Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.mft
File: uLa0m-TWCgcqS6bKl5P4k7WeTJ4.mft (raw, json)
Hash identifier: 7Dqqv8B3UFWkLh6brpj00i7Wj8bIbC+uA+47TUErrVA=
Subject key identifier: B9:81:40:2A:3C:75:7E:DA:EC:E5:B4:27:48:13:04:0E:E6:89:11:03
Authority key identifier: B8:B6:B4:9B:E4:D6:0A:07:2A:4B:A6:CA:97:93:F8:93:B5:9E:4C:9E
Certificate issuer: /CN=b8b6b49be4d60a072a4ba6ca9793f893b59e4c9e
Certificate serial: 019A5307D764A54ED57FD239A3D85CB452B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 08:00:13 +0000
Manifest this update: Wed 05 Nov 2025 08:00:13 +0000
Manifest next update: Thu 06 Nov 2025 08:00:13 +0000
Files and hashes: 1: lcVRgFmTlCcww53NFkFkK4iGqbM.roa (hash: VtMzZFJ3NTiMK6oaatZagMMBJQTfT5IjLjDY1x6iB7w=)
2: uLa0m-TWCgcqS6bKl5P4k7WeTJ4.crl (hash: DJXMt31KG0fGPRlw/HTw2AMh0ThsZ3L7KvYOgcbS3Ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:07:d7:64:a5:4e:d5:7f:d2:39:a3:d8:5c:b4:52:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8b6b49be4d60a072a4ba6ca9793f893b59e4c9e
Validity
Not Before: Nov 5 08:00:13 2025 GMT
Not After : Nov 6 08:00:13 2025 GMT
Subject: CN=b981402a3c757edaece5b4274813040ee6891103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f6:94:4c:74:ff:12:46:28:cd:88:18:9c:0f:
c0:a6:28:9f:3a:8d:51:c3:38:74:33:97:38:7c:27:
ab:23:a0:30:36:98:11:2d:e5:ca:09:22:04:c2:0b:
c6:ac:0d:bc:46:10:29:ef:0e:b0:cf:a1:9a:da:b5:
29:56:19:2c:f3:39:5f:d5:00:e9:b6:29:d6:a4:e3:
3b:80:d0:3e:ca:2f:20:29:d5:85:f4:68:63:48:ca:
b6:0a:a5:13:bf:f7:d8:8a:42:a4:5e:04:e7:fc:9e:
d6:c8:66:6a:67:47:ee:67:da:89:e9:a5:6f:73:82:
4c:d0:2a:ae:52:93:9a:a1:c6:44:7f:6e:7b:05:67:
02:ff:04:83:29:49:96:f4:3c:82:83:5e:ae:5d:c0:
f9:4b:5d:8d:4d:d1:9f:95:76:2c:cc:6f:f6:cf:98:
fc:ab:09:e9:fb:e5:df:4b:d4:8f:75:d9:27:4b:f7:
8f:5b:dd:b4:f4:ae:2b:4e:29:7f:08:4f:26:3d:e0:
e4:38:73:bc:7a:d8:d6:99:47:43:20:07:28:ac:39:
3d:b3:11:5d:3c:17:3a:a6:c7:cd:5f:8c:84:f1:34:
57:88:06:db:ed:f3:9f:60:c0:1a:db:d3:1c:10:0f:
10:6a:9d:b5:2c:82:ce:18:73:dd:70:fd:eb:d9:52:
8c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:81:40:2A:3C:75:7E:DA:EC:E5:B4:27:48:13:04:0E:E6:89:11:03
X509v3 Authority Key Identifier:
keyid:B8:B6:B4:9B:E4:D6:0A:07:2A:4B:A6:CA:97:93:F8:93:B5:9E:4C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e4:82:56:41:c6:0b:1c:d8:93:fc:bd:ca:af:7e:1e:ac:86:
51:62:4c:14:f7:5f:85:85:1f:36:e4:4f:86:61:4a:5f:4d:a7:
80:87:f0:39:32:49:08:8d:b5:7f:4a:a5:5d:25:b4:fc:00:0f:
56:5f:d9:0a:18:d9:67:f9:f3:5c:ba:cc:fc:51:b3:98:96:7c:
87:6e:eb:fa:67:e7:21:39:b9:4a:f3:fa:c4:16:b6:2d:b6:3d:
30:e4:21:d5:b5:a6:2c:82:6b:7c:b9:b0:68:de:97:f2:e6:2f:
90:60:bd:47:fc:f9:9e:26:e4:9f:4b:25:dd:3b:68:66:fa:fe:
69:49:5e:f9:bf:ed:b2:17:a3:19:56:d3:5c:3e:8c:5f:22:b8:
e0:94:c7:cd:56:b4:ca:19:fc:61:03:25:12:15:b1:65:e7:8f:
f1:64:8d:5a:b5:42:e2:07:77:ce:ea:96:02:58:96:6a:4a:7f:
3e:94:35:06:bc:44:36:e1:b1:ab:cc:5d:c6:c8:13:14:4d:5d:
cb:fc:2c:01:1e:77:2c:6b:b4:c8:a6:53:b5:e8:ce:50:dc:ff:
f8:e4:bc:22:d8:30:bf:ea:c2:76:b4:79:06:29:65:a6:cc:ce:
33:eb:b3:f5:ed:9b:38:28:df:d4:65:46:1c:c3:76:64:b9:f8:
39:09:0f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:41:17 2025 by rpki-client