Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
File: UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft (raw, json)
Hash identifier: 5bP2WwYWdWSyx1JbfQJM8/qW5f4BlXK94shClP81Sd8=
Subject key identifier: EE:6B:F6:B7:D9:80:A4:05:7E:BB:40:20:93:F7:98:16:35:53:3C:52
Authority key identifier: 53:38:02:E6:29:65:D4:58:4E:59:8D:59:B7:6A:92:8B:E5:AF:D9:71
Certificate issuer: /CN=533802e62965d4584e598d59b76a928be5afd971
Certificate serial: 019A50E445857B76843742143A0012DF79FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
Manifest number: 02B0
Signing time: Tue 04 Nov 2025 22:02:08 +0000
Manifest this update: Tue 04 Nov 2025 22:02:08 +0000
Manifest next update: Wed 05 Nov 2025 22:02:08 +0000
Files and hashes: 1: AmqiC38rtSv0iE1wKrjS0J46Q88.roa (hash: UHlyMJ5+FWbMAOr2Ngcc+hElY0msx9uI+m00I3guqOI=)
2: L7mO7KFz85O9TLGHw1rnhJTk7S8.roa (hash: UMdz5rJ/zgMVHrBC+qmC+WQlQSXRf1HcpO0Un+UUydo=)
3: N50ILjI6vNp7A6N9HygvstrwChc.roa (hash: Dirg6q8LPU3d4GS5cdQfmRbClfRmgGiHcbmkwEYmVik=)
4: UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl (hash: xYSfjobjXEdH4MkFo3f/il3qTOrc/cHf4kmKcAdrwF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:45:85:7b:76:84:37:42:14:3a:00:12:df:79:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533802e62965d4584e598d59b76a928be5afd971
Validity
Not Before: Nov 4 22:02:08 2025 GMT
Not After : Nov 5 22:02:08 2025 GMT
Subject: CN=ee6bf6b7d980a4057ebb402093f7981635533c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:78:72:91:52:13:35:b1:52:cb:ee:f9:1e:eb:
4f:f9:51:03:e3:88:43:44:c2:d5:29:27:ea:99:f7:
a5:82:8f:8a:7f:2a:37:a3:dc:ac:53:e4:7a:ac:fb:
00:9c:76:ac:dd:5e:3f:f5:8c:13:83:0b:95:7e:09:
66:ba:b5:cf:fd:d5:98:8d:38:60:b2:ce:5a:43:ff:
39:c6:d0:cc:60:72:22:b8:63:ad:ef:e2:ba:ed:00:
56:b1:50:2f:dd:25:87:b3:89:a4:2e:65:db:f4:0c:
4b:b3:6c:ea:c1:c0:62:39:d0:7e:9f:1e:4a:3c:b0:
59:69:15:f0:52:6b:ba:fb:d3:74:96:31:a1:66:cb:
3f:c9:4f:1e:25:f5:be:fe:e6:35:6c:da:a8:53:73:
ff:4a:66:41:23:c9:24:eb:31:f7:3e:18:3c:9b:5d:
50:4c:db:0d:d7:2d:56:70:4f:cb:bd:6c:e9:80:e9:
1f:04:71:e4:cc:70:f4:5c:86:6d:64:63:e0:b1:28:
d9:98:35:48:53:f2:0e:87:50:dd:0e:f9:db:0c:51:
8c:ed:ac:86:d0:e2:01:42:b8:fc:3d:ae:47:31:96:
c8:3d:17:41:03:40:66:ae:22:49:69:24:fb:c1:b4:
4e:b1:c2:d1:89:8e:bf:35:e7:3c:bc:ef:f3:9a:02:
da:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6B:F6:B7:D9:80:A4:05:7E:BB:40:20:93:F7:98:16:35:53:3C:52
X509v3 Authority Key Identifier:
keyid:53:38:02:E6:29:65:D4:58:4E:59:8D:59:B7:6A:92:8B:E5:AF:D9:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:25:c1:b9:a3:60:4c:c7:ff:da:52:98:9a:31:3d:93:52:37:
a8:57:f8:a4:ca:3b:39:e1:dc:a2:43:8a:64:ee:d0:ca:1b:d5:
5c:32:a8:5b:4b:3d:a7:a7:82:2b:39:ed:0d:a8:61:3c:a8:0d:
ae:43:ea:0f:8d:f4:82:11:e5:a5:b1:31:4c:9d:67:48:77:38:
5b:9b:6f:74:35:0f:65:d3:6b:a9:8e:34:09:5e:93:95:0c:f6:
29:3e:3f:e0:e8:84:9e:ed:c7:76:6d:a5:c7:fb:f7:7e:fd:ff:
e7:5e:0b:85:bc:08:79:b9:c7:09:99:07:39:47:be:d7:6d:f0:
1f:4c:61:1b:08:f8:38:27:da:c2:59:8b:a5:66:13:a2:8f:f1:
b9:fc:43:d4:76:f0:48:3f:d0:bd:b0:47:11:33:f3:4d:7b:2f:
9b:db:27:08:c4:24:0a:d1:da:62:5f:0f:1f:29:52:d9:6e:10:
82:55:28:8d:8d:7c:c9:16:cb:9e:7e:aa:e9:fd:d0:b9:86:da:
5c:40:74:2f:33:25:53:78:d1:89:d7:78:e0:70:ac:bd:b0:42:
dc:dc:f2:7c:2a:19:cc:f5:44:90:56:43:83:e3:f7:13:fb:40:
0a:37:cf:db:eb:1e:f8:02:a6:c4:40:78:32:2c:9e:57:34:4d:
27:ec:24:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:33:03 2025 by rpki-client