Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
File: uNWz03nSEWLitSLEOAH7lgOYgkU.mft (raw, json)
Hash identifier: 62730a4DdBVTU8Xwc71MBj8dLNkpkb23p4IpBdjfuDE=
Subject key identifier: 47:08:CC:F9:8A:F6:58:07:9F:4F:53:AE:18:50:18:43:29:6B:D0:DD
Authority key identifier: B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45
Certificate issuer: /CN=b8d5b3d379d21162e2b522c43801fb9603988245
Certificate serial: 019A4FCFBC28021EA947FF5D71306B714A0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
Manifest number: 0E43
Signing time: Tue 04 Nov 2025 17:00:05 +0000
Manifest this update: Tue 04 Nov 2025 17:00:05 +0000
Manifest next update: Wed 05 Nov 2025 17:00:05 +0000
Files and hashes: 1: 3bdkyDOPeFMUXLwSE8-H9WsoE5Q.roa (hash: PlZdxhGvkiUhGU+GOrrf1QUy/EtgNJlhb0ER9kfhqcI=)
2: AOSq8jvRD_WKVZyPJu4LaHoHpzE.roa (hash: n60VWQlqDY23/ZNqDJ0OTIszqL0LQ9YP9uU56T6Wofs=)
3: k0wxotDmupM_OCH-gumYl6-17mo.roa (hash: 3uzjcHPmVZPolSBJCFaFe8TY8/nPe+It+9iUZVl84Zw=)
4: uNWz03nSEWLitSLEOAH7lgOYgkU.crl (hash: GSIv0A7VgIY/jDGGzD7htG1mWr7mStQVcKVQ2EvSsFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:bc:28:02:1e:a9:47:ff:5d:71:30:6b:71:4a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d5b3d379d21162e2b522c43801fb9603988245
Validity
Not Before: Nov 4 17:00:05 2025 GMT
Not After : Nov 5 17:00:05 2025 GMT
Subject: CN=4708ccf98af658079f4f53ae18501843296bd0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b9:ab:26:bc:c3:33:90:2b:15:1a:04:61:53:
dc:e5:ae:db:2b:41:61:a4:9c:51:af:3f:41:12:83:
e6:35:86:a9:38:6a:cc:ef:75:46:5a:b8:6f:aa:a9:
c8:35:0c:eb:d8:a5:d6:d3:e7:74:17:4d:ad:b1:b0:
64:c1:8a:45:fc:d9:eb:f4:06:b9:78:b5:97:b1:07:
cb:21:a6:92:79:78:3f:70:36:59:df:c0:eb:f3:57:
e8:b9:e3:34:8f:c2:5a:5f:a5:83:81:f4:e9:0d:e3:
61:e2:05:9e:c8:01:28:46:30:43:68:e7:ed:27:b2:
22:1a:7a:25:fb:8b:e4:d0:96:1b:8b:e1:dc:a4:e3:
1a:dc:77:03:9c:20:f7:87:a5:25:e4:e6:e3:de:03:
a6:69:7b:f4:28:70:3f:e4:ce:e5:86:53:0a:f8:93:
88:b3:eb:26:a2:87:43:21:89:81:7e:fe:c1:bd:7e:
4e:33:4e:1a:8a:1d:6e:2a:ad:be:96:99:ed:8e:ba:
d1:0f:00:06:db:7c:5a:cd:7a:0b:3e:eb:53:37:d2:
18:f3:96:f0:61:89:1f:ab:99:ef:8a:f8:c2:18:db:
2e:78:49:f9:3b:b4:d2:b4:76:f2:17:56:57:95:a2:
17:14:9c:fb:e0:6e:97:ff:be:20:15:34:55:78:c5:
b3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:08:CC:F9:8A:F6:58:07:9F:4F:53:AE:18:50:18:43:29:6B:D0:DD
X509v3 Authority Key Identifier:
keyid:B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:51:d0:f4:07:29:f3:ec:26:91:c5:6f:d5:1d:71:30:c4:c9:
a6:4e:13:a9:44:28:7a:ec:bc:97:2e:6c:85:94:f1:0b:0b:73:
e8:04:15:a8:2a:d0:d9:8c:5d:8a:5f:eb:4f:4e:ac:19:1e:4f:
b1:7c:1d:44:fd:d0:ba:ae:a3:90:10:d5:f6:10:db:9b:26:cb:
69:35:54:5f:ff:d3:8c:db:4c:8c:79:3e:7a:82:9f:18:b3:1e:
52:ef:e0:55:13:c4:5c:22:18:f0:ef:2d:fc:d0:e5:b9:aa:b4:
ff:11:86:0f:cc:72:98:2b:1d:c7:5d:76:83:2d:9e:4c:e2:92:
0a:c3:ef:ee:b2:c2:da:b7:fb:64:23:e7:37:0c:4a:31:86:38:
0b:e7:e1:9f:a6:b8:b9:a0:d9:d7:8c:60:59:ed:a0:9d:58:d5:
0b:d7:09:44:59:4d:9c:fc:6d:6a:9e:3a:41:dd:8d:bd:75:6c:
0c:3d:80:4a:7c:6d:b3:12:e7:15:02:53:02:b0:87:d9:97:36:
9c:5c:96:b6:ad:27:98:1a:56:47:d1:18:5b:4a:2b:20:56:fd:
14:b4:f6:b8:a4:ca:dc:38:ce:0f:34:62:e4:e4:32:d8:db:57:
7a:c4:02:ec:0f:03:f1:79:36:a0:1d:48:1c:eb:95:30:7a:b6:
84:40:4a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:37:38 2025 by rpki-client