Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
File: Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft (raw, json)
Hash identifier: WCmbtDe9pdZ1CwP7RMspqjMTGhKh9CurTF3/8TXbJTg=
Subject key identifier: FF:D1:6C:C3:C8:18:03:E9:68:6A:F4:EC:5E:A5:48:3B:B1:0F:6F:7E
Authority key identifier: 51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
Certificate issuer: /CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Certificate serial: 01991BE5DB5B1F67B2B4F80921EFE2BE42AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
Manifest number: 0F99
Signing time: Fri 05 Sep 2025 22:01:12 +0000
Manifest this update: Fri 05 Sep 2025 22:01:12 +0000
Manifest next update: Sat 06 Sep 2025 22:01:12 +0000
Files and hashes: 1: Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl (hash: lgL4S9rL0/MdxCoLlvRgJmS+LLJvwJYk17176vhYOd0=)
2: wcLPDXwZhknfwFVrmzWdaV09zJc.roa (hash: KCyUIbiI7WKGmxPwkUMQCU2Fnp9j24d2NyqBltI+vd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1b:e5:db:5b:1f:67:b2:b4:f8:09:21:ef:e2:be:42:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Validity
Not Before: Sep 5 22:01:12 2025 GMT
Not After : Sep 6 22:01:12 2025 GMT
Subject: CN=ffd16cc3c81803e9686af4ec5ea5483bb10f6f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:56:08:cc:f1:9b:5d:69:8e:85:67:48:92:64:
ae:09:07:7a:e3:7c:0f:d6:35:f6:bf:f9:b7:dc:e9:
aa:47:f2:4b:bd:1b:35:46:6f:32:08:b7:c0:45:67:
a9:5b:f0:23:40:7f:39:e3:83:43:70:59:ae:e1:13:
56:4f:fd:8c:70:b3:05:05:5b:59:da:12:0b:e1:12:
03:b2:09:f1:8c:5a:1e:11:48:d0:cd:6a:fe:09:a6:
89:57:c6:37:02:29:0e:5b:98:76:71:e7:93:ae:0a:
7c:07:85:e0:12:7f:a3:25:c5:48:b8:28:28:2b:6d:
51:39:a8:a8:2c:3b:fd:04:f9:63:6b:9d:bc:53:91:
57:c4:8d:41:c4:96:47:6d:bb:30:52:cf:69:9a:7e:
61:51:37:8f:5e:36:6d:f5:aa:45:ce:0a:25:2b:d4:
6a:02:40:c0:91:73:42:5d:9b:ea:6b:1f:94:0e:53:
27:8b:78:6e:bb:70:6a:e7:92:8c:39:42:e0:f9:eb:
69:a4:a1:f4:67:ee:1b:5c:33:5c:7e:e2:63:1d:3d:
86:59:00:14:31:9a:78:cf:5b:1d:51:7e:0b:1b:a9:
45:d9:20:42:a5:88:e4:8e:66:84:45:2f:0b:a0:3e:
e1:bf:44:21:e8:11:f1:ba:25:13:7c:ae:84:5b:e1:
64:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D1:6C:C3:C8:18:03:E9:68:6A:F4:EC:5E:A5:48:3B:B1:0F:6F:7E
X509v3 Authority Key Identifier:
keyid:51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:4c:fe:8b:50:d4:18:93:c0:51:80:f4:a6:bf:2d:9f:e3:d7:
97:35:f8:e9:4f:3a:c6:b6:09:58:60:85:44:5e:47:67:7b:7c:
bb:59:2e:f9:92:dd:31:8a:5f:f6:ad:d0:99:1a:3b:db:b6:40:
3f:98:62:9b:18:68:46:5b:38:e8:ba:00:b5:4d:50:dc:86:11:
8c:ac:9c:0d:9a:ca:53:67:ba:03:96:83:e8:d5:bb:3e:33:41:
e7:18:97:6c:2f:f6:41:25:77:cd:fa:9b:0d:7e:ad:e0:47:ab:
2b:b3:6e:f1:43:0e:e4:10:33:50:18:bc:4a:9f:4d:42:94:9a:
0b:81:8d:d8:4a:3f:e4:30:ff:b4:b3:5c:e7:a7:af:1c:93:c7:
9f:60:76:9f:a5:71:9c:0c:73:13:39:95:66:10:82:84:fb:65:
ac:da:23:b6:a2:46:20:71:37:94:1c:d7:08:19:4f:50:0f:e1:
24:da:2e:66:e5:7e:68:a1:13:6c:d1:e3:5a:13:b1:97:c8:4b:
40:5b:dd:86:c7:3a:fb:f4:f5:8b:c7:c1:a0:59:69:6b:2a:31:
57:03:0a:c8:19:8f:dd:81:b5:79:57:c0:2b:69:a6:08:39:c6:
30:a7:39:41:e1:2d:b8:63:93:c4:74:5a:9b:a9:ea:83:8b:17:
98:20:f6:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkb5dtbH2eytPgJIe/ivkKtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYWM3ZTMzNzQ0YzI0OGY4N2RlMmRjNjNhYWJmMTlmNmM4
NGIwMzIwHhcNMjUwOTA1MjIwMTEyWhcNMjUwOTA2MjIwMTEyWjAzMTEwLwYDVQQD
EyhmZmQxNmNjM2M4MTgwM2U5Njg2YWY0ZWM1ZWE1NDgzYmIxMGY2ZjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FYIzPGbXWmOhWdIkmSuCQd643wP
1jX2v/m33OmqR/JLvRs1Rm8yCLfARWepW/AjQH8544NDcFmu4RNWT/2McLMFBVtZ
2hIL4RIDsgnxjFoeEUjQzWr+CaaJV8Y3AikOW5h2ceeTrgp8B4XgEn+jJcVIuCgo
K21ROaioLDv9BPlja528U5FXxI1BxJZHbbswUs9pmn5hUTePXjZt9apFzgolK9Rq
AkDAkXNCXZvqax+UDlMni3huu3Bq55KMOULg+etppKH0Z+4bXDNcfuJjHT2GWQAU
MZp4z1sdUX4LG6lF2SBCpYjkjmaERS8LoD7hv0Qh6BHxuiUTfK6EW+Fk+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/RbMPIGAPpaGr07F6lSDuxD29+MB8GA1UdIwQY
MBaAFFGsfjN0TCSPh94txjqr8Z9shLAyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWF4LU0zUk1KSS1IM2kzR09xdnhuMnlFc0RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9kZjNjNjEtNzhhZS00ZDFjLWE3NTYt
NjM0ODY0OTc3NGEyLzEvVWF4LU0zUk1KSS1IM2kzR09xdnhuMnlFc0RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9kZjNjNjEtNzhhZS00ZDFjLWE3NTYtNjM0ODY0OTc3NGEy
LzEvVWF4LU0zUk1KSS1IM2kzR09xdnhuMnlFc0RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN0z+i1DU
GJPAUYD0pr8tn+PXlzX46U86xrYJWGCFRF5HZ3t8u1ku+ZLdMYpf9q3QmRo727ZA
P5himxhoRls46LoAtU1Q3IYRjKycDZrKU2e6A5aD6NW7PjNB5xiXbC/2QSV3zfqb
DX6t4EerK7Nu8UMO5BAzUBi8Sp9NQpSaC4GN2Eo/5DD/tLNc56evHJPHn2B2n6Vx
nAxzEzmVZhCChPtlrNojtqJGIHE3lBzXCBlPUA/hJNouZuV+aKETbNHjWhOxl8hL
QFvdhsc6+/T1i8fBoFlpayoxVwMKyBmP3YG1eVfAK2mmCDnGMKc5QeEtuGOTxHRa
m6nqg4sXmCD2Vw==
-----END CERTIFICATE-----
Generated at Sat Sep 6 07:02:10 2025 by rpki-client