Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
File: UzahBs7N66kuC4Dl6aXHibp0xis.mft (raw, json)
Hash identifier: uBL9OVYKz7u+CQige8/tJTx26pZaqzaoG6pcNsDej9s=
Subject key identifier: 28:B3:93:37:A5:01:33:40:B8:27:3D:32:91:A7:5D:83:F7:5A:59:53
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial: 019A4F2B9698450F3867E0DC10F4D415BA1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
Manifest number: 0BB7
Signing time: Tue 04 Nov 2025 14:00:47 +0000
Manifest this update: Tue 04 Nov 2025 14:00:47 +0000
Manifest next update: Wed 05 Nov 2025 14:00:47 +0000
Files and hashes: 1: 3XFZjvmipuYl3ZWlHwQH5J3zMBo.roa (hash: waCPVYUPagNA2C/8qUWA6TsWBhxDDZLgjh2zXP9UUxQ=)
2: 7k8l9jRcUvUU0PoFjWmWy5vQ4RU.roa (hash: EkvhsCktAS/aEN7qGD8m7gGA2WllZuGA03mFu0p4SxA=)
3: NQzxfbg6mUjToWYd761iH1Aj8M0.roa (hash: gTeoWCaUXq7PaCcs+yvz12eVkeAA0ArL5OPG5CvIUNQ=)
4: QDeglJ-kf-CPwjwijAyu-xuaRJQ.roa (hash: F1qjIGAjhb4CCD6+mprPcFrHYg12/ZjUkVJtYzNpI98=)
5: UzahBs7N66kuC4Dl6aXHibp0xis.crl (hash: azbkK1G+Mppxtzlc7OnUEq2Y7nRruLW3HgBCS3t17iY=)
6: bjcT27Mkrmm6YUKTzHgcNPrjPBU.roa (hash: Yn0RgyPmmLSzCmXSFkvVjdwnmhf67ZsvVo3LY47XFQY=)
7: jegjWR7VprdJlP9Id7lnXfq_3BY.roa (hash: 3+QVUbiATKXjEawCpJp9FdwXwbHQPUAeJSJ9r2KyWeA=)
8: l5UHl_04bz9hmdByW-mS5aOLzVQ.roa (hash: 44oRNABvdxfx6PrHpOdx7KjJ3dNX5DY1G8L30+SPRh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:96:98:45:0f:38:67:e0:dc:10:f4:d4:15:ba:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Validity
Not Before: Nov 4 14:00:47 2025 GMT
Not After : Nov 5 14:00:47 2025 GMT
Subject: CN=28b39337a5013340b8273d3291a75d83f75a5953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a2:44:1c:a6:44:5c:ff:26:d8:b1:f6:78:8f:
27:97:db:0a:91:cc:2f:7f:9a:d6:2f:9e:2c:3a:26:
82:72:fe:27:9e:cc:6b:50:aa:ae:e5:51:9b:4b:4f:
01:ad:04:64:73:b2:1f:3c:78:86:ca:0e:94:b1:fa:
82:38:e6:05:dd:bf:2f:c9:84:8e:54:35:5d:01:f4:
75:5b:c6:70:9c:46:2d:c4:30:d6:4d:c7:f1:2c:8b:
f5:94:ff:ae:d0:8e:81:5b:b3:48:09:91:52:84:67:
d9:af:ee:98:39:fc:21:1c:40:3e:72:45:f6:38:8e:
8c:06:4b:15:80:b9:de:5d:db:c0:73:bb:64:e2:58:
8c:c1:ca:9a:96:a0:c2:9d:c4:f5:27:fb:bb:4e:c6:
0e:8d:d8:80:1d:c1:d3:d5:f4:48:49:72:d6:5e:2d:
cb:bd:00:00:33:21:8e:ea:09:d4:5a:7f:f7:28:bc:
1d:73:88:36:29:b4:4b:32:e9:32:22:22:12:42:42:
ee:9f:e5:14:ef:4d:cf:ae:de:37:69:2c:d9:80:ce:
b2:93:14:d4:c2:04:58:fb:ab:a1:16:2f:47:70:01:
e0:1f:f3:78:8c:7a:58:aa:f2:dc:ce:87:20:59:11:
65:83:64:8d:37:0e:c5:b6:2e:9a:59:c1:61:7b:0d:
3e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B3:93:37:A5:01:33:40:B8:27:3D:32:91:A7:5D:83:F7:5A:59:53
X509v3 Authority Key Identifier:
keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:6f:d0:41:b6:a2:6a:33:7e:d6:52:21:b0:30:48:5e:be:0a:
ca:52:e3:86:57:27:45:75:a5:38:e4:82:d3:9f:e5:01:4a:b9:
1b:43:72:13:fa:04:19:9d:dd:ce:67:07:0f:83:60:c7:93:c4:
4a:06:dc:fa:21:49:ec:23:94:22:dc:e1:b7:91:20:04:09:a4:
70:b9:16:11:92:70:3a:53:5b:a4:44:f2:26:73:71:8a:e8:29:
10:d4:1a:f5:aa:b7:a9:04:07:b8:73:65:3c:b2:96:e2:8a:8f:
48:cf:80:b9:8b:6c:dc:0c:d6:7b:f5:f2:5c:4f:02:a1:97:e7:
ac:b3:cc:0d:31:df:75:dd:e6:ec:48:81:01:d7:ed:a4:8a:4d:
a9:35:3c:72:7f:eb:28:83:63:c3:13:95:48:a0:41:51:38:4c:
d0:31:96:7d:83:f9:a5:81:cc:50:e7:a7:8e:18:71:ce:58:50:
ca:68:89:2e:70:a4:75:78:fc:71:8e:7b:5e:c8:f4:db:46:8b:
5c:f6:0b:4c:d7:85:aa:ca:8b:66:89:35:0f:3d:f8:f6:80:43:
4a:84:2d:5e:09:7c:db:86:c4:60:a9:b0:c6:25:58:f9:91:2e:
2b:fb:16:e4:02:c4:91:b2:74:69:95:04:3f:33:be:28:0f:4f:
d1:b4:b2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:39 2025 by rpki-client