Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
File: uxmjOYHjSyrlBYbjBIxmOixrhYY.mft (raw, json)
Hash identifier: k//W8gWvAFXUsot7i7bC/AvqqNod9Qjl4rz69+iR8zo=
Subject key identifier: 5C:0A:7D:8B:F1:B1:58:E4:5F:92:4C:4C:23:20:E3:55:08:FA:69:BB
Authority key identifier: BB:19:A3:39:81:E3:4B:2A:E5:05:86:E3:04:8C:66:3A:2C:6B:85:86
Certificate issuer: /CN=bb19a33981e34b2ae50586e3048c663a2c6b8586
Certificate serial: 019A4EF58DF7CD5B7B60505FACD17632F61D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 13:01:46 +0000
Manifest this update: Tue 04 Nov 2025 13:01:46 +0000
Manifest next update: Wed 05 Nov 2025 13:01:46 +0000
Files and hashes: 1: bZS4GQEsIdGvUWQSX9_jSboYCqI.roa (hash: BRbDs0+QJ+0EPq8EFb6UZkNMpqutF1fRVS1+a5Uut1U=)
2: uxmjOYHjSyrlBYbjBIxmOixrhYY.crl (hash: 9EEPFPEkpiLVRStMmGVX2ojUXJSGreRvvT3h6J6rSUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:8d:f7:cd:5b:7b:60:50:5f:ac:d1:76:32:f6:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb19a33981e34b2ae50586e3048c663a2c6b8586
Validity
Not Before: Nov 4 13:01:46 2025 GMT
Not After : Nov 5 13:01:46 2025 GMT
Subject: CN=5c0a7d8bf1b158e45f924c4c2320e35508fa69bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a7:69:58:17:20:33:ab:e9:b8:44:35:cf:be:
ad:e0:4c:9c:b3:96:b9:6a:0e:c3:9e:5c:4d:83:d7:
d0:f5:94:06:e8:47:5c:f7:0c:1e:53:bb:e8:6d:31:
dd:c9:ae:dc:3d:7a:70:5c:6b:6c:02:a7:78:16:41:
b1:f5:dd:da:67:75:ec:5d:5f:7e:ed:5a:bb:4a:3a:
28:d7:e0:74:6f:30:ad:cf:43:a4:b4:16:ea:1f:7c:
16:28:34:3e:bd:32:fe:f3:71:17:ee:d2:30:40:75:
84:f1:fc:5d:df:56:a0:17:59:98:45:4f:9f:5e:11:
54:56:a4:30:2c:0b:0b:74:3e:bc:cc:06:ae:07:23:
3c:eb:f9:e7:e4:05:07:ff:17:ba:86:17:6b:92:3e:
77:35:72:e8:7c:f5:06:2e:99:eb:90:ee:d8:bb:4d:
75:03:57:ca:47:54:7d:8c:bc:41:81:85:db:cd:24:
46:32:bf:f9:a9:ae:8d:fd:50:de:7e:d2:3f:f9:29:
cb:ef:c0:31:ab:fc:97:82:5d:46:d0:a3:6b:93:28:
fc:b2:15:c0:e5:4c:07:f7:63:47:40:b8:42:54:88:
d7:7d:73:5a:b1:e1:90:b5:05:13:82:5c:f3:33:f7:
56:95:a7:45:27:13:7b:a3:cc:a7:bf:34:47:de:b9:
bf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0A:7D:8B:F1:B1:58:E4:5F:92:4C:4C:23:20:E3:55:08:FA:69:BB
X509v3 Authority Key Identifier:
keyid:BB:19:A3:39:81:E3:4B:2A:E5:05:86:E3:04:8C:66:3A:2C:6B:85:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:8d:3d:8b:46:87:64:77:4b:70:51:9c:c2:75:5d:dc:aa:4d:
36:73:e1:80:38:bc:97:45:f1:07:c3:c8:19:00:4a:ac:e7:08:
b6:18:d4:d2:61:00:92:3f:1d:6b:f2:be:fc:04:bc:e6:ef:0f:
95:50:e8:c2:29:c0:ce:95:1c:8d:67:df:86:e4:99:50:01:32:
cf:34:08:b1:ed:a4:d3:e7:6c:f4:08:96:58:af:f0:87:ca:b6:
f0:34:20:88:51:87:8c:a9:ec:4a:85:aa:6e:4b:f7:0c:47:f0:
24:ac:1d:d2:97:e3:90:ee:e5:1d:be:e8:e8:ca:52:8e:d4:be:
b2:b6:39:5f:27:89:e2:7b:29:1d:b2:d3:6b:a9:c7:5c:ba:d2:
a6:e6:68:66:61:38:ca:72:f3:f2:4b:31:9a:f7:4a:33:45:b6:
c6:22:56:11:12:98:a0:ad:12:a9:f6:01:5d:43:f2:db:b1:3b:
23:b3:ee:4d:ed:88:94:1c:8d:61:25:9e:2e:76:cc:cd:c0:c4:
86:78:a4:67:a5:28:a1:a6:03:5e:0f:c3:38:80:6b:a8:b3:14:
7e:af:f3:fd:25:9d:e5:c1:f0:51:2d:39:56:e1:e6:13:ab:82:
76:f2:2c:2c:b5:87:6e:18:ac:67:6d:63:f7:e6:0d:4b:5b:26:
24:77:f0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:23:27 2025 by rpki-client