Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
File: Uz39bMFAxoo9O7qGulfPO4umqbc.mft (raw, json)
Hash identifier: opw30s+gG+EO30SykOESkZWLZtvlq3htm8JR77a6yiE=
Subject key identifier: A9:8C:4C:9B:A7:93:C7:DC:02:6A:18:B2:49:35:1C:39:3B:06:05:DC
Authority key identifier: 53:3D:FD:6C:C1:40:C6:8A:3D:3B:BA:86:BA:57:CF:3B:8B:A6:A9:B7
Certificate issuer: /CN=533dfd6cc140c68a3d3bba86ba57cf3b8ba6a9b7
Certificate serial: 019A71B9030C6A9DA8E99E790F58ECB29F58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
Manifest number: 1265
Signing time: Tue 11 Nov 2025 07:02:21 +0000
Manifest this update: Tue 11 Nov 2025 07:02:21 +0000
Manifest next update: Wed 12 Nov 2025 07:02:21 +0000
Files and hashes: 1: LuBsqNtq59OLv1AWHpkXInch_bk.roa (hash: IW1LLIgf30eZrheSzd/U0PwBqHlPoD/7QK4BJgtpt6w=)
2: Uz39bMFAxoo9O7qGulfPO4umqbc.crl (hash: V1wRoV5yB8RJ0DboTVhkVgb2DT20nrdFoDF/F9A8J44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:03:0c:6a:9d:a8:e9:9e:79:0f:58:ec:b2:9f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533dfd6cc140c68a3d3bba86ba57cf3b8ba6a9b7
Validity
Not Before: Nov 11 07:02:21 2025 GMT
Not After : Nov 12 07:02:21 2025 GMT
Subject: CN=a98c4c9ba793c7dc026a18b249351c393b0605dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d1:24:4d:e3:79:8f:a5:a7:4e:78:49:53:87:
50:12:92:b2:c2:2d:eb:55:7e:90:e4:fb:7f:1f:1b:
9d:ff:17:52:7d:4f:67:bc:78:d9:93:71:f6:67:ea:
a2:90:44:28:35:c4:3c:cf:cc:92:c3:3d:e3:ea:2f:
82:c3:3d:b5:e3:16:2e:f6:51:a4:d2:4c:71:69:e7:
95:e7:b5:18:17:e1:7c:c1:6b:72:cb:a0:37:aa:fc:
17:96:19:79:ad:49:1a:51:6e:c9:a8:36:d6:47:29:
85:60:16:39:e7:4a:62:30:01:a4:51:f4:db:c0:8f:
2b:f9:47:ce:19:35:ec:7e:c0:a8:99:45:ad:2a:eb:
e5:b2:fa:77:11:d8:48:61:a3:e8:ad:4d:8d:b6:59:
50:43:7e:49:97:6d:2a:d6:9c:05:a6:54:7f:ad:82:
6e:fe:40:1e:53:d8:6f:4d:15:77:f9:90:b5:d4:e6:
47:b0:6f:7a:36:c5:aa:02:9d:6f:44:0e:ae:34:eb:
f6:c6:96:63:cb:fb:e8:1c:60:d8:a5:df:c5:22:e1:
48:7b:f2:ad:fd:62:00:ca:ed:a5:b6:2e:a6:f6:20:
0f:1d:22:37:b3:5b:24:f1:1b:0b:9e:ef:67:89:15:
fe:12:d2:90:1c:81:2c:e3:cc:ef:07:d9:64:01:30:
fa:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8C:4C:9B:A7:93:C7:DC:02:6A:18:B2:49:35:1C:39:3B:06:05:DC
X509v3 Authority Key Identifier:
keyid:53:3D:FD:6C:C1:40:C6:8A:3D:3B:BA:86:BA:57:CF:3B:8B:A6:A9:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ae:08:a6:25:37:08:ea:be:b1:d8:b7:6b:bf:11:cb:ab:25:
02:4b:1b:b6:22:7b:78:39:99:06:82:51:07:19:46:6b:9b:9d:
7b:87:96:c4:2b:b4:09:77:17:9c:46:16:4d:22:ac:01:82:89:
2d:41:45:7d:44:68:5f:aa:c3:6f:fb:77:ea:e4:b8:fa:e9:6e:
c6:7b:3e:c8:d8:47:dc:31:ec:ec:a5:94:95:31:54:eb:9d:9a:
c2:14:05:da:56:a4:67:6f:e0:02:8b:ce:83:a0:fc:3f:07:6a:
61:b3:a0:b6:e2:58:61:dd:18:ee:f7:d5:9e:8d:7a:57:68:a8:
bf:7a:3e:67:ad:bc:23:04:08:fa:42:84:7e:32:5f:47:8c:ab:
d4:ea:aa:37:3a:24:63:88:c0:36:56:22:e7:6d:51:50:65:19:
e5:98:43:fa:76:27:7a:40:37:18:5c:25:75:ef:51:f0:08:99:
27:50:06:55:ef:41:1b:48:c1:f0:10:50:25:40:12:18:d6:a0:
03:29:e9:7c:10:b8:92:83:a5:bc:7d:6c:e5:b1:12:3b:c1:f3:
54:e0:85:47:72:24:9b:69:34:d6:50:24:b8:5c:d5:30:96:2c:
b3:18:91:f2:2c:cf:bd:eb:71:df:11:cd:69:dd:61:54:e8:53:
fa:77:1d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:18:42 2025 by rpki-client