Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.mft
File: uidBVRBOQzKMO_oq1qxnGXZvEyU.mft (raw, json)
Hash identifier: goQqNu+BdWS5bkINhIKatUTMtX8YfdmwDGiXregWxVw=
Subject key identifier: 75:CA:23:C8:35:D6:36:3D:A8:9C:E6:39:06:F8:6D:31:2F:4D:1E:F1
Authority key identifier: BA:27:41:55:10:4E:43:32:8C:3B:FA:2A:D6:AC:67:19:76:6F:13:25
Certificate issuer: /CN=ba274155104e43328c3bfa2ad6ac6719766f1325
Certificate serial: 019A7226675E24FF36C028841C274CB10F5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uidBVRBOQzKMO_oq1qxnGXZvEyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.mft
Manifest number: 0562
Signing time: Tue 11 Nov 2025 09:01:50 +0000
Manifest this update: Tue 11 Nov 2025 09:01:50 +0000
Manifest next update: Wed 12 Nov 2025 09:01:50 +0000
Files and hashes: 1: H4KA0sxWbQn0TsS16gkHA_XLpks.roa (hash: aXldWw/SJurvCLdfL24USIy9/ELw56XWGz7XXExpHyU=)
2: uidBVRBOQzKMO_oq1qxnGXZvEyU.crl (hash: ncvL8TUUdSx+Q4fMa69M65AtLSVJFHWRTThUKn85vmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uidBVRBOQzKMO_oq1qxnGXZvEyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:67:5e:24:ff:36:c0:28:84:1c:27:4c:b1:0f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba274155104e43328c3bfa2ad6ac6719766f1325
Validity
Not Before: Nov 11 09:01:50 2025 GMT
Not After : Nov 12 09:01:50 2025 GMT
Subject: CN=75ca23c835d6363da89ce63906f86d312f4d1ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a1:25:f3:34:07:17:f0:aa:03:8f:e0:e6:61:
4c:13:9d:b8:ff:63:fe:73:b6:a9:08:a7:29:7e:a0:
8a:e9:f3:ff:63:6f:a9:9d:72:fd:58:16:a9:ea:c4:
2e:42:e6:17:8a:47:40:35:32:94:d6:30:23:b8:fc:
24:ae:15:36:15:c8:00:64:d0:31:4e:70:2e:3b:8f:
a3:a3:16:2a:2b:52:33:6b:b6:42:e1:b9:06:0e:e2:
01:e7:29:6a:19:c8:4e:76:5d:da:cc:5b:85:19:14:
29:9f:bb:1a:b5:47:9c:b6:d5:e5:00:74:4d:c5:bf:
41:2c:5f:fb:16:1f:c5:bb:c2:e5:1f:ed:81:c7:4c:
b1:2d:14:c4:5b:ed:07:45:51:14:e1:85:b4:bf:2a:
a0:f2:83:41:7c:15:0b:da:14:93:d0:a8:c5:3e:53:
1b:19:e5:77:b8:c0:26:b8:77:7e:9b:3f:86:40:d2:
bb:1b:d1:37:17:0a:59:06:c3:e0:20:91:f3:e8:07:
71:a9:22:2e:93:19:ff:d1:c4:d8:c6:d8:62:79:97:
30:4f:12:c9:01:15:6f:5e:ef:ff:b2:88:8f:29:5e:
a1:76:da:ee:e4:ad:b8:0b:1e:36:43:a1:3d:1c:29:
ce:39:2f:fd:32:1f:12:a2:05:02:f4:17:cc:4d:7f:
3b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CA:23:C8:35:D6:36:3D:A8:9C:E6:39:06:F8:6D:31:2F:4D:1E:F1
X509v3 Authority Key Identifier:
keyid:BA:27:41:55:10:4E:43:32:8C:3B:FA:2A:D6:AC:67:19:76:6F:13:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uidBVRBOQzKMO_oq1qxnGXZvEyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:0d:b4:79:4a:f5:19:8c:e0:04:9a:30:5a:a5:80:0b:a2:83:
d0:4d:ec:cf:97:24:77:9a:c1:64:37:c2:74:f3:12:86:36:9a:
9f:81:34:fb:5c:52:c7:fb:75:88:10:ea:01:6b:bc:09:c3:2d:
29:04:15:71:bd:81:d7:7c:6c:3b:db:fa:d1:df:5e:0c:0e:13:
6e:b6:13:7e:1f:b1:15:f7:6b:f5:2b:75:17:36:34:6c:fb:18:
8d:33:7f:57:2b:26:d4:df:c9:64:2e:a7:bd:fd:c1:b4:b7:79:
71:5e:bd:b3:85:79:4b:eb:e1:bb:5d:90:46:d5:1c:4d:84:52:
bc:39:b3:35:72:82:5a:3f:47:e4:03:c3:62:c7:12:44:e9:b7:
cb:9a:78:28:51:22:2d:ad:af:32:4a:f6:10:1b:59:f3:c3:28:
4d:5e:fa:6c:f9:56:c0:e2:5f:b3:b8:e7:dc:c4:f8:a0:71:0f:
4c:5f:06:73:a4:8c:3f:18:62:d9:a8:7c:0c:87:e3:25:8b:82:
d5:47:f4:5e:43:d7:8d:28:49:4a:d3:25:0e:d2:8f:bc:fd:29:
9e:e6:60:bf:1b:3b:31:a8:44:a9:be:d0:73:06:61:05:84:55:
8d:05:ee:fa:35:b4:e8:80:43:b5:da:51:14:cf:cd:12:b7:be:
a5:5c:6a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:26 2025 by rpki-client