Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
File: UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft (raw, json)
Hash identifier: tfj6+HIv7mgz8ZHy8epXhi9q9+fTDQjoOCYmfGEE2ps=
Subject key identifier: 02:40:12:9C:E5:98:A4:CA:D5:2C:04:DA:DD:66:4F:32:72:09:C1:84
Authority key identifier: 52:E8:6B:14:1C:51:C6:5E:EA:BD:6E:62:EA:52:2E:DC:59:88:52:6E
Certificate issuer: /CN=52e86b141c51c65eeabd6e62ea522edc5988526e
Certificate serial: 019A50E3BA97FEF9E6F9BDF527573DE0B2AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
Manifest number: 0B1B
Signing time: Tue 04 Nov 2025 22:01:32 +0000
Manifest this update: Tue 04 Nov 2025 22:01:32 +0000
Manifest next update: Wed 05 Nov 2025 22:01:32 +0000
Files and hashes: 1: 2j26Wb_0raCGxspq8-CRAEdS8CA.roa (hash: IWSUpm2IMLrh6G4T1G4gf0s40nGd5SL/hMLUB0/qICA=)
2: UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl (hash: oZy+DAKTKmZ8ir9oWTzPO6kziDJm2viwMuSh1kXnvOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:ba:97:fe:f9:e6:f9:bd:f5:27:57:3d:e0:b2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e86b141c51c65eeabd6e62ea522edc5988526e
Validity
Not Before: Nov 4 22:01:32 2025 GMT
Not After : Nov 5 22:01:32 2025 GMT
Subject: CN=0240129ce598a4cad52c04dadd664f327209c184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e6:d4:2f:b9:d1:e5:ef:fa:0e:55:b2:0f:22:
d9:85:6b:d7:0e:91:ed:70:fc:6d:3f:87:2a:62:d4:
de:21:91:85:93:5c:d6:75:56:6a:ab:97:63:17:31:
24:e4:7e:bf:0b:54:6e:bd:60:0b:80:a0:2b:ff:ed:
58:a1:e3:79:36:6f:6c:08:3b:a7:3a:e2:83:87:20:
63:f0:7a:62:3b:a6:0b:7d:5f:04:52:0f:41:80:43:
26:2f:11:b1:57:75:6e:bb:0b:54:0f:37:e7:33:9f:
92:65:f5:47:1b:c9:93:f3:94:54:a0:e1:3b:4f:d3:
02:29:29:c2:03:c5:b0:42:92:92:76:3e:d2:f8:52:
9f:f5:d7:a9:15:5d:d6:21:e4:8f:4c:34:53:0a:7c:
3d:54:ee:34:50:ce:3c:14:9c:8d:31:5b:a1:70:12:
1e:64:c8:bf:99:37:53:66:ac:1a:50:05:89:01:52:
80:16:c5:39:c8:4e:aa:77:3a:0a:79:ee:30:7f:f1:
6a:f0:13:de:17:9b:85:78:de:f0:d2:9f:e8:6f:40:
38:33:c0:91:3d:fd:6a:d4:56:a7:ce:2b:14:9d:06:
2e:76:a6:42:41:1c:a6:e8:fd:11:9a:0a:74:02:a5:
58:02:aa:de:63:ba:77:0e:34:6b:3f:77:31:52:50:
e7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:40:12:9C:E5:98:A4:CA:D5:2C:04:DA:DD:66:4F:32:72:09:C1:84
X509v3 Authority Key Identifier:
keyid:52:E8:6B:14:1C:51:C6:5E:EA:BD:6E:62:EA:52:2E:DC:59:88:52:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:cb:65:65:66:74:9b:4c:4e:30:d8:b0:f7:0b:55:30:20:e4:
7c:90:b0:e0:09:27:92:cd:87:89:be:73:39:6f:0a:2c:a5:6b:
6e:af:fa:86:ec:83:97:d8:12:c6:06:f8:2a:1b:45:64:00:b6:
5a:68:89:3d:5f:8e:ba:29:33:0a:2e:28:45:61:27:50:90:ac:
22:66:eb:a5:0d:3b:6b:1e:82:8e:7c:bc:52:dd:eb:e8:84:91:
3a:3e:55:61:91:3e:16:1e:56:31:72:ec:c3:4b:5c:9f:d2:71:
c5:ae:7a:76:01:12:88:37:2a:68:d6:62:ea:72:c9:7a:ef:bc:
75:10:95:49:7d:91:47:7a:b3:f5:db:82:6d:8d:56:a0:94:b5:
f7:fa:84:16:a6:1f:06:66:26:60:56:6f:f1:c6:68:fe:2b:58:
b9:d4:5b:e0:f2:b9:87:d8:b1:c8:21:39:4f:00:0f:bb:df:8d:
8c:25:76:fb:2b:38:4c:59:c5:84:99:d0:78:34:7d:89:ab:cf:
c0:9e:c4:f3:e5:39:e3:0a:b4:7c:70:bb:54:57:d6:15:74:23:
f8:d0:76:5f:aa:c1:f2:d7:76:ee:0f:d1:c6:14:8e:97:ce:c6:
d5:12:35:82:6c:2c:6a:f2:b6:fa:fd:17:28:94:80:31:5f:9d:
5a:fd:a1:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ47qX/vnm+b31J1c94LKvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZTg2YjE0MWM1MWM2NWVlYWJkNmU2MmVhNTIyZWRjNTk4
ODUyNmUwHhcNMjUxMTA0MjIwMTMyWhcNMjUxMTA1MjIwMTMyWjAzMTEwLwYDVQQD
EygwMjQwMTI5Y2U1OThhNGNhZDUyYzA0ZGFkZDY2NGYzMjcyMDljMTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsObUL7nR5e/6DlWyDyLZhWvXDpHt
cPxtP4cqYtTeIZGFk1zWdVZqq5djFzEk5H6/C1RuvWALgKAr/+1YoeN5Nm9sCDun
OuKDhyBj8HpiO6YLfV8EUg9BgEMmLxGxV3VuuwtUDzfnM5+SZfVHG8mT85RUoOE7
T9MCKSnCA8WwQpKSdj7S+FKf9depFV3WIeSPTDRTCnw9VO40UM48FJyNMVuhcBIe
ZMi/mTdTZqwaUAWJAVKAFsU5yE6qdzoKee4wf/Fq8BPeF5uFeN7w0p/ob0A4M8CR
Pf1q1FanzisUnQYudqZCQRym6P0Rmgp0AqVYAqreY7p3DjRrP3cxUlDnFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJAEpzlmKTK1SwE2t1mTzJyCcGEMB8GA1UdIwQY
MBaAFFLoaxQcUcZe6r1uYupSLtxZiFJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXVockZCeFJ4bDdxdlc1aTZsSXUzRm1JVW00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81ZjQ1YTUtNzI4OC00NTM3LTg5ZGQt
YzY4N2U3OTJiMjVkLzEvVXVockZCeFJ4bDdxdlc1aTZsSXUzRm1JVW00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC81ZjQ1YTUtNzI4OC00NTM3LTg5ZGQtYzY4N2U3OTJiMjVk
LzEvVXVockZCeFJ4bDdxdlc1aTZsSXUzRm1JVW00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj8tlZWZ0
m0xOMNiw9wtVMCDkfJCw4Aknks2Hib5zOW8KLKVrbq/6huyDl9gSxgb4KhtFZAC2
WmiJPV+OuikzCi4oRWEnUJCsImbrpQ07ax6Cjny8Ut3r6ISROj5VYZE+Fh5WMXLs
w0tcn9Jxxa56dgESiDcqaNZi6nLJeu+8dRCVSX2RR3qz9duCbY1WoJS19/qEFqYf
BmYmYFZv8cZo/itYudRb4PK5h9ixyCE5TwAPu9+NjCV2+ys4TFnFhJnQeDR9iavP
wJ7E8+U54wq0fHC7VFfWFXQj+NB2X6rB8td27g/RxhSOl87G1RI1gmwsavK2+v0X
KJSAMV+dWv2h4A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:54:51 2025 by rpki-client