Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft
File: Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft (raw, json)
Hash identifier: pPfRhk1P4TjY0HIbzeopcNdIpHusEKwauaP67tAle9Y=
Subject key identifier: 4D:D6:CB:D1:82:55:A2:AF:7F:37:C2:49:A4:CE:C5:AA:6C:9A:5C:76
Authority key identifier: 52:EE:48:9F:36:DE:04:21:9C:D2:19:2E:04:A7:BD:B1:39:14:64:8F
Certificate issuer: /CN=52ee489f36de04219cd2192e04a7bdb13914648f
Certificate serial: 019A71B775576D5CEC1BCB33702CEA05E0F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft
Manifest number: 1249
Signing time: Tue 11 Nov 2025 07:00:39 +0000
Manifest this update: Tue 11 Nov 2025 07:00:39 +0000
Manifest next update: Wed 12 Nov 2025 07:00:39 +0000
Files and hashes: 1: Uu5InzbeBCGc0hkuBKe9sTkUZI8.crl (hash: n0vaW5bmSFzJNRlXUaaO7n9PaOU+V4BRlYJj5shYtFA=)
2: f_wj04ETq9bQrF4XPngK42N1KfA.roa (hash: g/L8C+Uofn47VNMVi+59N+SowKWU37rtsG4L1uBFxUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:75:57:6d:5c:ec:1b:cb:33:70:2c:ea:05:e0:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ee489f36de04219cd2192e04a7bdb13914648f
Validity
Not Before: Nov 11 07:00:39 2025 GMT
Not After : Nov 12 07:00:39 2025 GMT
Subject: CN=4dd6cbd18255a2af7f37c249a4cec5aa6c9a5c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:86:0d:4e:8b:d0:d0:22:1b:d1:c6:aa:97:6d:
cb:25:9d:1c:ce:69:66:76:6b:e4:b4:a8:cb:c7:02:
ea:a5:68:4d:31:c2:08:89:5c:0d:50:40:50:a2:b4:
78:0d:a9:ef:e3:d0:9f:13:80:56:b7:57:70:0c:4d:
e1:cc:45:97:5f:bf:04:c0:b3:14:79:03:c5:0c:02:
5e:1e:5e:a7:95:16:73:1f:00:94:e1:62:77:62:9a:
8d:38:b9:48:aa:99:11:ec:90:9d:9b:42:c8:23:10:
8b:61:1e:1d:9a:17:e7:4b:74:2e:24:b2:70:e9:21:
c9:ca:c9:cf:d9:23:60:0d:53:5c:01:77:f6:11:59:
0f:7e:67:f2:1a:f0:94:6a:1f:fd:e7:fd:34:42:24:
70:2b:a0:6c:bc:ff:b9:51:68:87:b3:9e:ee:6d:1d:
77:5f:36:a4:36:2e:5f:e3:a9:55:7d:c6:b7:de:69:
9b:66:5f:22:af:85:88:f0:84:e3:76:66:08:8a:bb:
24:e2:df:d3:db:3a:e1:e4:b8:9d:d7:61:2b:41:c5:
c9:d3:65:3d:c4:c4:a6:30:0c:4b:42:fd:ab:73:68:
db:2b:9a:99:5a:25:2a:74:59:b2:fb:0d:ad:f0:6b:
3a:31:d3:b3:54:73:fb:cc:5e:b0:d2:11:de:3c:c7:
c7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D6:CB:D1:82:55:A2:AF:7F:37:C2:49:A4:CE:C5:AA:6C:9A:5C:76
X509v3 Authority Key Identifier:
keyid:52:EE:48:9F:36:DE:04:21:9C:D2:19:2E:04:A7:BD:B1:39:14:64:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:bd:6d:18:db:dc:f2:81:04:ab:f6:4f:1d:bd:fb:2f:ea:7c:
c6:f8:27:0e:1d:97:b7:cd:c7:ce:70:b8:f9:cd:89:23:77:fe:
0f:56:81:74:be:3a:a4:e3:63:89:d2:01:54:43:d4:41:ed:91:
db:da:d5:e6:f8:0f:57:20:f5:28:33:1f:e9:90:bb:e3:9f:d8:
5e:4d:d3:62:a1:1c:39:a5:7c:f4:23:c2:22:c6:bf:b8:c8:a3:
9d:72:e8:f3:d1:f7:cf:6f:1a:02:a4:d3:f5:3b:05:63:04:bf:
dd:23:5b:d5:4a:12:b7:7c:fd:d5:5d:16:ae:55:c3:27:32:d8:
30:c6:c8:a5:fd:06:c8:0d:74:c5:6d:1b:db:29:c7:1e:a2:a7:
e9:81:31:f8:93:59:aa:63:8d:58:a9:6a:b5:ed:dd:9f:91:1c:
e7:59:f0:e9:fd:58:de:8b:34:68:4a:40:29:1b:d1:d6:06:29:
40:44:6d:a2:5a:80:15:49:e2:c4:52:c8:3f:72:0a:4a:21:be:
11:47:9a:b4:1f:49:1b:d0:66:c1:fc:74:84:dd:60:19:d0:a7:
83:02:00:0e:a3:6d:ee:4c:7a:8c:e2:d3:15:ae:29:a8:fe:28:
85:a7:4e:a2:6b:5e:5f:66:a2:2a:c7:a3:45:ab:04:01:1d:1a:
c2:25:f0:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt3VXbVzsG8szcCzqBeDxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZWU0ODlmMzZkZTA0MjE5Y2QyMTkyZTA0YTdiZGIxMzkx
NDY0OGYwHhcNMjUxMTExMDcwMDM5WhcNMjUxMTEyMDcwMDM5WjAzMTEwLwYDVQQD
Eyg0ZGQ2Y2JkMTgyNTVhMmFmN2YzN2MyNDlhNGNlYzVhYTZjOWE1Yzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oYNTovQ0CIb0caql23LJZ0czmlm
dmvktKjLxwLqpWhNMcIIiVwNUEBQorR4Danv49CfE4BWt1dwDE3hzEWXX78EwLMU
eQPFDAJeHl6nlRZzHwCU4WJ3YpqNOLlIqpkR7JCdm0LIIxCLYR4dmhfnS3QuJLJw
6SHJysnP2SNgDVNcAXf2EVkPfmfyGvCUah/95/00QiRwK6BsvP+5UWiHs57ubR13
XzakNi5f46lVfca33mmbZl8ir4WI8ITjdmYIirsk4t/T2zrh5Lid12ErQcXJ02U9
xMSmMAxLQv2rc2jbK5qZWiUqdFmy+w2t8Gs6MdOzVHP7zF6w0hHePMfHNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3Wy9GCVaKvfzfCSaTOxapsmlx2MB8GA1UdIwQY
MBaAFFLuSJ823gQhnNIZLgSnvbE5FGSPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXU1SW56YmVCQ0djMGhrdUJLZTlzVGtVWkk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9iMDA0NWQtM2ZmNy00M2FiLWE2NGQt
YzRjZjE2ZjIwODNmLzEvVXU1SW56YmVCQ0djMGhrdUJLZTlzVGtVWkk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9iMDA0NWQtM2ZmNy00M2FiLWE2NGQtYzRjZjE2ZjIwODNm
LzEvVXU1SW56YmVCQ0djMGhrdUJLZTlzVGtVWkk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa71tGNvc
8oEEq/ZPHb37L+p8xvgnDh2Xt83HznC4+c2JI3f+D1aBdL46pONjidIBVEPUQe2R
29rV5vgPVyD1KDMf6ZC745/YXk3TYqEcOaV89CPCIsa/uMijnXLo89H3z28aAqTT
9TsFYwS/3SNb1UoSt3z91V0WrlXDJzLYMMbIpf0GyA10xW0b2ynHHqKn6YEx+JNZ
qmONWKlqte3dn5Ec51nw6f1Y3os0aEpAKRvR1gYpQERtolqAFUnixFLIP3IKSiG+
EUeatB9JG9Bmwfx0hN1gGdCngwIADqNt7kx6jOLTFa4pqP4ohadOomteX2aiKsej
RasEAR0awiXwBg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:10:22 2025 by rpki-client