Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
File: uATBl0RFlLEexZnSBWVvZOTR_GE.mft (raw, json)
Hash identifier: WWC7ijEUEZ60XRae0W4NgV7Kv8Gaa3PMiou5uxf/PzE=
Subject key identifier: F0:56:1C:6B:51:05:90:E3:57:83:42:9C:BF:1A:8E:5F:C3:1A:50:61
Authority key identifier: B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
Certificate issuer: /CN=b804c197444594b11ec599d205656f64e4d1fc61
Certificate serial: 019837959D377B8A41C2D5AA5EECBEABC5DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
Manifest number: 043E
Signing time: Wed 23 Jul 2025 14:00:08 +0000
Manifest this update: Wed 23 Jul 2025 14:00:08 +0000
Manifest next update: Thu 24 Jul 2025 14:00:08 +0000
Files and hashes: 1: foSChvs7xZT_ef4fRZkz6kbja-A.roa (hash: qhfs8w9z0W9ldi8xd+XO5IRrkBZgJCAhgjlxgOvdESc=)
2: uATBl0RFlLEexZnSBWVvZOTR_GE.crl (hash: V3eZWZ2hrda2ibXD6rIUCXgAXyYXVfytaL7x25LhP6g=)
3: yO6MuzyCfqPl_Bd-5T_EUZAJiu0.roa (hash: uW68gXrjLbDAKIgIT5+2g3ynceUkFahctGoUtv0xIl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:37:95:9d:37:7b:8a:41:c2:d5:aa:5e:ec:be:ab:c5:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b804c197444594b11ec599d205656f64e4d1fc61
Validity
Not Before: Jul 23 14:00:08 2025 GMT
Not After : Jul 24 14:00:08 2025 GMT
Subject: CN=f0561c6b510590e35783429cbf1a8e5fc31a5061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:62:7e:46:60:74:4d:a6:15:10:66:31:ef:9a:
cf:aa:b2:65:78:5e:ae:17:fa:3b:e9:36:9a:e9:e5:
c2:23:05:7c:b4:0f:b4:1e:3c:5b:d7:e5:2a:e6:57:
cd:df:16:52:c0:30:75:9e:7f:a6:e8:9a:ff:9d:87:
ca:97:01:12:7c:e2:2b:a2:09:df:9d:a0:01:1c:72:
79:41:cd:3c:7a:54:a7:0f:fb:12:cc:27:4f:7e:d1:
8c:b9:f5:71:59:a8:a1:76:2d:31:38:08:1f:95:a4:
e5:74:93:ba:8d:99:ef:2c:a0:16:1f:0f:2e:42:8c:
4f:13:05:3a:af:d4:db:ce:c6:b5:4e:97:b9:f3:57:
fa:e2:c2:1b:79:b7:b1:c9:8f:3d:b0:3c:0c:a6:66:
52:66:cc:c5:77:28:63:05:e6:14:28:d4:4b:32:8f:
b1:e2:63:78:41:65:3c:84:0b:98:b6:de:68:e0:fb:
af:e7:59:9b:fd:f0:10:77:e4:87:eb:89:d1:f4:83:
51:9c:c2:c5:10:a6:00:f4:05:63:3e:b6:d5:57:a9:
b4:aa:61:a1:4a:e7:ef:37:2c:b7:3a:96:3e:aa:c1:
53:e7:77:75:e6:3e:cf:dd:0e:ab:3d:a7:60:2f:20:
4c:a0:0b:ef:bf:8b:9c:ee:9d:7f:15:2f:da:28:7b:
f5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:56:1C:6B:51:05:90:E3:57:83:42:9C:BF:1A:8E:5F:C3:1A:50:61
X509v3 Authority Key Identifier:
keyid:B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:fb:91:f2:61:6c:98:bd:7b:57:d4:e9:e4:3a:04:f9:95:7a:
e1:f8:62:9b:b1:cd:30:f0:eb:01:ba:ea:24:49:3e:1a:d5:c8:
5d:3c:ea:ca:d8:fc:f7:ec:8a:d7:3d:d8:46:a2:21:df:67:39:
57:c5:8c:1c:9a:1c:bf:f6:91:9b:a0:8a:d2:73:37:da:5e:40:
b9:3c:3d:79:58:1e:84:78:27:c3:a9:9d:e9:40:b2:0d:d2:68:
1a:4b:8f:5c:74:f0:ec:c8:c6:c8:79:0b:3d:0b:b4:65:7e:9c:
51:57:93:ff:b6:43:ce:43:b9:bc:51:bf:79:49:06:e5:b6:22:
02:70:35:6b:6d:3a:b8:a6:d4:9a:00:fb:d4:50:77:40:ad:4e:
14:04:26:c6:ea:87:14:23:99:9f:10:77:58:da:17:b4:a5:0c:
f0:d8:97:7c:b8:c4:4e:c0:6c:96:91:9a:8e:08:bc:af:2a:00:
a4:5e:d5:1a:81:2b:c9:ec:5a:41:77:d9:a0:80:72:87:92:5b:
17:4a:24:78:32:f9:02:d5:9d:70:fe:47:9b:93:a9:a0:df:18:
7d:41:c5:98:39:9b:b5:44:d2:45:3b:50:08:37:08:50:19:b4:
a0:54:a7:88:30:31:47:7f:26:86:1d:11:49:e8:85:41:a6:5d:
e8:30:c5:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg3lZ03e4pBwtWqXuy+q8XbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDRjMTk3NDQ0NTk0YjExZWM1OTlkMjA1NjU2ZjY0ZTRk
MWZjNjEwHhcNMjUwNzIzMTQwMDA4WhcNMjUwNzI0MTQwMDA4WjAzMTEwLwYDVQQD
EyhmMDU2MWM2YjUxMDU5MGUzNTc4MzQyOWNiZjFhOGU1ZmMzMWE1MDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomJ+RmB0TaYVEGYx75rPqrJleF6u
F/o76Taa6eXCIwV8tA+0Hjxb1+Uq5lfN3xZSwDB1nn+m6Jr/nYfKlwESfOIrognf
naABHHJ5Qc08elSnD/sSzCdPftGMufVxWaihdi0xOAgflaTldJO6jZnvLKAWHw8u
QoxPEwU6r9Tbzsa1Tpe581f64sIbebexyY89sDwMpmZSZszFdyhjBeYUKNRLMo+x
4mN4QWU8hAuYtt5o4Puv51mb/fAQd+SH64nR9INRnMLFEKYA9AVjPrbVV6m0qmGh
SufvNyy3OpY+qsFT53d15j7P3Q6rPadgLyBMoAvvv4uc7p1/FS/aKHv1NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPBWHGtRBZDjV4NCnL8ajl/DGlBhMB8GA1UdIwQY
MBaAFLgEwZdERZSxHsWZ0gVlb2Tk0fxhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFUQmwwUkZsTEVleFpuU0JXVnZaT1RSX0dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zYmM1NTMtMGVlMC00YjcyLWI5M2Ut
OTM4YWI5NjQ1NGU5LzEvdUFUQmwwUkZsTEVleFpuU0JXVnZaT1RSX0dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zYmM1NTMtMGVlMC00YjcyLWI5M2UtOTM4YWI5NjQ1NGU5
LzEvdUFUQmwwUkZsTEVleFpuU0JXVnZaT1RSX0dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwPuR8mFs
mL17V9Tp5DoE+ZV64fhim7HNMPDrAbrqJEk+GtXIXTzqytj89+yK1z3YRqIh32c5
V8WMHJocv/aRm6CK0nM32l5AuTw9eVgehHgnw6md6UCyDdJoGkuPXHTw7MjGyHkL
PQu0ZX6cUVeT/7ZDzkO5vFG/eUkG5bYiAnA1a206uKbUmgD71FB3QK1OFAQmxuqH
FCOZnxB3WNoXtKUM8NiXfLjETsBslpGajgi8ryoApF7VGoEryexaQXfZoIByh5Jb
F0okeDL5AtWdcP5Hm5OpoN8YfUHFmDmbtUTSRTtQCDcIUBm0oFSniDAxR38mhh0R
SeiFQaZd6DDFqA==
-----END CERTIFICATE-----
Generated at Wed Jul 23 18:01:38 2025 by rpki-client