Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
File: UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft (raw, json)
Hash identifier: my5PO8FLUkqx5SBLbspFaazqEWlz1+E3VvtdloDSi6o=
Subject key identifier: 56:DA:AE:A8:9B:7C:AA:70:ED:1A:F0:03:D2:FE:93:54:08:9C:6F:D6
Authority key identifier: 53:31:66:E3:F7:09:FB:3B:AC:A9:AE:79:AC:BE:C6:CA:1D:0F:C5:03
Certificate issuer: /CN=533166e3f709fb3baca9ae79acbec6ca1d0fc503
Certificate serial: 019A7337F7ECC7FF57B653B4FD22F0C144E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
Manifest number: 05D9
Signing time: Tue 11 Nov 2025 14:00:38 +0000
Manifest this update: Tue 11 Nov 2025 14:00:38 +0000
Manifest next update: Wed 12 Nov 2025 14:00:38 +0000
Files and hashes: 1: JfX_uE4ZrNpyAWrN6XZ19h68cHI.roa (hash: von2tcOSfatHPq0+8nIPwywF9HUMabxhy1Hbp0s6xOY=)
2: UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl (hash: RO+2scsL9+YAp6WoL7PCjSuDGmYYy8M7VVZqgUKxdfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:37:f7:ec:c7:ff:57:b6:53:b4:fd:22:f0:c1:44:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533166e3f709fb3baca9ae79acbec6ca1d0fc503
Validity
Not Before: Nov 11 14:00:38 2025 GMT
Not After : Nov 12 14:00:38 2025 GMT
Subject: CN=56daaea89b7caa70ed1af003d2fe9354089c6fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2b:80:7d:8e:3d:7e:b8:6f:72:c6:cd:9f:76:
80:33:8f:f3:a1:0b:48:14:c8:73:b1:48:73:a1:c8:
d2:38:4a:a6:d7:d6:3c:16:15:c7:a7:a2:68:7d:da:
0d:3d:f6:ab:39:8c:84:91:31:68:1a:d5:d9:b5:28:
d7:05:b4:7a:4c:8b:9a:eb:aa:97:6c:ad:78:48:80:
43:8d:4c:c9:5f:86:e0:30:6e:2e:ee:a5:aa:6c:c2:
b9:20:9e:e1:53:00:de:e9:0b:e3:83:60:84:78:dc:
08:a9:26:ca:d7:8f:09:76:b3:da:f7:87:77:14:8b:
72:f8:d7:79:3f:e5:35:9d:48:6c:20:ff:ce:ae:94:
d5:28:f9:33:a5:2e:3f:c8:00:37:90:b9:99:c5:fa:
f8:b5:04:86:5c:9b:99:55:12:63:63:0d:18:09:cc:
07:53:07:91:ff:60:d4:30:60:5b:22:76:6d:ac:2e:
86:75:48:d3:5e:dd:a5:09:48:25:aa:af:25:d8:c4:
5c:24:b6:3f:b8:22:04:25:0c:f0:82:58:26:40:34:
45:4c:6b:73:af:a9:fd:44:de:f9:d1:4c:35:57:9b:
c8:7a:1c:85:ea:8c:53:73:55:62:f1:54:39:9b:3c:
74:19:99:6c:f7:14:0f:47:45:3c:8e:a7:98:76:91:
8a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DA:AE:A8:9B:7C:AA:70:ED:1A:F0:03:D2:FE:93:54:08:9C:6F:D6
X509v3 Authority Key Identifier:
keyid:53:31:66:E3:F7:09:FB:3B:AC:A9:AE:79:AC:BE:C6:CA:1D:0F:C5:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:6d:7b:58:c8:76:a6:fd:ea:5d:68:56:b4:a3:dc:39:00:bd:
f9:7d:52:58:f1:c4:b4:31:ad:95:ae:ca:24:99:cd:bc:a9:e7:
28:5f:72:32:b1:57:46:6e:bd:3d:bc:90:85:12:62:f6:aa:91:
a0:44:52:3d:c1:68:17:38:88:5a:8a:66:63:1d:c4:f9:3b:19:
13:64:4a:4c:d9:78:83:18:87:2a:9a:90:49:99:57:73:35:72:
93:f7:37:99:b2:bc:a4:13:98:17:36:8c:8d:1f:07:fc:ef:a6:
05:b2:4b:92:4e:cb:b3:9c:6d:63:a5:66:b0:d5:0b:c4:0d:c0:
96:72:c4:95:f5:f8:b5:e2:12:8e:88:f0:f8:8e:b0:6f:ad:56:
cc:0c:d6:b2:fd:30:09:1e:bb:59:e4:32:9b:f8:6f:14:aa:f2:
1b:37:f1:11:60:7a:8c:f3:d0:50:51:86:93:e1:b4:b5:3d:70:
8b:52:0a:99:fd:67:8a:3b:28:b9:a0:d8:25:72:89:21:18:26:
00:a2:7a:78:bd:2b:aa:1e:fd:52:66:b7:b3:10:90:01:e7:65:
39:5d:ba:69:e2:28:8b:ff:11:ed:c8:cd:84:76:da:cb:26:d2:
f5:4e:0d:fe:56:1b:34:2d:8b:2d:b8:38:eb:64:c0:cc:c5:17:
30:58:d2:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzN/fsx/9XtlO0/SLwwUThMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMzE2NmUzZjcwOWZiM2JhY2E5YWU3OWFjYmVjNmNhMWQw
ZmM1MDMwHhcNMjUxMTExMTQwMDM4WhcNMjUxMTEyMTQwMDM4WjAzMTEwLwYDVQQD
Eyg1NmRhYWVhODliN2NhYTcwZWQxYWYwMDNkMmZlOTM1NDA4OWM2ZmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yuAfY49frhvcsbNn3aAM4/zoQtI
FMhzsUhzocjSOEqm19Y8FhXHp6JofdoNPfarOYyEkTFoGtXZtSjXBbR6TIua66qX
bK14SIBDjUzJX4bgMG4u7qWqbMK5IJ7hUwDe6Qvjg2CEeNwIqSbK148JdrPa94d3
FIty+Nd5P+U1nUhsIP/OrpTVKPkzpS4/yAA3kLmZxfr4tQSGXJuZVRJjYw0YCcwH
UweR/2DUMGBbInZtrC6GdUjTXt2lCUglqq8l2MRcJLY/uCIEJQzwglgmQDRFTGtz
r6n9RN750Uw1V5vIehyF6oxTc1Vi8VQ5mzx0GZls9xQPR0U8jqeYdpGKMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbarqibfKpw7RrwA9L+k1QInG/WMB8GA1UdIwQY
MBaAFFMxZuP3Cfs7rKmueay+xsodD8UDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXpGbTRfY0otenVzcWE1NXJMN0d5aDBQeFFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8wOTE5MTEtMDZkOC00NWM4LWIwNWQt
ZTRiYmY0YzBkYjU5LzEvVXpGbTRfY0otenVzcWE1NXJMN0d5aDBQeFFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8wOTE5MTEtMDZkOC00NWM4LWIwNWQtZTRiYmY0YzBkYjU5
LzEvVXpGbTRfY0otenVzcWE1NXJMN0d5aDBQeFFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoG17WMh2
pv3qXWhWtKPcOQC9+X1SWPHEtDGtla7KJJnNvKnnKF9yMrFXRm69PbyQhRJi9qqR
oERSPcFoFziIWopmYx3E+TsZE2RKTNl4gxiHKpqQSZlXczVyk/c3mbK8pBOYFzaM
jR8H/O+mBbJLkk7Ls5xtY6VmsNULxA3AlnLElfX4teISjojw+I6wb61WzAzWsv0w
CR67WeQym/hvFKryGzfxEWB6jPPQUFGGk+G0tT1wi1IKmf1nijsouaDYJXKJIRgm
AKJ6eL0rqh79Uma3sxCQAedlOV26aeIoi/8R7cjNhHbayybS9U4N/lYbNC2LLbg4
62TAzMUXMFjSBw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:38 2025 by rpki-client