Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
File: pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft (raw, json)
Hash identifier: 3GczG7pVSoRRY1jRA5cONFdUC6oegLYun62ejs2smrg=
Subject key identifier: BF:CF:21:11:FD:93:59:67:58:95:A2:5B:69:6E:83:11:F9:11:0B:0B
Authority key identifier: A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
Certificate issuer: /CN=a5472b1473bc781b70440315c83d119c8abc86fc
Certificate serial: 019A4F2AE93FD0E4BB3C56FE72522679A58D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
Manifest number: 1468
Signing time: Tue 04 Nov 2025 14:00:03 +0000
Manifest this update: Tue 04 Nov 2025 14:00:03 +0000
Manifest next update: Wed 05 Nov 2025 14:00:03 +0000
Files and hashes: 1: 2fiCKenUyZEGcgyEcbC3Fxz5B0o.roa (hash: C3sRzOd2/ABXN5AYlIy2eOFDIIGwTRNmpvXK9lls8wk=)
2: FKocTxCwOpTwhx81CYxQkqkOggY.roa (hash: 4ohmnB8YwygbCXyKutj9jSnUxcPLc8vBK0YjqJ6KB28=)
3: pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl (hash: D9bImiYx2MSVb37sTIaOClrso3frPhRmVqag2x7RJSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2a:e9:3f:d0:e4:bb:3c:56:fe:72:52:26:79:a5:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5472b1473bc781b70440315c83d119c8abc86fc
Validity
Not Before: Nov 4 14:00:03 2025 GMT
Not After : Nov 5 14:00:03 2025 GMT
Subject: CN=bfcf2111fd9359675895a25b696e8311f9110b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:18:c6:bf:08:c8:3d:14:c7:26:e4:b4:04:1e:
0f:cb:20:b1:cf:75:32:f8:21:80:48:57:93:25:b9:
e0:5f:96:1c:bc:c7:7e:62:5a:d1:1e:2c:9e:1a:a6:
3f:fa:a5:9e:a9:ef:d0:44:1f:f6:37:f2:04:89:ec:
c0:eb:5c:6d:20:74:33:39:29:fd:f7:c3:74:98:4b:
7e:56:ee:fb:c8:74:c1:b6:96:59:7d:08:f4:82:10:
c2:f1:75:d1:5a:2c:77:fa:c4:3a:22:24:51:c4:62:
fd:d2:79:ff:a0:b1:e4:36:c8:fa:3b:4e:01:dc:ec:
54:04:a2:8e:3e:d4:06:aa:ef:52:e7:b6:0b:16:8b:
5d:75:46:30:92:2e:4c:6a:97:d0:c4:0f:c0:41:20:
84:60:30:e7:62:85:1d:fe:5e:55:95:1b:7b:a9:de:
81:13:4c:6e:a2:4f:76:1a:07:fd:97:73:fc:43:42:
2d:5a:70:0d:87:9b:03:7c:15:33:a8:6c:aa:dd:ca:
86:87:a0:a1:43:1e:86:10:d1:d3:e2:b3:67:a0:01:
52:48:3b:58:d6:6e:46:44:4e:e5:ea:83:f1:94:65:
de:7c:01:65:a0:d1:d6:70:a7:cf:d5:fd:2d:4e:45:
d9:e3:76:81:7c:0f:b7:a9:2d:31:09:6f:0d:50:4c:
ee:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CF:21:11:FD:93:59:67:58:95:A2:5B:69:6E:83:11:F9:11:0B:0B
X509v3 Authority Key Identifier:
keyid:A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:43:f0:71:a2:09:3a:b2:f9:73:32:a5:dc:1d:5f:33:67:d5:
40:22:98:14:70:17:a4:bd:a8:d2:ea:3a:11:f9:df:85:de:43:
17:d2:dc:9e:aa:0a:28:ab:99:6c:47:b8:73:23:f8:e8:62:04:
c6:85:a3:91:50:8c:57:f8:f1:9f:b9:19:15:78:23:69:c3:c1:
e0:e2:c2:fb:b5:8c:ca:94:66:dc:19:75:d5:d9:af:01:67:6b:
27:92:02:73:8a:24:dd:78:80:5f:9b:8c:08:45:88:b1:e7:7c:
f5:ba:7c:85:02:46:e6:2b:b8:db:9c:2b:99:9d:83:17:11:bb:
bf:dc:97:d0:70:de:af:f2:0c:ea:96:49:ca:05:77:2d:c9:26:
44:ad:79:d4:25:69:a4:5a:7b:ab:71:fa:f2:25:d3:ea:36:0d:
3d:94:20:11:e9:e9:79:0f:f2:ed:92:0b:85:c2:5e:d9:8b:62:
b0:97:60:f5:98:e6:8c:cf:af:d7:9e:a2:68:ff:10:0d:85:4f:
b9:97:4d:2c:b5:c8:ea:01:b5:5f:d5:79:69:c3:3f:2e:3d:24:
0e:09:0b:f2:9f:72:f1:f0:0e:9e:8e:0f:e1:a6:fe:da:b7:db:
5b:61:7a:60:44:74:01:49:2e:f6:02:88:b6:7a:50:30:a0:1d:
6b:dd:77:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:31:36 2025 by rpki-client