Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
File: Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft (raw, json)
Hash identifier: FmbkRShNRNESZkfuyjrjseXNnnkkiVjHweuHP+lqLxA=
Subject key identifier: 66:FE:D3:4D:B0:99:30:39:64:9E:1E:EE:03:5D:9B:02:D7:2A:F8:8B
Authority key identifier: 51:CF:73:2A:8A:74:39:E9:28:0F:23:EF:57:84:98:14:AF:19:5A:E0
Certificate issuer: /CN=51cf732a8a7439e9280f23ef57849814af195ae0
Certificate serial: 019A500123A9D6D4A6CD60157A9249326CE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
Manifest number: 0D79
Signing time: Tue 04 Nov 2025 17:54:03 +0000
Manifest this update: Tue 04 Nov 2025 17:54:03 +0000
Manifest next update: Wed 05 Nov 2025 17:54:03 +0000
Files and hashes: 1: BxbiyrTa2KmVP8MJDnNvE4L1M8I.roa (hash: fihL1h/kI4OpAJJZ9gtR+wrj5VlNpr/uxbRG0A/1OvE=)
2: Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl (hash: lgo/xTE56EfTjiRBV2QwQQ1X2J9YiEZoeJlRXemqcOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:01:23:a9:d6:d4:a6:cd:60:15:7a:92:49:32:6c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51cf732a8a7439e9280f23ef57849814af195ae0
Validity
Not Before: Nov 4 17:54:03 2025 GMT
Not After : Nov 5 17:54:03 2025 GMT
Subject: CN=66fed34db0993039649e1eee035d9b02d72af88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2c:ea:77:0a:86:8c:44:84:84:d1:52:97:2d:
57:8f:e6:40:6b:fd:64:0f:03:f3:d7:d7:24:cd:35:
34:2e:b1:06:e9:12:45:8b:42:93:ff:4b:ab:e7:7c:
8b:59:e8:a7:e3:93:0b:f0:e9:12:2c:b0:1f:4f:55:
db:69:07:20:bf:6f:ef:29:4d:48:f3:72:91:15:5a:
3b:3e:5b:78:88:ff:0d:c7:96:86:38:cd:fc:bf:4d:
ce:93:95:bc:b1:f9:1d:aa:e3:de:65:f4:b4:83:80:
60:4f:c0:49:91:6e:e0:d1:e1:a5:3f:58:15:b5:d7:
4f:4f:99:ea:7a:ac:5a:0e:fc:fd:69:51:55:63:24:
6e:b2:8b:28:b8:1c:9a:f5:02:03:06:b8:65:21:a8:
0a:15:11:78:51:4e:7b:e6:87:66:0a:1b:0b:3b:c6:
46:ef:9c:08:15:bb:2e:d5:fd:56:1b:2b:c7:17:d8:
a4:bb:fd:e5:b5:51:0d:e1:e3:fd:2c:82:dd:75:ac:
5d:14:ca:35:2b:01:29:4f:a2:36:07:59:0e:38:44:
f8:75:a4:d3:be:40:34:b6:99:84:5d:80:1a:5e:5b:
25:98:31:65:d7:84:81:97:e4:7b:93:31:99:d4:90:
0c:17:a5:cd:fc:15:d7:fd:cf:79:21:c3:f9:93:f1:
e0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FE:D3:4D:B0:99:30:39:64:9E:1E:EE:03:5D:9B:02:D7:2A:F8:8B
X509v3 Authority Key Identifier:
keyid:51:CF:73:2A:8A:74:39:E9:28:0F:23:EF:57:84:98:14:AF:19:5A:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:85:5b:ef:0b:a6:43:8c:10:6f:15:a5:6a:27:d5:02:3d:c0:
ba:32:de:f3:92:b1:b7:96:89:2d:19:82:f3:25:96:58:ce:ab:
27:e7:f6:73:a8:f7:1b:96:28:d7:72:21:7b:42:3f:53:c1:73:
26:15:23:fb:8f:4a:ba:9d:1f:32:0b:4e:ee:94:af:73:f8:a5:
a0:b7:f0:e7:8f:9c:cd:d9:fc:ac:0d:bc:76:37:3c:ec:58:c2:
42:a8:b3:75:9d:cf:3e:44:95:94:4d:53:e7:a1:cb:97:d3:97:
3b:f5:c9:96:5c:34:79:e9:4c:76:25:a4:a8:d4:0d:76:76:97:
06:65:f6:00:ef:82:60:28:cb:25:33:d8:b8:13:be:96:c4:d3:
d5:2f:e7:d9:c3:1a:78:31:c1:26:4c:0b:c6:8d:be:15:9f:fe:
a6:5f:99:27:3f:05:42:99:81:a9:28:4b:3c:57:a4:ce:91:29:
d3:b2:08:81:b6:d4:8f:d5:40:2b:6e:e4:bf:11:17:96:39:06:
03:62:86:ca:42:ff:a7:4a:c2:26:c0:c0:d4:38:39:b4:fc:f9:
93:0a:93:e5:1b:fa:74:52:26:f3:7b:0d:19:4a:c6:62:3f:02:
02:9b:c8:f5:9e:e8:5d:19:c8:3a:f7:cb:6b:b5:cf:8e:3e:1e:
99:60:7f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:41:21 2025 by rpki-client