Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.mft
File: uqWupvGAqaitmEU17S5kvPyz_ho.mft (raw, json)
Hash identifier: FWRmVF/mIeqAO2dFa4Hm48p78OQsggtkk00ZEuPK7sA=
Subject key identifier: 9F:36:08:E0:86:EF:A0:0F:F1:1A:3A:60:29:F0:61:BC:0A:A0:A3:25
Authority key identifier: BA:A5:AE:A6:F1:80:A9:A8:AD:98:45:35:ED:2E:64:BC:FC:B3:FE:1A
Certificate issuer: /CN=baa5aea6f180a9a8ad984535ed2e64bcfcb3fe1a
Certificate serial: 019A725CAFDA4D209D153CF5F37CE8AE3DE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqWupvGAqaitmEU17S5kvPyz_ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.mft
Manifest number: 0F13
Signing time: Tue 11 Nov 2025 10:01:08 +0000
Manifest this update: Tue 11 Nov 2025 10:01:08 +0000
Manifest next update: Wed 12 Nov 2025 10:01:08 +0000
Files and hashes: 1: CsvQEVK-EVJUj9O9Oyr9a1ZVDj8.roa (hash: KNjghiY6hSTnyBcRx4J/plbhEv6EisGMOlJT9AxkWNs=)
2: uqWupvGAqaitmEU17S5kvPyz_ho.crl (hash: zeFaDFVqH1vvLa/ZQfPTY5K/x9GNlAnQ5bUVJHUZeeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqWupvGAqaitmEU17S5kvPyz_ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:af:da:4d:20:9d:15:3c:f5:f3:7c:e8:ae:3d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa5aea6f180a9a8ad984535ed2e64bcfcb3fe1a
Validity
Not Before: Nov 11 10:01:08 2025 GMT
Not After : Nov 12 10:01:08 2025 GMT
Subject: CN=9f3608e086efa00ff11a3a6029f061bc0aa0a325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b2:91:6a:44:39:b8:6c:9d:cf:fe:ee:ce:73:
6c:ea:ec:a9:29:7f:10:a1:a1:86:b6:88:98:a9:50:
db:c4:3a:49:87:c7:17:62:dc:4c:95:7c:b7:a4:47:
3a:6c:e7:1c:1e:75:74:12:e8:a3:2d:bf:12:d2:89:
f2:b4:25:02:b2:01:ef:43:ca:46:1c:ae:65:b1:88:
ea:97:52:06:a9:5e:6f:a8:2c:12:3f:0f:f5:31:03:
f7:04:51:db:fb:ec:2e:71:8b:d0:05:15:10:c1:67:
73:9d:4b:90:24:61:38:67:66:0b:04:d8:e7:3e:e2:
0a:9b:42:9d:1d:7e:4d:c8:6f:ef:17:ab:49:44:77:
95:57:49:dc:39:08:1a:49:3f:73:09:03:57:58:32:
ce:a1:90:dc:c3:cc:65:37:d5:a4:f2:86:cd:57:53:
ac:4d:b0:27:70:48:8c:0e:42:e9:e7:f2:ef:2c:2d:
0a:fc:e5:52:0c:62:22:a2:63:00:18:c2:44:df:5d:
2b:19:74:89:af:87:6d:ca:34:de:ae:7b:a4:d5:c0:
a2:5d:e3:1a:c7:03:c1:f8:c9:b7:99:0e:ff:9a:53:
7b:b3:86:33:1b:60:3f:4d:92:4d:2e:b8:ca:59:e2:
01:aa:3e:d8:4d:99:ec:ec:d3:8d:62:83:e2:67:6e:
e0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:36:08:E0:86:EF:A0:0F:F1:1A:3A:60:29:F0:61:BC:0A:A0:A3:25
X509v3 Authority Key Identifier:
keyid:BA:A5:AE:A6:F1:80:A9:A8:AD:98:45:35:ED:2E:64:BC:FC:B3:FE:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqWupvGAqaitmEU17S5kvPyz_ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:1b:bb:87:7b:1e:7f:87:44:7a:48:07:c4:c8:00:4c:96:ae:
18:b7:69:b4:3c:69:25:ac:3c:98:2b:a5:9b:d2:2c:16:34:3e:
a6:20:98:29:30:48:20:73:95:41:b1:26:b3:73:d7:18:f0:ca:
8c:fd:23:30:00:2d:53:ef:e3:6e:b3:04:b8:ac:05:7b:59:dc:
64:4d:d1:29:60:15:f5:f9:75:ee:0c:a7:72:69:fb:3b:2b:e8:
e6:7c:59:ac:7a:6e:c8:6f:d1:ce:41:08:69:b0:ac:8f:7b:d5:
e5:8d:3b:64:8b:84:96:a0:68:36:e1:0c:62:43:17:bd:fb:23:
20:e3:83:94:f3:6d:46:ab:87:38:92:aa:c8:0a:a1:95:9e:34:
95:ca:3b:61:f3:e8:60:70:d9:1b:aa:77:41:fa:3d:90:1e:01:
e6:ae:b7:17:4e:a9:13:d8:03:a0:c0:d1:2f:dc:47:fd:e9:a1:
33:64:63:f7:bb:4a:94:c7:72:2b:d1:c9:df:74:a3:4d:00:3d:
01:45:43:5d:33:e2:5a:5f:f9:0f:47:4e:c8:36:65:88:2d:f8:
38:88:79:36:71:5b:4c:5c:11:84:56:eb:ae:98:fe:94:8b:eb:
30:28:f0:ec:7f:bc:cd:63:7a:11:72:3c:3d:5e:b3:8d:bf:af:
db:8c:96:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXK/aTSCdFTz183zorj3oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYTVhZWE2ZjE4MGE5YThhZDk4NDUzNWVkMmU2NGJjZmNi
M2ZlMWEwHhcNMjUxMTExMTAwMTA4WhcNMjUxMTEyMTAwMTA4WjAzMTEwLwYDVQQD
Eyg5ZjM2MDhlMDg2ZWZhMDBmZjExYTNhNjAyOWYwNjFiYzBhYTBhMzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bKRakQ5uGydz/7uznNs6uypKX8Q
oaGGtoiYqVDbxDpJh8cXYtxMlXy3pEc6bOccHnV0EuijLb8S0onytCUCsgHvQ8pG
HK5lsYjql1IGqV5vqCwSPw/1MQP3BFHb++wucYvQBRUQwWdznUuQJGE4Z2YLBNjn
PuIKm0KdHX5NyG/vF6tJRHeVV0ncOQgaST9zCQNXWDLOoZDcw8xlN9Wk8obNV1Os
TbAncEiMDkLp5/LvLC0K/OVSDGIiomMAGMJE310rGXSJr4dtyjTernuk1cCiXeMa
xwPB+Mm3mQ7/mlN7s4YzG2A/TZJNLrjKWeIBqj7YTZns7NONYoPiZ27gbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ82COCG76AP8Ro6YCnwYbwKoKMlMB8GA1UdIwQY
MBaAFLqlrqbxgKmorZhFNe0uZLz8s/4aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXFXdXB2R0FxYWl0bUVVMTdTNWt2UHl6X2hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83ZjhmNzYtMGQ5ZC00NmFmLTliZWEt
NDdlNGUyNzRjZjY0LzEvdXFXdXB2R0FxYWl0bUVVMTdTNWt2UHl6X2hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS83ZjhmNzYtMGQ5ZC00NmFmLTliZWEtNDdlNGUyNzRjZjY0
LzEvdXFXdXB2R0FxYWl0bUVVMTdTNWt2UHl6X2hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFRu7h3se
f4dEekgHxMgATJauGLdptDxpJaw8mCulm9IsFjQ+piCYKTBIIHOVQbEms3PXGPDK
jP0jMAAtU+/jbrMEuKwFe1ncZE3RKWAV9fl17gyncmn7Oyvo5nxZrHpuyG/RzkEI
abCsj3vV5Y07ZIuElqBoNuEMYkMXvfsjIOODlPNtRquHOJKqyAqhlZ40lco7YfPo
YHDZG6p3Qfo9kB4B5q63F06pE9gDoMDRL9xH/emhM2Rj97tKlMdyK9HJ33SjTQA9
AUVDXTPiWl/5D0dOyDZliC34OIh5NnFbTFwRhFbrrpj+lIvrMCjw7H+8zWN6EXI8
PV6zjb+v24yWCQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:48 2025 by rpki-client