Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
File: uJUchRS33SGzM6uzPKyjxNrp1wk.mft (raw, json)
Hash identifier: 6jKvpj0zf8sz8Rl77IgVS9Qpu9+kV8w+jhTV3D0I0XE=
Subject key identifier: DE:05:27:23:97:67:82:9B:A8:FF:86:EA:9B:3A:33:34:BE:6D:34:E8
Authority key identifier: B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
Certificate issuer: /CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Certificate serial: 0199643589F7A062EABF22B3D9F65EB57A14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
Manifest number: 05DF
Signing time: Fri 19 Sep 2025 23:00:54 +0000
Manifest this update: Fri 19 Sep 2025 23:00:54 +0000
Manifest next update: Sat 20 Sep 2025 23:00:54 +0000
Files and hashes: 1: MDEQKKHcZHICf9dDkngIkD98fk8.roa (hash: CUH9BOH8gaG7TDcSsdo+6SQK/kWQmIxzzf2UKdhj3Tg=)
2: NNWMEZj2KM2iS4Og9a2q_2M6GAU.roa (hash: YcQpsVuDkJbcr6546iTtN2WNSx3d2cPDYivVNT/w7bs=)
3: uJUchRS33SGzM6uzPKyjxNrp1wk.crl (hash: skG2sIzdyDFSEy+nJSlC0rFxNJqT5N6Qoe7RH5TSZ7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:64:35:89:f7:a0:62:ea:bf:22:b3:d9:f6:5e:b5:7a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Validity
Not Before: Sep 19 23:00:54 2025 GMT
Not After : Sep 20 23:00:54 2025 GMT
Subject: CN=de0527239767829ba8ff86ea9b3a3334be6d34e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3f:c2:a1:77:7c:4d:80:eb:89:c6:fc:09:2b:
1f:d1:cb:99:1b:58:e9:d9:8f:1a:9e:98:2f:dd:18:
19:f4:77:32:cb:a4:c8:d8:2d:6e:a4:aa:2c:f3:87:
1c:e9:33:79:74:8d:30:ee:25:6d:5e:a1:71:98:ca:
e9:b6:a9:4f:6b:dc:81:d7:7f:84:91:b4:37:91:3a:
2e:c4:4b:b3:d4:3e:aa:d8:ef:df:ec:ad:42:b0:ca:
41:b3:dd:25:64:c4:4f:9a:90:b6:28:44:38:c3:83:
ab:3d:a7:75:51:ee:7b:4a:d2:bd:07:5b:88:a1:db:
5e:95:42:97:b4:6b:55:ff:52:71:af:1e:2f:5f:d3:
57:c2:f6:4d:fb:0a:eb:a1:0c:42:97:be:0b:4a:09:
85:a5:9c:93:da:7d:51:8f:35:59:a1:33:32:44:cb:
bc:dc:9d:96:86:0d:7a:19:64:39:b6:29:a9:c3:b1:
d8:b2:6b:74:f1:59:b0:72:30:1c:24:be:8f:23:20:
36:7a:db:d1:b4:f0:1b:37:7e:0a:cd:29:48:ec:4d:
98:19:89:7c:b7:64:d3:11:ad:c6:e6:d7:c8:16:3f:
a9:f6:41:36:83:d9:41:77:3c:23:f2:8a:07:4f:f7:
e0:58:7f:18:2c:54:01:99:bc:99:13:6a:d5:42:8c:
2c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:05:27:23:97:67:82:9B:A8:FF:86:EA:9B:3A:33:34:BE:6D:34:E8
X509v3 Authority Key Identifier:
keyid:B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:34:76:4b:a9:ec:b5:7a:d3:8e:a5:2a:ce:89:1b:1f:4d:19:
7a:f2:68:32:cb:31:bb:55:8d:c0:15:3e:c5:70:96:f0:bf:0f:
0a:c6:f6:aa:02:2e:e5:91:ea:02:d7:0e:f8:ea:6e:3b:5b:93:
eb:78:da:b9:6a:32:e1:a6:70:69:0e:63:38:6c:72:44:67:3a:
f1:04:4e:6c:3f:e6:5a:b9:aa:fc:52:0b:98:3d:01:51:5f:da:
4d:a1:94:87:9c:e1:32:b4:4f:c4:27:f6:a3:1c:fe:cc:75:84:
c9:71:7b:71:c3:59:63:52:5e:db:b0:68:02:50:67:de:d5:b7:
4b:56:b7:ab:f2:11:d8:38:64:ae:04:8b:09:8f:cb:f0:e7:b0:
84:1b:9b:59:73:9b:95:df:9b:01:57:45:34:20:ad:4c:78:50:
69:4c:61:94:b3:8a:de:59:36:f7:77:49:28:d9:34:65:82:9d:
87:8c:63:b7:26:eb:2c:ff:7d:22:02:ed:72:03:37:74:3d:26:
bf:11:5a:7c:f0:cd:e2:ba:04:6e:cd:ef:dd:27:9b:8e:ab:da:
ed:2c:64:c9:3f:5a:f6:a5:21:f8:92:07:69:9b:22:c5:cc:52:
4e:77:e1:f6:fa:03:68:06:b2:74:4e:84:d4:d0:6a:06:e1:8e:
d0:ed:2c:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlkNYn3oGLqvyKz2fZetXoUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4OTUxYzg1MTRiN2RkMjFiMzMzYWJiMzNjYWNhM2M0ZGFl
OWQ3MDkwHhcNMjUwOTE5MjMwMDU0WhcNMjUwOTIwMjMwMDU0WjAzMTEwLwYDVQQD
EyhkZTA1MjcyMzk3Njc4MjliYThmZjg2ZWE5YjNhMzMzNGJlNmQzNGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzj/CoXd8TYDricb8CSsf0cuZG1jp
2Y8anpgv3RgZ9Hcyy6TI2C1upKos84cc6TN5dI0w7iVtXqFxmMrptqlPa9yB13+E
kbQ3kTouxEuz1D6q2O/f7K1CsMpBs90lZMRPmpC2KEQ4w4OrPad1Ue57StK9B1uI
odtelUKXtGtV/1Jxrx4vX9NXwvZN+wrroQxCl74LSgmFpZyT2n1RjzVZoTMyRMu8
3J2Whg16GWQ5timpw7HYsmt08VmwcjAcJL6PIyA2etvRtPAbN34KzSlI7E2YGYl8
t2TTEa3G5tfIFj+p9kE2g9lBdzwj8ooHT/fgWH8YLFQBmbyZE2rVQowsiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4FJyOXZ4KbqP+G6ps6MzS+bTToMB8GA1UdIwQY
MBaAFLiVHIUUt90hszOrszyso8Ta6dcJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUpVY2hSUzMzU0d6TTZ1elBLeWp4TnJwMXdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82NDJlYjItM2ZiOS00ZjBlLWJhZjQt
OGNkNzk1MjdlNTMwLzEvdUpVY2hSUzMzU0d6TTZ1elBLeWp4TnJwMXdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82NDJlYjItM2ZiOS00ZjBlLWJhZjQtOGNkNzk1MjdlNTMw
LzEvdUpVY2hSUzMzU0d6TTZ1elBLeWp4TnJwMXdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABTR2S6ns
tXrTjqUqzokbH00ZevJoMssxu1WNwBU+xXCW8L8PCsb2qgIu5ZHqAtcO+OpuO1uT
63jauWoy4aZwaQ5jOGxyRGc68QRObD/mWrmq/FILmD0BUV/aTaGUh5zhMrRPxCf2
oxz+zHWEyXF7ccNZY1Je27BoAlBn3tW3S1a3q/IR2DhkrgSLCY/L8OewhBubWXOb
ld+bAVdFNCCtTHhQaUxhlLOK3lk293dJKNk0ZYKdh4xjtybrLP99IgLtcgM3dD0m
vxFafPDN4roEbs3v3Sebjqva7SxkyT9a9qUh+JIHaZsixcxSTnfh9voDaAaydE6E
1NBqBuGO0O0svg==
-----END CERTIFICATE-----
Generated at Sat Sep 20 00:48:14 2025 by rpki-client