Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft
File: uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft (raw, json)
Hash identifier: n3B3jdB96SN9ROCTNWVKdhFxvHI5ewj3TACRLHHOM0c=
Subject key identifier: BB:60:A7:51:6E:2C:73:D2:3B:21:6C:44:9D:B1:C3:33:8A:1D:A7:75
Authority key identifier: B8:F7:F2:4D:E3:A9:E5:2C:94:C6:CA:68:03:12:44:1D:D9:C0:88:04
Certificate issuer: /CN=b8f7f24de3a9e52c94c6ca680312441dd9c08804
Certificate serial: 019A4D744CC12708A2FD63A48479506BC620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 06:00:58 +0000
Manifest this update: Tue 04 Nov 2025 06:00:58 +0000
Manifest next update: Wed 05 Nov 2025 06:00:58 +0000
Files and hashes: 1: 7jnl02v03sYUg549kXFE9hZBS9Q.roa (hash: vAWHGB1e28ce0D//4raXhcDRmRnXWhQvQ0wU2NiSE9Y=)
2: uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl (hash: Ez3/j7Iu/zTGbd0YYn8NefKiWFhPE2R2Gbj30hatrdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:4c:c1:27:08:a2:fd:63:a4:84:79:50:6b:c6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8f7f24de3a9e52c94c6ca680312441dd9c08804
Validity
Not Before: Nov 4 06:00:58 2025 GMT
Not After : Nov 5 06:00:58 2025 GMT
Subject: CN=bb60a7516e2c73d23b216c449db1c3338a1da775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:17:84:2b:8c:0b:8c:3c:8e:c4:53:d4:aa:34:
f3:f8:a0:f0:97:e1:5a:70:29:6b:8f:0a:7c:73:3e:
77:fd:17:42:ac:6b:f6:87:99:ef:89:08:61:69:55:
df:b1:3f:e3:c6:c1:4c:99:ab:7b:f2:0c:2a:47:f9:
4c:a3:9d:3d:33:ce:3b:7f:ff:12:20:90:59:99:73:
8c:08:92:92:eb:a3:98:a3:09:ec:e9:7f:4b:45:78:
96:01:91:3c:00:12:97:73:da:e1:5a:86:4f:b5:5b:
5c:70:1a:bb:8d:f4:56:91:2e:62:0a:22:7d:86:d5:
8d:0f:5e:50:72:e1:82:b8:76:73:63:e7:83:b4:7d:
b0:60:a1:8f:0b:79:b2:cf:3d:6a:ea:64:7b:44:3a:
91:25:22:eb:cd:05:cb:93:58:aa:ec:69:2a:9b:91:
d5:f0:74:17:22:57:12:97:8d:ed:e1:b7:ce:ca:a6:
43:70:04:b9:c2:d2:5f:70:c9:e6:f5:be:ef:87:ac:
51:d4:21:ce:b4:54:8b:cc:64:c5:7a:bb:92:81:ba:
ba:2f:3e:e7:39:c3:61:b2:2c:4a:c6:c8:d1:3e:29:
b6:49:ae:d0:24:fc:f1:1f:92:bf:cc:14:8e:0e:66:
c4:34:4b:e4:79:5d:b7:78:3e:27:29:57:6d:6b:9e:
51:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:60:A7:51:6E:2C:73:D2:3B:21:6C:44:9D:B1:C3:33:8A:1D:A7:75
X509v3 Authority Key Identifier:
keyid:B8:F7:F2:4D:E3:A9:E5:2C:94:C6:CA:68:03:12:44:1D:D9:C0:88:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:6c:35:1a:a1:f1:12:a7:7d:f9:11:c9:ee:dc:15:ac:28:62:
7f:c4:d3:17:08:ce:de:ab:91:20:f6:4e:0c:c0:54:8d:76:9a:
68:3e:74:12:b1:5d:cd:ce:84:4a:48:f1:d8:47:c3:d7:a9:54:
8f:c1:18:b3:75:55:73:e0:76:9a:8e:00:48:e1:ec:2a:43:ee:
de:6e:36:87:28:ae:8d:b0:ec:56:3b:8a:f3:0d:83:db:6a:81:
2c:4c:65:31:9b:84:0b:74:e0:0b:ce:34:71:63:43:cd:54:79:
4c:cb:8f:ff:06:00:99:34:32:52:db:14:22:ab:56:aa:a0:e3:
b7:55:b2:f9:bf:48:d7:83:3f:cf:0b:7b:8f:c1:d4:27:5b:ad:
a0:0d:16:6e:6f:12:d8:c3:df:81:45:37:5d:fb:bb:95:5b:b6:
f4:3e:a0:47:d8:89:3f:87:29:00:f1:7d:d6:a8:58:0b:bd:a5:
db:51:d5:99:ee:71:fc:74:60:cc:ee:16:fc:c4:f5:5c:59:d8:
69:e0:ff:c6:f1:03:4c:d9:92:b4:21:39:eb:2c:22:a2:b4:ca:
e2:f5:cb:76:d8:f3:3e:b2:02:3c:bf:12:77:78:1d:ba:81:2e:
8b:40:14:ae:3a:4e:03:f5:f4:c9:89:d4:d3:19:bd:3a:ae:9f:
82:0c:2f:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdEzBJwii/WOkhHlQa8YgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZjdmMjRkZTNhOWU1MmM5NGM2Y2E2ODAzMTI0NDFkZDlj
MDg4MDQwHhcNMjUxMTA0MDYwMDU4WhcNMjUxMTA1MDYwMDU4WjAzMTEwLwYDVQQD
EyhiYjYwYTc1MTZlMmM3M2QyM2IyMTZjNDQ5ZGIxYzMzMzhhMWRhNzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBeEK4wLjDyOxFPUqjTz+KDwl+Fa
cClrjwp8cz53/RdCrGv2h5nviQhhaVXfsT/jxsFMmat78gwqR/lMo509M847f/8S
IJBZmXOMCJKS66OYowns6X9LRXiWAZE8ABKXc9rhWoZPtVtccBq7jfRWkS5iCiJ9
htWND15QcuGCuHZzY+eDtH2wYKGPC3myzz1q6mR7RDqRJSLrzQXLk1iq7Gkqm5HV
8HQXIlcSl43t4bfOyqZDcAS5wtJfcMnm9b7vh6xR1CHOtFSLzGTFeruSgbq6Lz7n
OcNhsixKxsjRPim2Sa7QJPzxH5K/zBSODmbENEvkeV23eD4nKVdta55R6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtgp1FuLHPSOyFsRJ2xwzOKHad1MB8GA1UdIwQY
MBaAFLj38k3jqeUslMbKaAMSRB3ZwIgEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVBmeVRlT3A1U3lVeHNwb0F4SkVIZG5BaUFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xMGVhOTgtNzhiZi00ODk3LTk3NTYt
ODNmMTU2YzdlZjkyLzEvdVBmeVRlT3A1U3lVeHNwb0F4SkVIZG5BaUFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8xMGVhOTgtNzhiZi00ODk3LTk3NTYtODNmMTU2YzdlZjky
LzEvdVBmeVRlT3A1U3lVeHNwb0F4SkVIZG5BaUFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmw1GqHx
Eqd9+RHJ7twVrChif8TTFwjO3quRIPZODMBUjXaaaD50ErFdzc6ESkjx2EfD16lU
j8EYs3VVc+B2mo4ASOHsKkPu3m42hyiujbDsVjuK8w2D22qBLExlMZuEC3TgC840
cWNDzVR5TMuP/wYAmTQyUtsUIqtWqqDjt1Wy+b9I14M/zwt7j8HUJ1utoA0Wbm8S
2MPfgUU3Xfu7lVu29D6gR9iJP4cpAPF91qhYC72l21HVme5x/HRgzO4W/MT1XFnY
aeD/xvEDTNmStCE56ywiorTK4vXLdtjzPrICPL8Sd3gduoEui0AUrjpOA/X0yYnU
0xm9Oq6fggwvlg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:11:31 2025 by rpki-client