6c:c9:3c:62:95:64:18:7c:
83:f2:fd:f3:a7:71:e7:f7:1b:98:26:57:fe:88:22:
3b:e2:01:f3:a2:bd:7e:70:d3:fc:ba:0f:52:a8:fc:
1a:bb:56:71:69:de:84:c9:ce:93:f3:ba:a7:b3:f6:
3c:d4:e7:58:a7:11:a4:8c:bd:89:40:57:69:af:c9:
65:ec:a6:bf:3c:3c:4c:b6:0f:82:ea:51:1e:bd:d7:
eb:3d:ae:df:2d:5e:b6:a3:96:39:3e:10:bb:07:38:
e4:58:3f:74:aa:ec:e3:28:3e:c9:5d:e4:7e:36:e6:
12:dc:81:a3:3c:d4:4f:fd:cf:c7:3a:ab:b1:fd:d7:
6d:29:fb:5e:3a:53:15:09:43:f6:27:0e:27:ca:b9:
21:63:55:34:8d:f6:7f:e0:ff:3b:3b:8d:be:31:ff:
ee:ce:5c:59:56:29:9a:84:7a:10:2e:1c:e5:4f:7a:
65:e9:88:75:79:c6:64:55:34:f2:7f:86:83:ac:46:
ca:13:40:34:03:a9:56:9c:d7:52:38:71:03:ee:f1:
00:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E8:DB:22:87:75:B8:5F:68:97:DA:0F:0D:F8:B6:6A:53:D5:F7:64
X509v3 Authority Key Identifier:
keyid:B9:4F:30:A0:76:94:A2:11:39:64:87:25:A2:6E:B3:4C:E4:A1:6B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uU8woHaUohE5ZIclom6zTOSha6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:55:63:dc:7d:63:bb:8c:b7:d6:f7:15:ca:c5:a6:52:94:41:
be:22:0f:2f:d8:c0:45:10:89:ce:be:01:6f:f9:fc:22:96:63:
ea:0d:85:6b:46:9d:62:63:47:c5:d6:4d:dc:d9:e5:f2:c0:97:
ac:7f:94:c6:15:c8:8b:18:91:48:9d:14:f8:cf:cc:4f:4a:7e:
99:00:71:af:29:36:57:9f:e7:7c:ad:de:a4:32:cb:48:21:b6:
45:53:ae:69:86:7e:ab:f4:f5:58:8b:4f:05:99:2b:89:8e:fc:
34:de:f9:a9:18:b3:3a:3b:f3:cb:7e:7b:6c:d2:48:ab:1b:40:
d8:cc:51:9e:18:8e:a9:ee:b0:a3:f1:45:e0:60:d2:ee:28:18:
16:62:4b:a4:a5:f7:f5:2d:f5:de:6b:52:19:51:a6:80:a2:70:
47:f7:f9:ee:2a:49:26:b6:43:cc:7e:9a:70:df:de:c2:45:2f:
a9:cc:ef:e0:86:9c:c2:41:e0:70:ae:b7:32:d0:e1:4b:68:cf:
73:38:0c:1b:78:6b:e6:24:7f:f9:7a:39:5e:0e:40:06:22:08:
02:e8:61:f6:9c:d0:6e:b6:dd:4b:68:b9:ab:08:79:12:20:7c:
09:60:61:39:3a:be:c1:a3:fb:e3:5a:3b:7f:e9:f6:43:a5:ec:
9b:17:6e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:56:28 2025 by rpki-client