Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft
File: uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft (raw, json)
Hash identifier: 8DXLG5wy4NPlOg4izOv+LZvO4LZM1B7J20cTpGIowL8=
Subject key identifier: 4B:C8:BD:97:68:4A:DA:34:1C:CF:F3:93:8C:D1:2C:52:FB:93:EB:1E
Authority key identifier: B9:92:F3:8B:55:BF:C1:37:BB:9E:D0:26:FA:00:33:EE:F8:FA:7D:50
Certificate issuer: /CN=b992f38b55bfc137bb9ed026fa0033eef8fa7d50
Certificate serial: 019A4E4F65D87E42DB0E635F45EEBBBB6979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft
Manifest number: 0DF3
Signing time: Tue 04 Nov 2025 10:00:17 +0000
Manifest this update: Tue 04 Nov 2025 10:00:17 +0000
Manifest next update: Wed 05 Nov 2025 10:00:17 +0000
Files and hashes: 1: eRHIy3mv3BXwoLavV3BtZjDi-Hc.roa (hash: 6bAq9inqYNzefNG/gsv4hHUEJeNDRT5tgQx9TwbA0k4=)
2: uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl (hash: AXMsP5mRmaCdgaSIJIT2uzoT1Zb1Y1R7SIzOHHTsP3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:65:d8:7e:42:db:0e:63:5f:45:ee:bb:bb:69:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b992f38b55bfc137bb9ed026fa0033eef8fa7d50
Validity
Not Before: Nov 4 10:00:17 2025 GMT
Not After : Nov 5 10:00:17 2025 GMT
Subject: CN=4bc8bd97684ada341ccff3938cd12c52fb93eb1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b9:52:27:b6:18:06:95:87:5f:c0:38:73:50:
f2:ac:26:77:2c:6d:c5:69:6e:8d:bd:5a:82:bb:87:
db:4b:ae:d6:7d:aa:82:2d:e9:b6:9e:42:7d:65:a7:
87:5c:a5:06:61:83:51:23:ba:03:32:61:2b:80:32:
b3:d9:88:7c:aa:52:1b:96:43:9d:17:0a:5f:bd:c6:
35:da:c2:61:67:c5:f2:9f:9e:c6:f5:d2:e2:dc:6f:
9a:95:bb:c4:9d:8a:2b:c6:d0:e0:90:f9:1d:27:ab:
e4:90:28:a7:b8:55:8c:57:0d:d6:40:3a:fa:08:0b:
e0:70:be:c8:58:94:b6:63:a9:7b:5e:d6:c0:17:7a:
06:41:ef:21:7e:39:32:eb:39:7b:f4:f1:1b:db:72:
5a:75:e0:bd:d7:d1:a7:5a:99:c1:cb:ca:9f:52:b7:
9a:4e:4f:b9:ab:72:4d:4d:f5:1a:c2:62:b1:01:75:
ed:77:6e:55:1c:3e:45:b7:88:38:8c:2c:2e:66:0c:
ee:55:ce:9f:56:71:27:67:ce:d1:29:79:ca:a3:fa:
3a:88:38:8a:6b:d3:9e:1f:c5:36:bb:64:db:13:15:
ef:eb:4f:48:29:d3:c4:e1:9d:fa:f2:06:0c:a8:9b:
c5:43:fe:3a:8e:31:9e:55:28:8f:e4:ce:d2:ce:e5:
4d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C8:BD:97:68:4A:DA:34:1C:CF:F3:93:8C:D1:2C:52:FB:93:EB:1E
X509v3 Authority Key Identifier:
keyid:B9:92:F3:8B:55:BF:C1:37:BB:9E:D0:26:FA:00:33:EE:F8:FA:7D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e3:1a:f0:ec:10:95:83:c5:b1:4b:c0:9a:f7:80:38:b2:c6:
db:a3:9f:77:6f:25:9d:32:f6:8e:0f:0d:12:5b:86:ae:f2:ae:
ad:f1:db:6b:c6:c7:cb:3e:66:47:48:55:a6:5d:77:9b:e7:af:
8b:b0:56:f5:1f:57:91:c5:86:31:3d:38:cd:54:f1:3e:2a:ab:
27:e4:5e:5c:cc:8e:02:11:e1:9a:60:84:c0:a6:72:5c:4b:e7:
8c:84:4f:7a:ec:55:8c:ab:e7:84:67:6a:ab:83:28:c1:0b:b2:
aa:25:11:ee:88:f2:87:70:1c:86:6d:de:a7:1a:d7:5b:32:f3:
13:89:a2:fe:ea:ee:26:df:ef:56:43:c8:70:7b:bd:d6:b3:76:
c1:ed:92:6a:32:ae:75:c4:12:24:46:f0:5d:2d:97:83:6a:ae:
43:4a:db:67:6d:42:c6:80:d1:78:9b:e0:57:e1:6f:94:60:cb:
69:89:34:1b:fd:49:51:f3:57:79:39:9a:0b:23:e4:ef:e6:0a:
7b:b5:54:d7:c2:e4:b1:4a:32:24:eb:0f:ab:00:c4:5e:7d:a0:
00:6d:40:59:9d:be:b6:96:10:30:7f:11:fd:bb:df:89:07:ec:
ae:28:a7:6c:50:da:33:22:8c:df:e5:2b:ef:b6:45:fc:83:a0:
90:7a:74:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT2XYfkLbDmNfRe67u2l5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTJmMzhiNTViZmMxMzdiYjllZDAyNmZhMDAzM2VlZjhm
YTdkNTAwHhcNMjUxMTA0MTAwMDE3WhcNMjUxMTA1MTAwMDE3WjAzMTEwLwYDVQQD
Eyg0YmM4YmQ5NzY4NGFkYTM0MWNjZmYzOTM4Y2QxMmM1MmZiOTNlYjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27lSJ7YYBpWHX8A4c1DyrCZ3LG3F
aW6NvVqCu4fbS67WfaqCLem2nkJ9ZaeHXKUGYYNRI7oDMmErgDKz2Yh8qlIblkOd
FwpfvcY12sJhZ8Xyn57G9dLi3G+albvEnYorxtDgkPkdJ6vkkCinuFWMVw3WQDr6
CAvgcL7IWJS2Y6l7XtbAF3oGQe8hfjky6zl79PEb23JadeC919GnWpnBy8qfUrea
Tk+5q3JNTfUawmKxAXXtd25VHD5Ft4g4jCwuZgzuVc6fVnEnZ87RKXnKo/o6iDiK
a9OeH8U2u2TbExXv609IKdPE4Z368gYMqJvFQ/46jjGeVSiP5M7SzuVNtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEvIvZdoSto0HM/zk4zRLFL7k+seMB8GA1UdIwQY
MBaAFLmS84tVv8E3u57QJvoAM+74+n1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpMemkxV193VGU3bnRBbS1nQXo3dmo2ZlZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iYjQ4NTQtMWM1MS00YmM3LThiMjQt
OWJjM2U1NmY3YWY3LzEvdVpMemkxV193VGU3bnRBbS1nQXo3dmo2ZlZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9iYjQ4NTQtMWM1MS00YmM3LThiMjQtOWJjM2U1NmY3YWY3
LzEvdVpMemkxV193VGU3bnRBbS1nQXo3dmo2ZlZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaOMa8OwQ
lYPFsUvAmveAOLLG26Ofd28lnTL2jg8NEluGrvKurfHba8bHyz5mR0hVpl13m+ev
i7BW9R9XkcWGMT04zVTxPiqrJ+ReXMyOAhHhmmCEwKZyXEvnjIRPeuxVjKvnhGdq
q4MowQuyqiUR7ojyh3Achm3epxrXWzLzE4mi/uruJt/vVkPIcHu91rN2we2SajKu
dcQSJEbwXS2Xg2quQ0rbZ21CxoDReJvgV+FvlGDLaYk0G/1JUfNXeTmaCyPk7+YK
e7VU18LksUoyJOsPqwDEXn2gAG1AWZ2+tpYQMH8R/bvfiQfsriinbFDaMyKM3+Ur
77ZF/IOgkHp0hw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:46 2025 by rpki-client