Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
File: uATBl0RFlLEexZnSBWVvZOTR_GE.mft (raw, json)
Hash identifier: 9UMINVEGM8+bx1aKyj6Qq10fsoiApYLGv8qJ4llPI0Q=
Subject key identifier: FA:96:36:DE:E4:FE:EA:82:41:ED:33:45:C1:B1:40:F5:D6:8E:EE:54
Authority key identifier: B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
Certificate issuer: /CN=b804c197444594b11ec599d205656f64e4d1fc61
Certificate serial: 019A4E86A2D7BB0083870B658CCC70872AEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
Manifest number: 0553
Signing time: Tue 04 Nov 2025 11:00:37 +0000
Manifest this update: Tue 04 Nov 2025 11:00:37 +0000
Manifest next update: Wed 05 Nov 2025 11:00:37 +0000
Files and hashes: 1: foSChvs7xZT_ef4fRZkz6kbja-A.roa (hash: qhfs8w9z0W9ldi8xd+XO5IRrkBZgJCAhgjlxgOvdESc=)
2: uATBl0RFlLEexZnSBWVvZOTR_GE.crl (hash: ZduQ0vKejjI7OufkCip/WybGEgn9TZfJa/lTCCUZdjU=)
3: yO6MuzyCfqPl_Bd-5T_EUZAJiu0.roa (hash: uW68gXrjLbDAKIgIT5+2g3ynceUkFahctGoUtv0xIl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:a2:d7:bb:00:83:87:0b:65:8c:cc:70:87:2a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b804c197444594b11ec599d205656f64e4d1fc61
Validity
Not Before: Nov 4 11:00:37 2025 GMT
Not After : Nov 5 11:00:37 2025 GMT
Subject: CN=fa9636dee4feea8241ed3345c1b140f5d68eee54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:20:c0:8b:41:5c:dd:3c:5b:0d:31:6a:a1:cf:
19:18:a6:32:5a:47:3c:55:bc:75:1c:d2:1f:cb:30:
70:db:66:c7:39:18:b4:1f:a8:f6:b9:76:7c:c5:0b:
1b:bb:76:f0:1f:99:61:23:be:ad:20:77:ef:46:10:
cf:ea:cf:0c:45:7e:98:d8:eb:e7:27:8c:b3:1a:d0:
cb:15:3f:9b:5a:1a:25:8d:5e:8c:60:37:8a:c5:97:
ca:2f:23:a1:80:22:1d:46:2c:e2:61:92:a9:37:89:
cb:ad:fb:88:a5:1b:9f:f1:9e:e5:51:7a:37:67:26:
63:16:11:b3:46:12:f7:a6:56:16:1c:0d:df:b0:e1:
d5:78:f2:8a:6b:d6:77:38:a4:fd:11:2b:a9:da:bc:
5b:42:c2:4c:af:c6:a1:a2:63:33:c5:21:87:66:76:
3c:31:1c:bb:ad:86:39:eb:70:55:e4:21:60:d7:9b:
d2:9d:36:f3:ee:08:94:3a:15:fa:ac:dc:de:63:b0:
25:e8:85:8e:a0:d8:00:2a:ab:32:39:59:5d:75:c7:
a5:c0:97:aa:16:d9:19:8f:a3:57:18:b1:86:91:bc:
21:23:08:15:54:e1:40:04:41:3c:30:82:f1:0a:4b:
88:c5:f8:49:11:8b:0e:58:4f:e1:d5:10:d9:76:13:
6e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:96:36:DE:E4:FE:EA:82:41:ED:33:45:C1:B1:40:F5:D6:8E:EE:54
X509v3 Authority Key Identifier:
keyid:B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f1:65:78:0c:6b:dd:b5:8e:86:2c:e7:d3:61:52:01:12:fa:
3d:2f:da:7d:6c:4c:96:8c:b7:0d:4f:5d:87:81:72:85:3c:21:
fd:0e:51:9d:48:d1:96:57:e1:26:cc:f7:fa:b0:34:6a:78:f4:
b7:c9:5c:4c:99:b0:6d:5f:bc:70:40:c4:93:5a:f0:1b:43:2e:
42:1c:f5:7a:75:fa:c3:44:08:09:b8:cf:70:9b:12:aa:1e:48:
1d:ab:43:8b:60:58:2e:c4:f2:1d:73:ea:19:ee:ff:26:4d:29:
a9:3b:fe:32:e3:20:96:3b:f1:4b:45:88:8b:ed:4c:ec:c1:a9:
d7:e2:12:44:c0:c9:e1:5b:6a:83:68:33:b4:51:f1:df:9c:80:
dd:c8:50:6b:fa:4d:2c:cb:c3:83:86:50:1a:dc:df:b8:a3:02:
3b:66:a8:27:47:27:14:56:e5:76:28:14:2e:4c:47:3e:42:99:
45:fd:d4:02:f4:22:62:17:82:33:53:c8:5d:96:b7:09:8f:c4:
98:b5:b2:8c:a8:5b:29:6b:5e:4d:89:7d:46:71:34:f1:bd:0f:
27:af:e9:ce:ca:3a:99:ca:de:e4:cf:da:66:c2:61:08:a2:cf:
a7:f6:98:da:d4:fe:3e:2c:fb:a1:aa:70:69:30:43:10:4c:cd:
4a:9d:c4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:31 2025 by rpki-client