Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/db3e56-e832-491d-b530-ca4f66b09068/1/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.mft
File: Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.mft (raw, json)
Hash identifier: x6WRSY0MaAuV2nS+kGRY39V2urmFWxt/iSUBJGdGgJA=
Subject key identifier: A2:DF:FC:0E:BC:4A:88:14:98:48:67:40:14:3C:C5:86:07:68:34:51
Authority key identifier: 52:EC:B0:E8:5D:0B:7F:EE:A4:A8:2A:C9:44:8D:47:C3:EC:0A:F0:53
Certificate issuer: /CN=52ecb0e85d0b7feea4a82ac9448d47c3ec0af053
Certificate serial: 019A4E18CA20667CD3D722F96407479CBF39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/db3e56-e832-491d-b530-ca4f66b09068/1/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 09:00:38 +0000
Manifest this update: Tue 04 Nov 2025 09:00:38 +0000
Manifest next update: Wed 05 Nov 2025 09:00:38 +0000
Files and hashes: 1: 5Hag6P9QZzNJGQQPElsAvDoZXrY.roa (hash: sbCnjoQN/zwpc81NILJvfLGG8eJWgqQYFOcEqkbBNRk=)
2: Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.crl (hash: 9VOjLSdagmwEukyjn//Q+8E38LCOtGBlN4FV9CYmwpQ=)
3: lQnsuSPRzwbhpl5HgEOQpZDD34k.roa (hash: IPjYSRDjQRK4ZxgGrRlNzR9WIDEqNLvDqZwGEGyoqM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/db3e56-e832-491d-b530-ca4f66b09068/1/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/db3e56-e832-491d-b530-ca4f66b09068/1/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:ca:20:66:7c:d3:d7:22:f9:64:07:47:9c:bf:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ecb0e85d0b7feea4a82ac9448d47c3ec0af053
Validity
Not Before: Nov 4 09:00:38 2025 GMT
Not After : Nov 5 09:00:38 2025 GMT
Subject: CN=a2dffc0ebc4a881498486740143cc58607683451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bd:aa:f3:5a:04:9a:7f:bb:39:9f:d2:df:3d:
55:6f:0f:40:80:f4:14:13:ce:6a:25:90:d4:3e:6b:
b7:36:45:7b:4e:d7:69:6d:9f:3d:a0:63:7d:7b:7a:
41:ae:e1:67:3d:d3:db:c2:cd:12:c6:b6:e2:ce:30:
ce:76:7a:68:e0:ff:57:cd:44:39:4d:30:04:80:84:
b6:24:b1:40:3d:da:e8:48:91:c2:32:5b:91:49:6d:
64:70:e5:f2:34:7e:b3:14:9f:da:5f:a7:38:94:52:
90:14:f6:e3:0a:4d:bf:d4:e7:9f:24:20:ea:e5:6c:
57:10:b6:e9:f6:fb:c5:c7:d2:cb:5e:48:cc:cf:76:
53:b3:db:36:84:02:22:fa:ab:9b:a0:9b:d0:26:38:
dd:7d:4e:4f:d2:bd:e1:92:b8:25:14:1a:54:e4:41:
38:5e:39:1f:32:af:20:c6:8d:f1:a2:e1:4c:a6:18:
c6:05:c6:86:a9:1d:f5:ef:12:7d:35:cb:45:2b:af:
98:3b:20:ad:1a:9c:2c:04:a6:6d:83:b4:8f:89:ad:
3d:41:66:53:c8:8d:c4:7c:a9:de:a5:2c:a7:23:70:
42:fe:1c:66:81:84:1b:62:22:f5:e3:57:a6:49:b8:
98:7d:f7:25:74:cd:4a:6c:b4:fe:61:73:0f:69:38:
5a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DF:FC:0E:BC:4A:88:14:98:48:67:40:14:3C:C5:86:07:68:34:51
X509v3 Authority Key Identifier:
keyid:52:EC:B0:E8:5D:0B:7F:EE:A4:A8:2A:C9:44:8D:47:C3:EC:0A:F0:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/db3e56-e832-491d-b530-ca4f66b09068/1/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/db3e56-e832-491d-b530-ca4f66b09068/1/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ac:1d:db:72:71:84:ce:37:4e:97:29:bc:45:13:aa:79:83:
d5:11:4b:d6:d5:1b:96:7d:08:10:52:ee:46:fc:f1:7c:d7:2e:
12:f6:ad:23:dd:5d:0f:23:c7:c0:d0:88:d1:0e:2d:bd:84:e8:
23:2f:a6:e7:db:c3:02:66:45:c0:4d:ab:98:5f:59:80:bc:c6:
ec:c0:99:8a:36:c9:e9:3c:a3:85:67:ac:01:7f:09:7f:98:61:
03:7b:4e:36:0a:55:ab:3f:ed:9e:cd:8c:af:9c:99:5e:0e:f9:
72:8f:b5:11:e4:80:f9:f9:97:00:3b:38:df:1d:50:4a:16:02:
cd:5d:52:31:94:c6:6f:cd:28:ed:e6:d3:13:ff:3b:1a:22:6a:
f6:8e:40:ac:41:ab:c7:16:13:de:4b:4f:dc:54:3b:8a:11:c5:
d9:18:99:46:8c:56:dd:9c:26:ff:95:d1:ae:7b:a6:cc:27:48:
11:82:e2:7f:bb:fb:92:90:d7:8f:d4:09:26:be:ff:a0:af:a4:
f8:e1:ea:c0:a7:d9:2f:bd:7f:1d:0d:66:d4:a1:aa:dc:b2:80:
58:d8:6a:98:1d:c5:94:e3:2b:2e:9f:b5:7f:29:23:b7:29:86:
a0:e8:95:73:14:d6:56:17:04:12:c2:55:9c:c6:0e:e3:ad:a5:
87:45:e6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:48 2025 by rpki-client