Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
File: uxkNECrJYDtAWzY3TUKYaGBJN68.mft (raw, json)
Hash identifier: Oy0cNXeHoGfREaURM5xMXv3u2gDsIaT1fT4xK8obsEg=
Subject key identifier: AC:1A:4D:C4:92:B8:AB:7B:4A:C1:30:0B:62:18:E5:0D:A9:2C:DC:70
Authority key identifier: BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF
Certificate issuer: /CN=bb190d102ac9603b405b36374d429868604937af
Certificate serial: 019A71B7DB7975A3917B30AA5C8FAF1FBCB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
Manifest number: 1725
Signing time: Tue 11 Nov 2025 07:01:05 +0000
Manifest this update: Tue 11 Nov 2025 07:01:05 +0000
Manifest next update: Wed 12 Nov 2025 07:01:05 +0000
Files and hashes: 1: DcxV2Ja9K-zHvG6LH4NvtzIy1nk.roa (hash: /62oYziaLdSG11/y5rZiLPbV2bYO0W8kgYnInVqSzt8=)
2: GvejnjlTXcBw3hFvJDpNgstBnAQ.roa (hash: mGf6PRUxWjZm6nnbhcxXtuiNF2f40d+lyo3uybi/AYg=)
3: XFCSXye-JnBOg9hkUt9_8ox3-Uw.roa (hash: FoESmWnbukcz+6JNvVonKCdjus3ZKbyt/TOI4oU59NU=)
4: uxkNECrJYDtAWzY3TUKYaGBJN68.crl (hash: yms6UiSJpUAtyv0hQjvR5LLLihS+mkWPeO0K+lVo6i8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:db:79:75:a3:91:7b:30:aa:5c:8f:af:1f:bc:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb190d102ac9603b405b36374d429868604937af
Validity
Not Before: Nov 11 07:01:05 2025 GMT
Not After : Nov 12 07:01:05 2025 GMT
Subject: CN=ac1a4dc492b8ab7b4ac1300b6218e50da92cdc70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:18:ae:c6:61:04:a6:3f:6b:ad:68:4a:cc:74:
59:ac:77:60:a6:2a:db:66:b7:d0:cd:9b:07:5b:7f:
54:80:21:20:d6:67:4d:7e:97:f8:29:b3:7d:e4:e4:
f8:aa:73:f2:21:1e:22:34:11:c7:ae:f3:cb:15:b8:
b5:d6:13:47:3b:0d:05:5a:b8:05:00:3d:60:2b:ba:
0c:f6:59:74:fb:7e:49:64:cf:a6:1c:a6:d6:77:df:
d8:b7:a6:1f:90:2f:ec:74:90:0b:3d:48:91:b0:96:
04:14:80:ec:12:bf:eb:fe:46:ed:fd:f7:c0:78:7e:
0f:5a:39:fa:1f:5e:59:3b:23:9d:74:3b:4e:7f:45:
0e:55:7c:36:19:86:b5:0f:ce:90:a7:b2:1d:08:3c:
54:09:8a:78:66:9b:a2:c2:b0:a0:e5:b1:bc:03:7a:
26:2c:23:8b:77:16:ec:b3:f8:a4:48:08:1c:cd:b9:
38:66:6a:d9:31:17:99:c2:13:86:a3:77:68:9e:54:
bc:87:29:59:ea:20:c6:5a:b1:21:ba:ea:49:89:d1:
f0:68:ac:69:8c:94:86:be:af:6c:a7:f9:42:f2:99:
08:27:b6:7a:f6:8a:da:a2:9e:b5:6a:11:3e:ba:88:
be:94:7e:af:cc:e6:51:d1:7a:a1:f0:67:d4:c6:e4:
ea:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1A:4D:C4:92:B8:AB:7B:4A:C1:30:0B:62:18:E5:0D:A9:2C:DC:70
X509v3 Authority Key Identifier:
keyid:BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c7:d9:53:40:45:5c:38:99:42:3f:9a:4a:06:7e:9d:04:5e:
58:31:de:8c:16:d5:a1:97:4b:6a:17:6f:59:9d:09:57:20:2c:
4b:a3:8b:63:30:40:70:ed:04:2a:e3:7c:df:76:26:45:4b:5a:
9e:7b:5a:11:82:88:e1:b3:a8:3e:cb:87:df:20:c7:c5:e5:34:
da:d6:6c:44:70:9b:a3:55:52:47:48:ff:0c:6d:6d:17:d4:1d:
dc:98:74:47:68:2e:0d:3c:dd:69:32:66:af:6c:d2:5b:f1:89:
0d:d6:fe:78:ad:1d:65:a3:9f:67:31:3d:13:af:0c:35:48:b9:
15:db:6b:7e:89:0a:39:d6:de:b4:5f:29:cf:1f:f2:ad:fb:97:
d0:d0:c9:01:60:1e:86:12:55:11:d1:e5:af:81:bb:3d:9b:e4:
84:62:08:3d:75:a4:2c:76:e7:a7:c5:f4:0f:39:d9:e5:ef:1a:
bc:57:91:9c:6f:ff:5f:1c:e2:20:02:ff:e2:13:1d:1e:2c:54:
20:14:7f:d4:6f:ba:ce:e0:62:90:df:fa:e5:7b:79:5f:a3:b6:
4b:83:6a:fe:ad:d4:5a:4d:a6:1b:1c:ab:5a:40:80:72:ac:d7:
ab:6b:76:fc:4c:80:45:01:f5:63:97:21:93:cb:52:f2:e9:43:
d9:c1:21:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:23 2025 by rpki-client