Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
File: ukxoXvpqLBBFY38CejJcCux5wBU.mft (raw, json)
Hash identifier: ugH43jCzlQ42LzIErx0EM7uWCywwZqrmZZEOw/uTMMU=
Subject key identifier: D3:30:80:BA:BF:F5:10:9F:97:A2:C4:69:93:A6:84:DA:ED:FF:46:E5
Authority key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
Certificate issuer: /CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Certificate serial: 019A4EF5993D07AD1CC357E5AECDAD4D9E0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
Manifest number: 0AD3
Signing time: Tue 04 Nov 2025 13:01:49 +0000
Manifest this update: Tue 04 Nov 2025 13:01:49 +0000
Manifest next update: Wed 05 Nov 2025 13:01:49 +0000
Files and hashes: 1: VJzfvUbstsweL94z-ivJL9s3ZVk.roa (hash: HgLrKuozmz+yIcpW2tKbtdhcaLEc8ycsnDPCev84zDI=)
2: ukxoXvpqLBBFY38CejJcCux5wBU.crl (hash: u45C2VXOnFCGMY+2ZAHkC2J95cQL483N1W/TGg7fwSQ=)
3: ztUZv3t98zDrlPZTo-laONZjQE0.roa (hash: PyD/IDN5pwT/Z2dKrNt4DPnNuO7P4KGHdjRKj7cSR1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:99:3d:07:ad:1c:c3:57:e5:ae:cd:ad:4d:9e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Validity
Not Before: Nov 4 13:01:49 2025 GMT
Not After : Nov 5 13:01:49 2025 GMT
Subject: CN=d33080babff5109f97a2c46993a684daedff46e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c8:d3:d7:89:b1:c8:49:47:51:71:c7:c8:91:
a9:a8:fc:57:64:13:fc:19:c9:8d:51:ab:1a:46:e4:
cf:b0:f3:0f:84:98:a9:f0:e3:c1:39:55:88:2f:57:
46:e5:52:7f:cb:36:97:8a:0e:49:fa:9e:84:73:78:
75:f5:31:f7:eb:af:1c:b8:60:62:28:da:25:85:5f:
4a:ab:bb:ae:75:b2:93:12:3b:4e:52:50:c9:74:17:
a4:88:87:74:0c:60:76:a3:b8:90:a1:47:87:a9:43:
3e:6e:7b:06:33:d8:3d:33:a8:a0:b9:43:17:06:d0:
fe:82:5e:be:16:cd:b1:0c:8f:83:d5:40:19:8d:92:
c3:c4:93:d1:d6:36:75:5f:9c:ab:4f:d0:85:b9:17:
d8:31:6f:b7:6d:f5:3f:16:04:96:79:87:4f:3a:c5:
86:fb:b4:69:77:d2:20:7a:a4:09:2c:a1:c7:ed:8d:
a7:c7:51:21:b2:f3:b2:52:98:78:cc:3d:ca:9a:7a:
51:6d:96:78:22:68:c2:7d:8e:f2:11:91:d7:35:49:
da:63:94:64:49:e2:31:7c:3d:6d:86:a3:2e:a6:7a:
1b:95:de:ff:29:ed:cc:91:d2:d3:47:c6:da:34:16:
d8:31:ba:dd:37:cc:92:b3:6c:b2:5e:c1:12:22:a2:
a8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:30:80:BA:BF:F5:10:9F:97:A2:C4:69:93:A6:84:DA:ED:FF:46:E5
X509v3 Authority Key Identifier:
keyid:BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:2c:6d:ea:0d:6e:2c:f6:8a:88:13:fd:bd:8d:e1:45:ec:17:
4b:c3:8c:b0:92:af:22:79:d9:90:31:18:e4:b5:6a:93:49:bf:
c1:f6:31:4e:70:d1:52:2c:77:13:d9:ad:a7:b0:9e:f9:2d:7c:
a6:73:47:43:14:0a:ca:22:e6:fa:d5:2d:a8:f7:8e:f5:07:6e:
bb:5f:eb:3b:b3:2d:e1:4b:03:12:30:3d:6c:98:c3:5b:6a:31:
3a:f2:bc:c6:bf:29:71:88:42:09:71:93:93:2a:f9:39:2f:63:
c0:7a:a5:8b:8d:f3:e5:94:d3:e2:9c:c6:ea:9b:30:e0:57:38:
96:58:d1:da:a9:62:75:08:a5:d7:78:94:55:12:04:9d:83:f4:
ac:fb:e7:10:ea:60:16:99:cc:e8:38:64:ac:09:b5:95:b8:b1:
b1:3c:38:64:60:0b:dd:86:d2:66:6b:02:5f:9f:67:e1:05:71:
65:fd:41:41:c0:77:b3:a7:05:68:f4:98:7a:16:49:e7:f5:0e:
18:53:e0:3c:f5:ab:dc:c7:7e:e4:16:82:45:a8:d8:f0:90:f8:
99:77:32:77:79:80:61:9e:ac:76:8c:37:7c:cd:56:13:14:7f:
e3:47:fe:45:46:14:15:61:45:45:aa:93:66:9e:8c:19:4f:15:
45:99:43:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9Zk9B60cw1flrs2tTZ4OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNGM2ODVlZmE2YTJjMTA0NTYzN2YwMjdhMzI1YzBhZWM3
OWMwMTUwHhcNMjUxMTA0MTMwMTQ5WhcNMjUxMTA1MTMwMTQ5WjAzMTEwLwYDVQQD
EyhkMzMwODBiYWJmZjUxMDlmOTdhMmM0Njk5M2E2ODRkYWVkZmY0NmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MjT14mxyElHUXHHyJGpqPxXZBP8
GcmNUasaRuTPsPMPhJip8OPBOVWIL1dG5VJ/yzaXig5J+p6Ec3h19TH3668cuGBi
KNolhV9Kq7uudbKTEjtOUlDJdBekiId0DGB2o7iQoUeHqUM+bnsGM9g9M6iguUMX
BtD+gl6+Fs2xDI+D1UAZjZLDxJPR1jZ1X5yrT9CFuRfYMW+3bfU/FgSWeYdPOsWG
+7Rpd9IgeqQJLKHH7Y2nx1EhsvOyUph4zD3KmnpRbZZ4ImjCfY7yEZHXNUnaY5Rk
SeIxfD1thqMupnobld7/Ke3MkdLTR8baNBbYMbrdN8ySs2yyXsESIqKoJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNMwgLq/9RCfl6LEaZOmhNrt/0blMB8GA1UdIwQY
MBaAFLpMaF76aiwQRWN/AnoyXArsecAVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWt4b1h2cHFMQkJGWTM4Q2VqSmNDdXg1d0JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80Mjg3MmEtNTYxNy00ZWMyLWFiOGQt
Yzg2MDQ3MjA2NDJkLzEvdWt4b1h2cHFMQkJGWTM4Q2VqSmNDdXg1d0JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS80Mjg3MmEtNTYxNy00ZWMyLWFiOGQtYzg2MDQ3MjA2NDJk
LzEvdWt4b1h2cHFMQkJGWTM4Q2VqSmNDdXg1d0JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASSxt6g1u
LPaKiBP9vY3hRewXS8OMsJKvInnZkDEY5LVqk0m/wfYxTnDRUix3E9mtp7Ce+S18
pnNHQxQKyiLm+tUtqPeO9Qduu1/rO7Mt4UsDEjA9bJjDW2oxOvK8xr8pcYhCCXGT
kyr5OS9jwHqli43z5ZTT4pzG6psw4Fc4lljR2qlidQil13iUVRIEnYP0rPvnEOpg
FpnM6DhkrAm1lbixsTw4ZGAL3YbSZmsCX59n4QVxZf1BQcB3s6cFaPSYehZJ5/UO
GFPgPPWr3Md+5BaCRajY8JD4mXcyd3mAYZ6sdow3fM1WExR/40f+RUYUFWFFRaqT
Zp6MGU8VRZlDOw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:35:03 2025 by rpki-client