Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
File: uGnuZhZNPLQdvS31QXgXwy9M6gU.mft (raw, json)
Hash identifier: 8Ec3ESPC4AW24M7ORxQw6ocgVvs+yO7Gf3GggrIRihc=
Subject key identifier: AC:1E:19:32:B3:DA:BE:3A:96:2D:1F:AB:83:35:AD:BB:D7:3E:EB:E4
Authority key identifier: B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05
Certificate issuer: /CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
Certificate serial: 019A4DE1A8EC864635302F2B4BB1ECC34FC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 08:00:25 +0000
Manifest this update: Tue 04 Nov 2025 08:00:25 +0000
Manifest next update: Wed 05 Nov 2025 08:00:25 +0000
Files and hashes: 1: 2hZweGDLaTOG9__dBEdUkTtfsSw.roa (hash: x2mvxEnLHZTwd7sK9WWW9RrPHq1tkRpvzUBh9hY6j6E=)
2: YKs5bmFUVAk0U3c65JyA-yx_ru8.roa (hash: /iSRIEZxHR2KYrSfKlv13GZuPtZZ9il7XqwpwVFRwXE=)
3: uGnuZhZNPLQdvS31QXgXwy9M6gU.crl (hash: lkR2bzW3iP7y+KcEYWf2gBhGxXnDVgOpYmxXD4z6eZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:a8:ec:86:46:35:30:2f:2b:4b:b1:ec:c3:4f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
Validity
Not Before: Nov 4 08:00:25 2025 GMT
Not After : Nov 5 08:00:25 2025 GMT
Subject: CN=ac1e1932b3dabe3a962d1fab8335adbbd73eebe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:53:89:8d:c5:76:80:2f:3d:49:85:4d:c5:27:
5a:e9:8a:48:98:8d:10:36:35:40:76:75:f3:dd:00:
21:e3:e6:a6:88:50:9d:10:8d:bb:7f:3f:fd:11:8a:
de:ab:b3:32:1d:b7:8e:c8:70:af:79:86:44:ba:17:
bd:50:95:2c:08:a0:2e:9a:c7:90:95:63:7c:83:4c:
00:80:f3:11:b0:37:0f:80:2d:c0:0d:9f:11:f8:a3:
d5:47:71:fe:6f:43:e2:40:e6:4d:66:02:e7:ec:50:
60:3e:69:85:07:ff:0e:b9:8f:1f:b4:fe:8e:c4:11:
cf:fb:a7:99:f6:c3:74:67:7f:13:83:da:86:6b:f2:
13:a3:fb:27:0c:9b:05:67:ae:d5:3b:27:b1:e6:42:
0a:c3:59:33:84:4d:93:ed:39:70:36:55:94:4c:a3:
c8:33:b8:66:31:e0:b8:d3:4c:d3:d1:1f:15:fb:3d:
79:61:d1:d1:1b:68:d3:b2:74:73:c1:5f:b8:5c:94:
a9:1d:20:ce:89:65:c0:63:1e:26:e8:da:35:1d:0b:
a6:fd:82:39:80:51:c7:36:95:46:78:6c:b4:28:c7:
c9:1b:6e:18:1d:78:23:e8:6a:e1:c4:69:e3:32:66:
c0:f7:ee:92:91:82:4e:65:7c:a7:ba:71:c0:4e:24:
77:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1E:19:32:B3:DA:BE:3A:96:2D:1F:AB:83:35:AD:BB:D7:3E:EB:E4
X509v3 Authority Key Identifier:
keyid:B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:4d:6b:3d:a8:cc:e4:f0:18:04:59:b6:75:8f:8e:ca:ce:80:
dc:c0:ff:ca:e5:22:96:ad:20:09:af:4c:18:ea:cf:74:73:48:
74:a4:c8:8e:f6:98:98:6c:84:04:23:cc:83:57:e8:eb:da:99:
d0:d2:3d:c3:0c:a3:d2:2a:60:4d:5e:a7:93:4f:89:df:72:9b:
f3:f4:e3:01:d4:7a:98:ab:c2:52:d0:ea:ec:7d:a5:a6:ea:80:
2d:e6:51:a2:54:90:94:e4:89:e8:30:0c:1f:50:46:ce:8c:96:
01:fc:92:88:3d:0e:d6:1c:a1:7a:f6:d7:f8:47:d5:79:ae:3c:
f9:07:35:82:45:56:80:4f:a5:c4:1d:84:e8:21:63:bf:8d:eb:
7c:10:58:9f:52:bb:9c:13:b3:3e:2f:86:1e:47:2c:36:09:bc:
24:c7:ea:83:a9:c1:eb:7e:83:4d:98:b4:06:da:a8:f3:79:a0:
9b:94:ae:e5:0f:fd:46:18:79:71:00:6b:73:f3:a8:18:2f:7c:
39:ae:d3:64:83:b1:b0:a1:26:42:69:49:ec:cd:bc:1a:7b:6a:
42:a4:6e:76:42:51:a8:af:4c:70:7b:cc:f3:48:b2:59:8f:40:
3e:19:07:79:2b:d7:c5:b0:8c:4d:53:75:89:6e:c8:01:0a:df:
53:be:9e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:21:18 2025 by rpki-client