
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
File: UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft (raw, json)
Hash identifier: +ia2q1vsOf8KpYOXsLHkGKZkLN36xx9yQS9LHZB2/iA=
Subject key identifier: 14:41:1C:47:E2:B0:65:05:F0:4B:D3:08:0C:B9:5D:DD:09:FF:64:40
Authority key identifier: 50:10:39:75:6C:CF:31:F6:4A:88:34:43:E1:F1:73:28:34:D2:B8:B2
Certificate issuer: /CN=501039756ccf31f64a883443e1f1732834d2b8b2
Certificate serial: 019A533F182F2C457D71BD1D8F6374C65B31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
Manifest number: 0A73
Signing time: Wed 05 Nov 2025 09:00:35 +0000
Manifest this update: Wed 05 Nov 2025 09:00:35 +0000
Manifest next update: Thu 06 Nov 2025 09:00:35 +0000
Files and hashes: 1: UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl (hash: /budeAdy35SY1OZtUSZSynJJgWVJjWGQrrgWCpccNU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:18:2f:2c:45:7d:71:bd:1d:8f:63:74:c6:5b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501039756ccf31f64a883443e1f1732834d2b8b2
Validity
Not Before: Nov 5 09:00:35 2025 GMT
Not After : Nov 6 09:00:35 2025 GMT
Subject: CN=14411c47e2b06505f04bd3080cb95ddd09ff6440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e3:01:75:f1:d4:5c:08:fb:bc:ff:06:80:2b:
23:91:6e:53:ff:67:49:5d:44:8c:08:03:c4:04:e9:
a9:4d:1f:e5:57:6e:7d:36:bc:c0:89:94:b2:18:bd:
76:e8:da:b5:17:b6:85:12:74:5b:8e:01:a2:cc:66:
92:5c:93:9d:fe:d8:02:bc:fd:81:d7:5d:86:00:51:
6f:7b:65:10:6c:b8:de:0a:d8:a0:41:d8:39:86:45:
3f:ae:d8:9f:e5:d2:24:ea:72:1a:f2:c7:64:e9:74:
ed:53:2b:06:58:be:2e:d5:df:32:4d:9b:32:cb:f5:
30:a9:28:72:e1:01:a3:64:ad:51:96:f3:eb:f7:fe:
89:33:ba:b4:ba:2a:f6:ee:f3:1b:fa:34:7e:ac:24:
c1:04:f2:3e:a4:ae:5e:e0:4d:d3:d9:1f:f7:79:35:
f7:07:b5:72:e3:54:18:44:73:f8:ef:e1:b8:9d:f7:
c7:6f:6c:2b:85:81:1c:30:b2:21:14:f0:7b:1a:7d:
ba:2c:5b:fa:de:4c:4a:39:41:d5:f8:59:41:c9:68:
a4:fc:37:1d:7c:30:8d:17:ac:62:40:ed:ac:0a:ee:
f5:05:98:13:17:41:72:7a:31:59:8c:78:26:48:fb:
60:07:f7:44:0e:4b:3e:60:91:2a:1a:d3:57:f4:7e:
7c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:41:1C:47:E2:B0:65:05:F0:4B:D3:08:0C:B9:5D:DD:09:FF:64:40
X509v3 Authority Key Identifier:
keyid:50:10:39:75:6C:CF:31:F6:4A:88:34:43:E1:F1:73:28:34:D2:B8:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:de:59:84:00:4a:18:22:86:ed:8f:3f:e9:2b:f1:98:d8:01:
26:ad:2d:12:6e:90:9a:71:58:90:74:f1:c8:8c:64:4f:a7:ae:
ab:83:35:03:5c:93:09:bf:66:34:ed:78:69:6b:2f:cd:84:2c:
cf:d1:91:9f:57:ee:2c:3c:ef:f2:46:f4:14:25:13:fc:5c:9b:
58:40:ee:6a:4c:2c:12:51:1a:61:17:66:07:8d:54:21:33:5f:
0e:eb:29:82:ba:f0:66:ab:fa:98:14:ee:31:41:f8:ed:7f:37:
a1:40:fa:4a:cd:f2:42:8e:7c:37:53:35:84:8e:68:ae:fc:38:
f1:c4:d9:ab:c7:a2:e2:b4:07:bc:95:d4:70:b5:0d:95:58:b0:
e2:34:d3:9f:94:f5:94:82:d0:c1:1e:6b:49:25:35:c6:25:8a:
50:c6:df:19:a7:8e:ac:2e:b1:30:0d:9c:73:3a:a4:56:c9:0a:
aa:50:f6:60:8a:b5:36:c9:d9:a0:1d:d6:ac:8e:33:a8:ae:e0:
d7:55:1f:44:0c:62:14:53:96:24:4d:f9:f6:4e:3f:94:ac:d4:
6b:8a:35:cc:ad:e2:51:96:24:3f:7b:7c:45:e9:a5:ea:36:c0:
61:25:0f:38:9a:b4:3c:8d:73:da:0a:1f:6a:1e:17:d0:01:20:
4a:0e:19:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:55:04 2025 by rpki-client