Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
File: Ua-8FGJFXphp1IslexjiO-d6psM.mft (raw, json)
Hash identifier: RLWyCmEKLTtHHTKGUdItNFAs4DkRMFSKRa9PIwaIvuE=
Subject key identifier: 34:33:74:F2:73:E7:A1:EB:4C:D5:8B:3A:87:5B:9F:B6:A8:D2:8C:28
Authority key identifier: 51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
Certificate issuer: /CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Certificate serial: 019A5262F596D11F03DDF6A93CD2FBE4CE2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
Manifest number: 0F92
Signing time: Wed 05 Nov 2025 05:00:08 +0000
Manifest this update: Wed 05 Nov 2025 05:00:08 +0000
Manifest next update: Thu 06 Nov 2025 05:00:08 +0000
Files and hashes: 1: LurIMxIdSzFwWlDhk4Ll00NoT9Y.roa (hash: mQpu5Z0eDQkFYVXPC9Ju2CwxJctFEU3LSWItHzUvqPk=)
2: Ua-8FGJFXphp1IslexjiO-d6psM.crl (hash: wMSX4lNuB388GdOqFmE0PoCwC1qp8iHoGNQV8XgO0bQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:62:f5:96:d1:1f:03:dd:f6:a9:3c:d2:fb:e4:ce:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Validity
Not Before: Nov 5 05:00:08 2025 GMT
Not After : Nov 6 05:00:08 2025 GMT
Subject: CN=343374f273e7a1eb4cd58b3a875b9fb6a8d28c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ad:bf:02:18:be:76:2c:e0:ca:39:15:0a:ee:
5b:b2:78:cb:f3:2d:cf:d4:11:d7:55:b8:2f:8e:41:
f1:fd:20:d3:e9:28:48:27:fd:7b:6e:04:ff:d3:56:
6b:7c:46:05:df:c7:71:2e:1d:6d:02:15:17:19:5d:
20:df:10:68:20:a4:f4:e8:17:de:f9:18:75:c0:ce:
37:ba:53:7d:a5:f4:8f:ae:f3:9a:57:97:f3:07:42:
49:23:cd:32:11:58:a0:15:e2:3c:1b:47:56:81:8c:
f6:0b:d1:3f:17:57:d4:b2:31:19:2d:00:64:ad:6f:
03:e4:94:1c:85:4b:8c:be:51:a0:cd:b2:2e:8e:dd:
76:f2:7a:a2:6d:78:14:4c:35:18:5d:26:c7:51:f5:
82:d3:22:94:4b:f2:d2:c9:65:49:7e:3f:03:73:9b:
36:44:ce:74:8c:75:dc:3b:13:b0:78:09:70:18:4f:
94:8a:f5:b6:38:f1:8a:21:bc:9a:c1:24:85:d2:59:
a1:d1:ad:0b:1d:f8:68:0e:6c:af:9f:9c:35:b2:07:
d5:30:23:d2:2e:ca:56:9a:1a:98:24:05:03:92:55:
4e:31:da:8e:7a:cb:0d:ac:0b:79:04:4a:bc:8e:55:
97:c5:5c:15:cd:63:67:02:79:dc:ed:69:2c:78:7d:
d7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:33:74:F2:73:E7:A1:EB:4C:D5:8B:3A:87:5B:9F:B6:A8:D2:8C:28
X509v3 Authority Key Identifier:
keyid:51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c8:c5:ba:00:1c:07:61:ec:70:f0:af:38:de:c9:a5:b7:80:
47:67:ee:a9:d8:83:d3:4b:ce:e7:cf:8c:bf:1d:c1:f3:c4:f4:
f4:e1:51:c1:44:8b:89:b1:c9:dc:b8:3b:ad:94:dc:9b:0d:70:
2c:e7:99:09:e2:38:7d:43:f3:ad:95:d9:98:30:4a:10:b4:2d:
a2:3b:cb:98:fd:89:82:de:b6:12:8e:4c:79:7f:50:3f:c2:d7:
f3:54:79:33:b5:f4:66:94:4e:9c:33:dd:97:c9:12:75:1b:c7:
f3:53:61:3b:c1:ac:ef:6d:43:f8:30:c6:64:da:3a:7c:98:31:
c4:7f:7a:4c:06:63:fb:d9:87:72:94:90:63:64:5c:bd:5b:19:
30:72:0a:dd:d0:7e:3a:2f:ca:18:7c:10:08:45:60:d9:5c:88:
8c:0a:e0:11:03:5f:1a:3e:6c:f9:96:8d:bb:1e:c7:22:da:48:
59:b2:00:4f:e2:44:ed:9b:8a:ab:cf:bb:23:1c:14:c0:c3:0f:
93:96:09:a8:3b:4b:44:c1:b3:7e:20:f8:28:0f:f1:c8:34:56:
9a:bd:fb:fe:d8:a4:be:78:4a:67:96:2c:b4:5c:d0:c3:02:9d:
d3:ce:8b:ce:17:70:a9:38:7c:c3:d1:25:13:4e:3b:82:0b:2c:
5f:35:08:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSYvWW0R8D3fapPNL75M4sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYWZiYzE0NjI0NTVlOTg2OWQ0OGIyNTdiMThlMjNiZTc3
YWE2YzMwHhcNMjUxMTA1MDUwMDA4WhcNMjUxMTA2MDUwMDA4WjAzMTEwLwYDVQQD
EygzNDMzNzRmMjczZTdhMWViNGNkNThiM2E4NzViOWZiNmE4ZDI4YzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0q2/Ahi+dizgyjkVCu5bsnjL8y3P
1BHXVbgvjkHx/SDT6ShIJ/17bgT/01ZrfEYF38dxLh1tAhUXGV0g3xBoIKT06Bfe
+Rh1wM43ulN9pfSPrvOaV5fzB0JJI80yEVigFeI8G0dWgYz2C9E/F1fUsjEZLQBk
rW8D5JQchUuMvlGgzbIujt128nqibXgUTDUYXSbHUfWC0yKUS/LSyWVJfj8Dc5s2
RM50jHXcOxOweAlwGE+UivW2OPGKIbyawSSF0lmh0a0LHfhoDmyvn5w1sgfVMCPS
LspWmhqYJAUDklVOMdqOessNrAt5BEq8jlWXxVwVzWNnAnnc7WkseH3XCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQzdPJz56HrTNWLOodbn7ao0owoMB8GA1UdIwQY
MBaAFFGvvBRiRV6YadSLJXsY4jvneqbDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWEtOEZHSkZYcGhwMUlzbGV4amlPLWQ2cHNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83MDU5OWQtYzQ3NC00MTIzLWE3NDMt
YTIwMWRmYWJkYWIxLzEvVWEtOEZHSkZYcGhwMUlzbGV4amlPLWQ2cHNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83MDU5OWQtYzQ3NC00MTIzLWE3NDMtYTIwMWRmYWJkYWIx
LzEvVWEtOEZHSkZYcGhwMUlzbGV4amlPLWQ2cHNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARcjFugAc
B2HscPCvON7JpbeAR2fuqdiD00vO58+Mvx3B88T09OFRwUSLibHJ3Lg7rZTcmw1w
LOeZCeI4fUPzrZXZmDBKELQtojvLmP2Jgt62Eo5MeX9QP8LX81R5M7X0ZpROnDPd
l8kSdRvH81NhO8Gs721D+DDGZNo6fJgxxH96TAZj+9mHcpSQY2RcvVsZMHIK3dB+
Oi/KGHwQCEVg2VyIjArgEQNfGj5s+ZaNux7HItpIWbIAT+JE7ZuKq8+7IxwUwMMP
k5YJqDtLRMGzfiD4KA/xyDRWmr37/tikvnhKZ5YstFzQwwKd086LzhdwqTh8w9El
E047ggssXzUI+g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:56:47 2025 by rpki-client