Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
File: ucxtc0SS5BBmCKJPoble-qh5xFo.mft (raw, json)
Hash identifier: JwQizmMDuYLsKxRx7MbJ8llOZ9QdoT8BD0hco4Emu6w=
Subject key identifier: F1:9D:0A:0A:61:AD:95:DA:8A:72:A9:19:60:AD:3E:E8:C7:0F:38:A6
Authority key identifier: B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
Certificate issuer: /CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Certificate serial: 019A71EEC22699076DFC60B8602A5E9ADC86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 08:01:03 +0000
Manifest this update: Tue 11 Nov 2025 08:01:03 +0000
Manifest next update: Wed 12 Nov 2025 08:01:03 +0000
Files and hashes: 1: 9U8A1KCT8rlJoIi8RO4fIEudUPM.roa (hash: 06pwZ9byNjemxUaq18ITW8U3Jpcvif9Eha+WU/EFPjM=)
2: ucxtc0SS5BBmCKJPoble-qh5xFo.crl (hash: /0YyY/BIAcLRfkepfAtyp4JdEBvjX4wzGA4ecCjKGT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c2:26:99:07:6d:fc:60:b8:60:2a:5e:9a:dc:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Validity
Not Before: Nov 11 08:01:03 2025 GMT
Not After : Nov 12 08:01:03 2025 GMT
Subject: CN=f19d0a0a61ad95da8a72a91960ad3ee8c70f38a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5d:3b:8e:b7:bb:5a:cb:74:79:47:57:33:3f:
08:11:dd:90:f4:26:e1:4c:ca:f5:90:d5:54:fb:cd:
e0:f7:c9:fe:00:c3:26:db:2a:ca:a8:66:87:db:11:
18:ab:e5:a5:1e:2e:10:d5:ff:a8:f6:75:de:b3:49:
5f:71:ab:ac:57:fe:c4:eb:db:5e:f0:21:68:97:c7:
e7:a2:a6:c7:a0:42:83:4d:8e:a0:ea:e6:c2:49:06:
9e:d5:5b:fc:f7:db:a6:b5:82:09:ad:16:a9:e6:18:
4e:9f:ab:a3:61:34:3d:7d:be:6e:8f:31:61:67:1d:
a1:bc:e2:dd:ca:63:ea:00:86:48:68:2a:4e:7c:81:
06:c9:fb:a7:1e:3b:4a:46:7e:3a:4e:22:81:da:d1:
f4:3b:0e:59:a5:b3:ad:7e:26:b5:cb:34:57:23:8f:
6c:5f:7a:36:19:f8:bc:e1:0d:f2:43:94:0e:0f:b7:
e0:60:d4:2b:8a:67:35:d4:b6:26:23:62:45:5a:33:
88:26:54:12:ad:79:6c:06:3e:e0:9f:ef:7e:e9:cf:
b9:d2:2c:c0:de:86:bf:a4:80:0f:ab:60:07:95:81:
ec:e0:19:66:36:af:05:c3:8c:47:3a:2f:6e:07:c4:
9d:97:e8:54:3d:6f:f7:ee:14:2f:14:11:e0:4d:35:
2e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9D:0A:0A:61:AD:95:DA:8A:72:A9:19:60:AD:3E:E8:C7:0F:38:A6
X509v3 Authority Key Identifier:
keyid:B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:51:e2:ad:46:fa:7e:d3:1a:42:ce:dc:47:06:8b:b6:bf:4c:
10:9c:73:66:c7:f8:40:79:ce:c7:db:34:b3:95:9c:0e:d8:49:
33:95:3a:41:25:a5:f9:10:fc:be:e7:d0:13:51:06:cd:52:35:
57:51:51:c3:29:4d:7a:45:79:bc:70:fa:ef:42:70:26:06:0e:
51:2d:0b:90:dc:b3:d2:65:40:1b:19:98:b1:d2:5e:ec:fc:cb:
fe:f5:14:09:7e:0a:7d:50:26:9e:cf:fb:c2:01:ec:63:6d:ea:
6e:9d:3c:f9:ab:18:ba:cf:2b:83:19:c8:b8:7a:76:04:3a:cd:
5b:37:f7:15:dd:98:b8:4e:86:18:b3:5d:58:7c:de:b5:ff:c3:
09:fa:89:e2:da:68:ea:0a:5c:7e:47:85:c1:81:a6:3b:7a:3e:
9c:8d:76:4c:a6:80:45:93:11:2b:98:e3:eb:6e:15:5b:b4:54:
b7:9b:df:ff:d5:b5:f9:81:9f:34:b1:74:59:79:b6:b3:9d:bf:
ec:a1:5f:93:dd:7f:23:eb:c7:7c:8e:15:88:14:0f:03:a4:86:
1e:0e:10:92:bb:09:0a:b7:1e:d9:a6:aa:b7:9e:d0:93:da:54:
4c:92:38:f6:b2:65:14:d2:68:8d:c3:f7:2d:0c:32:76:63:a4:
95:a9:ec:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7sImmQdt/GC4YCpemtyGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5Y2M2ZDczNDQ5MmU0MTA2NjA4YTI0ZmExYjk1ZWZhYTg3
OWM0NWEwHhcNMjUxMTExMDgwMTAzWhcNMjUxMTEyMDgwMTAzWjAzMTEwLwYDVQQD
EyhmMTlkMGEwYTYxYWQ5NWRhOGE3MmE5MTk2MGFkM2VlOGM3MGYzOGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF07jre7Wst0eUdXMz8IEd2Q9Cbh
TMr1kNVU+83g98n+AMMm2yrKqGaH2xEYq+WlHi4Q1f+o9nXes0lfcausV/7E69te
8CFol8fnoqbHoEKDTY6g6ubCSQae1Vv899umtYIJrRap5hhOn6ujYTQ9fb5ujzFh
Zx2hvOLdymPqAIZIaCpOfIEGyfunHjtKRn46TiKB2tH0Ow5ZpbOtfia1yzRXI49s
X3o2Gfi84Q3yQ5QOD7fgYNQrimc11LYmI2JFWjOIJlQSrXlsBj7gn+9+6c+50izA
3oa/pIAPq2AHlYHs4BlmNq8Fw4xHOi9uB8Sdl+hUPW/37hQvFBHgTTUuoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGdCgphrZXainKpGWCtPujHDzimMB8GA1UdIwQY
MBaAFLnMbXNEkuQQZgiiT6G5XvqoecRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWN4dGMwU1M1QkJtQ0tKUG9ibGUtcWg1eEZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMTA5MjItOTk1NC00NTNmLWIxYzYt
ODIwZDVmYzQ0ZTM1LzEvdWN4dGMwU1M1QkJtQ0tKUG9ibGUtcWg1eEZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9mMTA5MjItOTk1NC00NTNmLWIxYzYtODIwZDVmYzQ0ZTM1
LzEvdWN4dGMwU1M1QkJtQ0tKUG9ibGUtcWg1eEZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAClHirUb6
ftMaQs7cRwaLtr9MEJxzZsf4QHnOx9s0s5WcDthJM5U6QSWl+RD8vufQE1EGzVI1
V1FRwylNekV5vHD670JwJgYOUS0LkNyz0mVAGxmYsdJe7PzL/vUUCX4KfVAmns/7
wgHsY23qbp08+asYus8rgxnIuHp2BDrNWzf3Fd2YuE6GGLNdWHzetf/DCfqJ4tpo
6gpcfkeFwYGmO3o+nI12TKaARZMRK5jj624VW7RUt5vf/9W1+YGfNLF0WXm2s52/
7KFfk91/I+vHfI4ViBQPA6SGHg4QkrsJCrce2aaqt57Qk9pUTJI49rJlFNJojcP3
LQwydmOklans6g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:10 2025 by rpki-client