Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
File: uji5p2P2XAJ6o92th8GI2nikvZc.mft (raw, json)
Hash identifier: cUkcW59FpxU01r2TJf0mEksxzelrLbuZsN8jQD7Kywk=
Subject key identifier: C4:83:B4:21:29:AF:C2:A8:67:D8:1A:5B:4B:14:79:16:12:8C:8E:FE
Authority key identifier: BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97
Certificate issuer: /CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97
Certificate serial: 019A4D74137DBAC86A5091ABC80D59FB3F14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 06:00:44 +0000
Manifest this update: Tue 04 Nov 2025 06:00:44 +0000
Manifest next update: Wed 05 Nov 2025 06:00:44 +0000
Files and hashes: 1: uji5p2P2XAJ6o92th8GI2nikvZc.crl (hash: a+ZlFdhK6nenvLifK0J3ERL2/HSJ/I5XNNL3O9shvyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:13:7d:ba:c8:6a:50:91:ab:c8:0d:59:fb:3f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97
Validity
Not Before: Nov 4 06:00:44 2025 GMT
Not After : Nov 5 06:00:44 2025 GMT
Subject: CN=c483b42129afc2a867d81a5b4b147916128c8efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8c:fc:79:31:04:46:26:5b:c4:60:28:cb:d7:
61:74:ee:22:70:1e:9c:4e:40:2c:10:32:3a:6e:5f:
a2:32:fb:a6:0b:54:1b:8f:78:e1:2f:74:fa:a3:ea:
3e:51:2f:f9:44:7e:46:9d:c4:d9:60:6c:15:16:a9:
a1:b6:70:1f:18:b9:84:30:16:de:2e:15:45:e8:6f:
34:87:95:19:8f:51:34:09:23:24:04:f6:9d:c2:4c:
96:a9:b6:d7:6f:64:7d:79:d9:6a:0c:f0:7e:48:2a:
b1:c8:94:fd:6f:95:f6:8c:f6:89:87:8b:18:35:25:
66:35:17:c0:ff:6c:cb:8e:36:65:94:f5:6c:fb:65:
26:3f:7a:de:d0:99:6b:34:35:77:74:a1:de:10:23:
66:eb:cb:25:ee:92:bc:a2:d9:d6:15:ee:bd:0f:bb:
70:95:36:04:b5:dc:37:81:e3:b0:e6:d7:52:2a:65:
27:a8:76:d8:d7:e4:af:df:8e:02:b9:24:32:df:d4:
2b:ac:f2:48:aa:6f:08:32:cc:c3:d5:57:63:38:44:
16:66:cf:ac:16:92:07:26:92:c5:c5:8d:d7:26:68:
74:0e:0a:e1:ed:a8:62:26:e6:3f:8e:96:e2:43:66:
ac:60:3d:88:5e:b0:34:ba:6b:40:67:18:ee:3f:90:
4d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:83:B4:21:29:AF:C2:A8:67:D8:1A:5B:4B:14:79:16:12:8C:8E:FE
X509v3 Authority Key Identifier:
keyid:BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:7c:e9:ef:06:32:27:cb:00:57:b7:fa:34:59:fe:d0:5c:48:
f1:a1:73:4b:ba:08:a2:ec:b9:5c:e6:2a:02:b7:3e:36:03:97:
c0:4a:ae:58:48:0b:59:ac:53:9c:27:de:31:5b:00:66:b9:67:
2f:a4:cd:71:04:20:fc:c3:13:75:3b:80:ac:46:a4:e3:92:78:
2b:0d:8d:57:0a:3c:f3:ff:44:bb:be:3e:e4:f9:07:59:4c:59:
f1:13:55:e5:2c:df:9e:00:45:7e:b8:1d:1c:1a:63:89:8a:54:
9d:e4:90:3b:2f:ae:61:bc:d4:bb:11:20:8c:cc:0b:54:d8:d7:
dd:5c:3c:0b:df:be:d8:e4:b0:dd:e2:c8:7f:ca:61:ef:ef:e9:
b8:bd:0c:af:b8:1a:aa:b0:63:07:13:ca:fd:bc:d2:92:1b:44:
6b:5f:4e:55:01:57:ed:56:c1:80:db:bc:cd:58:40:db:51:af:
40:b2:e1:cb:98:1a:f6:e7:43:01:12:a0:3c:22:32:25:c7:a9:
34:c2:f7:7d:b5:62:33:94:71:2f:dd:f1:a4:23:44:fd:35:e6:
93:a0:38:26:f8:7c:8f:93:5f:c8:45:27:2f:25:a2:5a:e8:05:
9c:e3:fb:09:21:00:00:83:4c:dc:be:26:1d:92:a9:67:7d:03:
fa:31:30:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdBN9ushqUJGryA1Z+z8UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhMzhiOWE3NjNmNjVjMDI3YWEzZGRhZDg3YzE4OGRhNzhh
NGJkOTcwHhcNMjUxMTA0MDYwMDQ0WhcNMjUxMTA1MDYwMDQ0WjAzMTEwLwYDVQQD
EyhjNDgzYjQyMTI5YWZjMmE4NjdkODFhNWI0YjE0NzkxNjEyOGM4ZWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIz8eTEERiZbxGAoy9dhdO4icB6c
TkAsEDI6bl+iMvumC1Qbj3jhL3T6o+o+US/5RH5GncTZYGwVFqmhtnAfGLmEMBbe
LhVF6G80h5UZj1E0CSMkBPadwkyWqbbXb2R9edlqDPB+SCqxyJT9b5X2jPaJh4sY
NSVmNRfA/2zLjjZllPVs+2UmP3re0JlrNDV3dKHeECNm68sl7pK8otnWFe69D7tw
lTYEtdw3geOw5tdSKmUnqHbY1+Sv344CuSQy39QrrPJIqm8IMszD1VdjOEQWZs+s
FpIHJpLFxY3XJmh0Dgrh7ahiJuY/jpbiQ2asYD2IXrA0umtAZxjuP5BNbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSDtCEpr8KoZ9gaW0sUeRYSjI7+MB8GA1UdIwQY
MBaAFLo4uadj9lwCeqPdrYfBiNp4pL2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWppNXAyUDJYQUo2bzkydGg4R0kybmlrdlpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8zZDY3MmQtNDY3NS00NjcxLTgxYzEt
NjBmN2Y4N2M3N2U2LzEvdWppNXAyUDJYQUo2bzkydGg4R0kybmlrdlpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8zZDY3MmQtNDY3NS00NjcxLTgxYzEtNjBmN2Y4N2M3N2U2
LzEvdWppNXAyUDJYQUo2bzkydGg4R0kybmlrdlpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQHzp7wYy
J8sAV7f6NFn+0FxI8aFzS7oIouy5XOYqArc+NgOXwEquWEgLWaxTnCfeMVsAZrln
L6TNcQQg/MMTdTuArEak45J4Kw2NVwo88/9Eu74+5PkHWUxZ8RNV5SzfngBFfrgd
HBpjiYpUneSQOy+uYbzUuxEgjMwLVNjX3Vw8C9++2OSw3eLIf8ph7+/puL0Mr7ga
qrBjBxPK/bzSkhtEa19OVQFX7VbBgNu8zVhA21GvQLLhy5ga9udDARKgPCIyJcep
NML3fbViM5RxL93xpCNE/TXmk6A4Jvh8j5NfyEUnLyWiWugFnOP7CSEAAINM3L4m
HZKpZ30D+jEwUA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:20:22 2025 by rpki-client