Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
File: UiezboKeTYVl7WV0jhsck8zQDO4.mft (raw, json)
Hash identifier: Gbbx+TsPDUaZ31huvb3DMp2wcAPJ0ZzKs/1Npbvb0PU=
Subject key identifier: 51:F7:AF:43:D1:80:59:15:86:CD:28:DC:14:53:EC:51:CE:01:B8:6B
Authority key identifier: 52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE
Certificate issuer: /CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee
Certificate serial: 019A5187DEF78ADEC2092FC00F956891636D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
Manifest number: 1121
Signing time: Wed 05 Nov 2025 01:00:50 +0000
Manifest this update: Wed 05 Nov 2025 01:00:50 +0000
Manifest next update: Thu 06 Nov 2025 01:00:50 +0000
Files and hashes: 1: RL9-61LJ-xL7UGImuGRdOdgZP1M.roa (hash: W3jLVStcHUC/Po0Yzh+5aEEvdCfFtCnTP/kBctED3eg=)
2: UiezboKeTYVl7WV0jhsck8zQDO4.crl (hash: getnPAJIb7qfNQdoCjCaR6JvpIJDyNERfia4cJWvygY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:de:f7:8a:de:c2:09:2f:c0:0f:95:68:91:63:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee
Validity
Not Before: Nov 5 01:00:50 2025 GMT
Not After : Nov 6 01:00:50 2025 GMT
Subject: CN=51f7af43d180591586cd28dc1453ec51ce01b86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:be:ef:66:63:b4:13:d7:2c:a3:f2:3a:cc:89:
29:b2:1a:38:2c:1c:a0:3c:e2:c5:56:6f:2f:f9:9b:
8b:84:3f:48:be:e1:4e:38:85:7c:81:b9:3f:fd:6f:
37:52:13:66:d8:3a:c7:8b:7d:4b:0c:17:1e:7e:21:
5a:5d:27:33:ca:9e:5a:11:48:d9:3e:27:64:16:e8:
98:79:cd:c5:61:b2:ae:c9:1f:d8:a0:d9:07:cb:f7:
b0:d4:e9:73:34:f6:4d:20:95:d0:80:b6:89:59:89:
e5:5f:bb:0d:07:11:85:e1:b3:2f:70:28:e4:d0:8a:
7e:04:f1:69:7e:6e:6f:6f:46:56:df:cf:55:50:b2:
4a:9a:bc:4b:99:60:f9:74:08:b2:dc:f5:40:f9:8a:
7c:cc:c4:06:c7:cc:91:10:fb:7b:be:76:85:63:bb:
bc:6c:71:a6:19:01:6b:c7:a7:bd:0c:e8:04:69:f6:
b0:89:c0:41:47:e8:6d:d9:86:b7:73:41:80:a0:de:
e4:25:4d:aa:f2:d8:cc:60:8c:04:4d:33:d9:a8:6a:
13:dd:66:e8:c7:b7:17:45:45:e4:56:de:04:8b:68:
22:bb:9b:55:5f:76:ae:1b:3a:3b:8e:a7:dd:2f:3a:
37:f2:ee:be:03:ec:c4:12:3b:a1:09:80:48:9f:4b:
d8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F7:AF:43:D1:80:59:15:86:CD:28:DC:14:53:EC:51:CE:01:B8:6B
X509v3 Authority Key Identifier:
keyid:52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:42:4c:24:d5:77:4e:48:75:eb:05:80:ce:53:e1:cc:d1:a6:
ce:e9:43:76:b8:7f:2d:a8:dd:29:a9:1e:9f:3b:61:77:ff:bc:
4a:45:eb:13:35:4f:8f:99:70:24:f5:74:4d:b6:81:94:66:c1:
2e:d3:3b:87:da:0d:44:53:f9:1c:9d:48:d7:2b:54:0b:b2:9a:
3b:91:15:ce:3e:08:80:b3:35:fe:bd:55:57:e7:a2:33:6f:1c:
f1:f9:87:87:41:52:f0:35:e1:95:9d:a7:4b:ed:f8:e0:a9:3a:
d0:f6:05:5b:ab:50:08:45:94:7c:b7:4b:3a:b5:65:77:38:79:
de:c6:fa:0b:81:46:c1:95:76:48:41:4e:e8:a7:d4:c0:a9:7f:
69:af:f0:39:dc:18:9d:13:d5:59:4c:4b:ad:8c:e8:ad:de:97:
43:be:9d:79:09:ea:ec:40:0e:25:8d:a6:a5:4a:80:91:b3:17:
91:25:cf:fa:f3:d6:a5:78:01:12:14:fa:c6:d0:42:52:35:ae:
8e:2d:cd:b0:c5:8a:8c:8b:10:1a:93:b7:85:99:39:5f:d3:80:
4a:db:73:b1:55:a3:dd:c5:90:cd:53:a2:0c:ea:f6:39:a8:e3:
32:72:a0:ff:26:83:d0:21:a2:0f:cb:dd:bc:db:93:67:9c:55:
ea:49:e2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:06:59 2025 by rpki-client