Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
File: UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft (raw, json)
Hash identifier: vygw6PcOYtrj+yqik2IOzTCUO1CpDXVtokKSftLPFZw=
Subject key identifier: 61:2F:E6:FE:19:95:54:64:AC:5A:0D:B5:77:8E:98:CF:43:A1:01:E1
Authority key identifier: 53:31:66:E3:F7:09:FB:3B:AC:A9:AE:79:AC:BE:C6:CA:1D:0F:C5:03
Certificate issuer: /CN=533166e3f709fb3baca9ae79acbec6ca1d0fc503
Certificate serial: 019A4E86C811574A6241043F085280DEE416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
Manifest number: 05C6
Signing time: Tue 04 Nov 2025 11:00:47 +0000
Manifest this update: Tue 04 Nov 2025 11:00:47 +0000
Manifest next update: Wed 05 Nov 2025 11:00:47 +0000
Files and hashes: 1: JfX_uE4ZrNpyAWrN6XZ19h68cHI.roa (hash: von2tcOSfatHPq0+8nIPwywF9HUMabxhy1Hbp0s6xOY=)
2: UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl (hash: Nwlj3xPYaCOhKqlDK7kEjcGn7yQvdg2+Acge+jxrCMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:c8:11:57:4a:62:41:04:3f:08:52:80:de:e4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533166e3f709fb3baca9ae79acbec6ca1d0fc503
Validity
Not Before: Nov 4 11:00:47 2025 GMT
Not After : Nov 5 11:00:47 2025 GMT
Subject: CN=612fe6fe19955464ac5a0db5778e98cf43a101e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2f:84:14:fd:55:77:44:72:85:73:9f:06:8b:
0e:c3:c7:ce:69:90:fc:c7:69:bb:22:e5:5d:f6:59:
63:07:94:5c:13:a8:fd:99:e0:2d:6f:ad:75:89:28:
08:b9:64:50:bd:14:70:22:c9:86:ba:9f:68:7a:82:
df:9d:83:ea:65:a3:7b:56:40:1f:ca:5a:25:bb:50:
0e:82:33:a8:09:1b:ac:fd:0c:9e:24:a1:55:e7:e4:
51:7e:37:47:d2:26:57:96:3b:25:38:ea:39:c3:ce:
8c:88:d4:30:7d:0a:23:e6:27:9e:9d:11:74:c2:78:
d9:d4:9c:2b:ce:4e:02:d9:67:f3:2a:aa:fa:a6:9e:
85:5c:d4:8a:53:f8:18:e4:8a:34:6a:05:3d:85:ae:
b5:e9:3c:46:20:7a:7c:c5:b3:f7:4c:61:5a:43:e1:
cb:3c:1a:39:8c:aa:6b:74:8c:6e:d0:9d:92:6c:63:
8a:32:24:80:39:59:13:77:2e:7a:3c:32:97:86:7a:
29:14:bc:d5:70:31:27:e9:c3:78:13:a9:71:80:f3:
36:09:82:06:14:34:0f:30:d8:b4:32:b3:82:cb:29:
b5:7a:75:9c:d7:ee:45:fa:60:e5:4d:bf:47:c7:e2:
9e:f2:7f:e4:ed:66:1d:92:41:2d:4f:fb:b0:da:36:
12:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2F:E6:FE:19:95:54:64:AC:5A:0D:B5:77:8E:98:CF:43:A1:01:E1
X509v3 Authority Key Identifier:
keyid:53:31:66:E3:F7:09:FB:3B:AC:A9:AE:79:AC:BE:C6:CA:1D:0F:C5:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:73:34:21:c0:7f:fb:92:51:4d:55:b4:d0:b8:a6:bc:91:99:
4f:86:87:96:b1:46:7a:23:3b:98:88:a5:05:e7:69:7e:60:91:
41:97:9c:50:e9:6f:a9:37:d1:9a:7a:20:8e:44:c4:ad:ba:bc:
3e:92:43:31:1f:37:34:2e:7d:41:d1:f4:aa:ab:95:53:4a:bf:
9c:20:be:a4:eb:62:00:4d:85:77:c1:ed:13:ff:9e:d5:48:de:
13:28:ea:4c:ce:fe:12:8b:ee:00:36:e8:6c:5c:9b:4a:6c:69:
27:a3:2c:8d:53:8b:37:19:8d:00:2a:27:01:42:e1:65:e0:ca:
dd:d1:f7:87:79:d2:fb:c8:cc:31:52:72:e8:f0:65:8a:94:ee:
3d:aa:1b:6f:08:84:3d:92:42:4b:76:45:cb:ad:18:a8:17:a3:
42:fd:54:ed:07:33:3b:3a:eb:44:2d:e4:cb:40:64:02:09:2e:
9f:6d:57:df:8f:a7:6b:bd:8d:0a:23:9e:21:a6:e8:f5:d1:93:
27:d5:81:f4:d1:e6:9d:c2:20:b1:84:99:67:b1:64:51:2a:14:
30:9c:25:fb:9d:70:1f:0b:38:cd:76:f0:4f:0b:51:29:38:51:
ed:31:18:85:a5:ad:de:c7:cd:79:29:0d:c5:08:76:f8:24:e2:
89:8d:f8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:22:21 2025 by rpki-client