Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft
File: ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft (raw, json)
Hash identifier: XBVduJzo4DsOBOFzgbQ22AMuWpZ2sv4FGtbjr5Y55Os=
Subject key identifier: 72:1A:88:24:3D:2C:4B:95:AC:FA:D1:86:8A:7B:B5:39:76:23:A9:05
Authority key identifier: B9:E2:73:C8:BA:0B:0A:FB:20:5D:00:B3:17:0E:69:B8:16:74:33:97
Certificate issuer: /CN=b9e273c8ba0b0afb205d00b3170e69b816743397
Certificate serial: 019A71EE64B97DD5D9F7017D4AF189A48E0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueJzyLoLCvsgXQCzFw5puBZ0M5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft
Manifest number: 140C
Signing time: Tue 11 Nov 2025 08:00:39 +0000
Manifest this update: Tue 11 Nov 2025 08:00:39 +0000
Manifest next update: Wed 12 Nov 2025 08:00:39 +0000
Files and hashes: 1: 9ESyzHY3tDwoLy0qTdzIIz35dKQ.roa (hash: jqOOKsXrn7t0ZH3AYn6ArJKblZkGHsI4rkiKFVYX+aw=)
2: ueJzyLoLCvsgXQCzFw5puBZ0M5c.crl (hash: xOtBl/qDkYhjfkudDuGFJsI1gbAPxmLWJZ7RhN7xzvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ueJzyLoLCvsgXQCzFw5puBZ0M5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:64:b9:7d:d5:d9:f7:01:7d:4a:f1:89:a4:8e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e273c8ba0b0afb205d00b3170e69b816743397
Validity
Not Before: Nov 11 08:00:39 2025 GMT
Not After : Nov 12 08:00:39 2025 GMT
Subject: CN=721a88243d2c4b95acfad1868a7bb5397623a905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:29:2a:bb:a3:1d:51:e5:98:f0:37:87:53:42:
04:9a:08:f6:e5:9d:08:0d:42:44:e2:2b:9b:81:be:
7c:59:1b:08:ed:e4:b7:cf:c9:cb:95:21:a7:1b:de:
25:4d:5b:c1:6f:b5:91:b0:3f:65:48:f5:25:dd:cf:
36:9a:f3:a1:aa:5d:2a:81:7b:6c:a5:ca:55:eb:e8:
2e:19:50:e7:52:b4:15:1f:99:71:0d:27:5c:04:8d:
a6:b3:8c:ec:2f:28:7b:ae:6f:7e:eb:8e:0b:4b:6c:
3a:c8:67:f6:61:f2:3c:ed:71:81:4c:38:6b:8e:bb:
09:68:74:20:55:8c:72:7d:af:a8:bf:67:f5:15:7c:
b6:78:90:62:1f:66:b7:99:66:41:5f:01:42:cb:fd:
32:1a:cb:bf:50:f5:19:6b:5a:fc:65:5b:6d:91:3d:
fb:9d:25:1e:7a:33:e0:da:8a:87:20:99:f0:e7:02:
2a:88:13:79:a4:85:3c:54:9c:db:da:2e:87:c9:ee:
bd:a3:23:70:15:62:77:88:32:d6:ff:de:b8:e5:ba:
81:67:68:36:d7:5c:ee:c8:a1:2e:3d:b9:27:a0:82:
73:3a:98:ad:f5:30:c1:cc:62:9f:d8:af:80:5f:13:
cf:3c:9a:a0:30:5e:9e:30:fa:8c:14:db:86:ab:5a:
d2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1A:88:24:3D:2C:4B:95:AC:FA:D1:86:8A:7B:B5:39:76:23:A9:05
X509v3 Authority Key Identifier:
keyid:B9:E2:73:C8:BA:0B:0A:FB:20:5D:00:B3:17:0E:69:B8:16:74:33:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueJzyLoLCvsgXQCzFw5puBZ0M5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a0:88:db:f8:b6:be:a9:09:ae:fc:b6:64:e9:89:4c:a5:4d:
ac:af:3b:9f:0a:52:42:c1:65:b1:aa:00:f0:ef:ea:f1:3a:3f:
37:58:4e:2d:ea:95:e7:96:8b:11:56:f7:23:fe:e4:04:30:74:
a5:8b:5c:82:01:10:bb:88:37:57:da:d3:45:3f:80:04:1b:df:
1d:cf:e7:f9:8b:a9:fa:97:d4:6d:a3:db:80:59:e6:b3:2f:c2:
ad:ed:e7:3b:1b:24:25:09:79:f6:7e:2e:b3:08:d4:87:ed:e5:
45:db:cb:ac:99:d9:a2:66:f8:d0:cc:cf:f6:06:a2:7d:1a:87:
07:3c:e9:09:0f:89:b4:dc:aa:c2:93:ee:83:f2:23:08:e4:16:
d8:dd:de:ae:ec:8e:c1:6f:c6:ca:a0:64:fd:e9:b8:47:eb:08:
37:6d:a4:50:5e:f6:7b:fe:86:c2:aa:71:88:41:80:14:a1:0f:
6e:30:26:9d:19:1c:55:bb:70:17:9e:04:f3:fe:98:e0:99:54:
5f:63:9f:fa:da:73:d3:66:30:1d:6b:ae:e2:b6:22:22:e1:b3:
12:ed:b6:23:eb:77:3a:bf:12:fb:50:4f:65:70:a0:d2:28:94:
12:94:9b:8c:aa:4d:e0:99:18:38:8f:98:b9:ce:a6:cc:04:57:
8a:f4:45:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7mS5fdXZ9wF9SvGJpI4KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZTI3M2M4YmEwYjBhZmIyMDVkMDBiMzE3MGU2OWI4MTY3
NDMzOTcwHhcNMjUxMTExMDgwMDM5WhcNMjUxMTEyMDgwMDM5WjAzMTEwLwYDVQQD
Eyg3MjFhODgyNDNkMmM0Yjk1YWNmYWQxODY4YTdiYjUzOTc2MjNhOTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCkqu6MdUeWY8DeHU0IEmgj25Z0I
DUJE4iubgb58WRsI7eS3z8nLlSGnG94lTVvBb7WRsD9lSPUl3c82mvOhql0qgXts
pcpV6+guGVDnUrQVH5lxDSdcBI2ms4zsLyh7rm9+644LS2w6yGf2YfI87XGBTDhr
jrsJaHQgVYxyfa+ov2f1FXy2eJBiH2a3mWZBXwFCy/0yGsu/UPUZa1r8ZVttkT37
nSUeejPg2oqHIJnw5wIqiBN5pIU8VJzb2i6Hye69oyNwFWJ3iDLW/9645bqBZ2g2
11zuyKEuPbknoIJzOpit9TDBzGKf2K+AXxPPPJqgMF6eMPqMFNuGq1rStwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIaiCQ9LEuVrPrRhop7tTl2I6kFMB8GA1UdIwQY
MBaAFLnic8i6Cwr7IF0AsxcOabgWdDOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWVKenlMb0xDdnNnWFFDekZ3NXB1QlowTTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi83NzgxZmUtMTMwNC00M2Y4LWI3N2Mt
M2Q5NmJkM2U3ODUzLzEvdWVKenlMb0xDdnNnWFFDekZ3NXB1QlowTTVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi83NzgxZmUtMTMwNC00M2Y4LWI3N2MtM2Q5NmJkM2U3ODUz
LzEvdWVKenlMb0xDdnNnWFFDekZ3NXB1QlowTTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhqCI2/i2
vqkJrvy2ZOmJTKVNrK87nwpSQsFlsaoA8O/q8To/N1hOLeqV55aLEVb3I/7kBDB0
pYtcggEQu4g3V9rTRT+ABBvfHc/n+Yup+pfUbaPbgFnmsy/Cre3nOxskJQl59n4u
swjUh+3lRdvLrJnZomb40MzP9gaifRqHBzzpCQ+JtNyqwpPug/IjCOQW2N3eruyO
wW/GyqBk/em4R+sIN22kUF72e/6GwqpxiEGAFKEPbjAmnRkcVbtwF54E8/6Y4JlU
X2Of+tpz02YwHWuu4rYiIuGzEu22I+t3Or8S+1BPZXCg0iiUEpSbjKpN4JkYOI+Y
uc6mzARXivRF6w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:03 2025 by rpki-client