Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/ac0e71-2b19-4853-ae6c-159cead77275/1/uiaKbxMfI9Z6-DESZSOTC_7oDxs.mft
File: uiaKbxMfI9Z6-DESZSOTC_7oDxs.mft (raw, json)
Hash identifier: jVLQUs/G2PcdmA30AOsibyS2auYdJ8dBzznT8e4vvEw=
Subject key identifier: DB:72:1A:B4:0D:67:95:A5:B9:12:4F:28:69:82:36:B0:C4:14:03:4B
Authority key identifier: BA:26:8A:6F:13:1F:23:D6:7A:F8:31:12:65:23:93:0B:FE:E8:0F:1B
Certificate issuer: /CN=ba268a6f131f23d67af831126523930bfee80f1b
Certificate serial: 019A7225F6DBC5A37015874266B97629E8E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uiaKbxMfI9Z6-DESZSOTC_7oDxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/ac0e71-2b19-4853-ae6c-159cead77275/1/uiaKbxMfI9Z6-DESZSOTC_7oDxs.mft
Manifest number: 5C
Signing time: Tue 11 Nov 2025 09:01:21 +0000
Manifest this update: Tue 11 Nov 2025 09:01:21 +0000
Manifest next update: Wed 12 Nov 2025 09:01:21 +0000
Files and hashes: 1: uiaKbxMfI9Z6-DESZSOTC_7oDxs.crl (hash: 1p7DnsloC9XoUN5UMJ/uSgCjVNtQiGCPZfJeyX0NLqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/ac0e71-2b19-4853-ae6c-159cead77275/1/uiaKbxMfI9Z6-DESZSOTC_7oDxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/ac0e71-2b19-4853-ae6c-159cead77275/1/uiaKbxMfI9Z6-DESZSOTC_7oDxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uiaKbxMfI9Z6-DESZSOTC_7oDxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f6:db:c5:a3:70:15:87:42:66:b9:76:29:e8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba268a6f131f23d67af831126523930bfee80f1b
Validity
Not Before: Nov 11 09:01:21 2025 GMT
Not After : Nov 12 09:01:21 2025 GMT
Subject: CN=db721ab40d6795a5b9124f28698236b0c414034b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:be:8e:bd:73:41:ff:55:b4:e4:cf:9e:74:0b:
dd:c7:81:71:97:9d:7f:64:66:1a:cf:46:4a:fb:1b:
79:95:44:99:b7:76:d6:f1:4b:fe:11:6e:59:30:f7:
b4:27:79:1b:e3:7d:1f:a2:03:18:68:8d:a5:aa:0b:
0f:e9:ec:7b:a4:dd:51:0e:65:5d:2e:5b:c2:6d:ca:
ef:e2:b5:24:f6:64:fe:45:dd:96:40:b2:6b:b0:17:
f0:2b:c1:30:a6:bc:63:9f:42:71:90:d0:e9:47:10:
ab:25:bd:db:85:cf:f9:77:2a:3c:19:af:f2:63:ed:
7e:45:2c:ac:f6:c1:2d:10:95:9a:38:84:d5:c9:7f:
73:bf:53:9e:16:9a:1c:f9:a7:2e:3a:b3:7e:80:e1:
53:02:f3:88:d1:db:38:77:94:e4:48:75:e1:14:05:
fb:eb:e6:e9:c7:70:0d:86:f5:fe:ec:07:80:73:c1:
61:b5:39:f9:34:6a:3b:01:52:33:b0:ee:3f:18:92:
58:94:86:3a:23:72:7b:1f:63:54:c7:dd:8a:92:f2:
24:d9:dd:57:23:fb:54:ee:79:1e:c9:85:62:d9:b0:
60:78:e3:72:21:ab:ca:ac:54:18:ed:43:06:25:22:
fa:e2:51:67:be:63:33:7e:13:c7:98:da:33:a7:71:
76:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:72:1A:B4:0D:67:95:A5:B9:12:4F:28:69:82:36:B0:C4:14:03:4B
X509v3 Authority Key Identifier:
keyid:BA:26:8A:6F:13:1F:23:D6:7A:F8:31:12:65:23:93:0B:FE:E8:0F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uiaKbxMfI9Z6-DESZSOTC_7oDxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ac0e71-2b19-4853-ae6c-159cead77275/1/uiaKbxMfI9Z6-DESZSOTC_7oDxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ac0e71-2b19-4853-ae6c-159cead77275/1/uiaKbxMfI9Z6-DESZSOTC_7oDxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ee:5e:03:0e:19:fb:60:47:e6:d0:68:49:4a:2f:ea:3a:a6:
4e:9c:87:19:dc:9c:08:3a:10:ae:09:df:d7:db:4e:12:2c:7f:
b4:73:a3:75:75:e9:e2:d9:eb:f2:88:5a:2f:fe:15:20:d8:6a:
5d:bb:85:67:45:1f:05:8d:b9:cd:01:a7:0f:5c:09:d0:c8:db:
67:a1:72:6d:67:67:77:14:a4:71:a6:69:29:ec:41:9e:2a:af:
85:57:57:37:34:70:b0:77:ff:4b:5c:7f:e0:d2:c0:e0:44:6b:
3b:cf:0e:6d:23:0a:de:f4:50:58:18:c4:10:b3:81:46:4c:a2:
9c:9a:b1:de:4f:8c:57:4b:1e:c0:9b:76:6a:0c:9a:49:54:a3:
e6:7c:aa:4e:15:ea:5b:07:86:3e:cd:04:b0:81:ba:9a:5a:58:
c3:6d:4b:65:98:03:db:e3:da:8c:5b:b9:f0:5b:c2:0b:8f:34:
d9:1d:80:e7:ab:db:f6:55:0c:a8:eb:08:31:62:3b:a2:47:8a:
a3:f5:f5:dc:0e:ab:a1:f0:74:f6:48:7c:ca:35:2d:b6:95:9d:
2b:00:df:c0:cf:06:df:33:68:9e:75:22:04:be:46:b0:eb:d1:
81:10:73:a2:f4:b6:11:44:f0:97:cb:30:a5:29:6a:50:17:dd:
b6:5d:8e:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJfbbxaNwFYdCZrl2KejjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhMjY4YTZmMTMxZjIzZDY3YWY4MzExMjY1MjM5MzBiZmVl
ODBmMWIwHhcNMjUxMTExMDkwMTIxWhcNMjUxMTEyMDkwMTIxWjAzMTEwLwYDVQQD
EyhkYjcyMWFiNDBkNjc5NWE1YjkxMjRmMjg2OTgyMzZiMGM0MTQwMzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApr6OvXNB/1W05M+edAvdx4Fxl51/
ZGYaz0ZK+xt5lUSZt3bW8Uv+EW5ZMPe0J3kb430fogMYaI2lqgsP6ex7pN1RDmVd
LlvCbcrv4rUk9mT+Rd2WQLJrsBfwK8Ewprxjn0JxkNDpRxCrJb3bhc/5dyo8Ga/y
Y+1+RSys9sEtEJWaOITVyX9zv1OeFpoc+acuOrN+gOFTAvOI0ds4d5TkSHXhFAX7
6+bpx3ANhvX+7AeAc8FhtTn5NGo7AVIzsO4/GJJYlIY6I3J7H2NUx92KkvIk2d1X
I/tU7nkeyYVi2bBgeONyIavKrFQY7UMGJSL64lFnvmMzfhPHmNozp3F2kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtyGrQNZ5WluRJPKGmCNrDEFANLMB8GA1UdIwQY
MBaAFLomim8THyPWevgxEmUjkwv+6A8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWlhS2J4TWZJOVo2LURFU1pTT1RDXzdvRHhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9hYzBlNzEtMmIxOS00ODUzLWFlNmMt
MTU5Y2VhZDc3Mjc1LzEvdWlhS2J4TWZJOVo2LURFU1pTT1RDXzdvRHhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9hYzBlNzEtMmIxOS00ODUzLWFlNmMtMTU5Y2VhZDc3Mjc1
LzEvdWlhS2J4TWZJOVo2LURFU1pTT1RDXzdvRHhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+5eAw4Z
+2BH5tBoSUov6jqmTpyHGdycCDoQrgnf19tOEix/tHOjdXXp4tnr8ohaL/4VINhq
XbuFZ0UfBY25zQGnD1wJ0MjbZ6FybWdndxSkcaZpKexBniqvhVdXNzRwsHf/S1x/
4NLA4ERrO88ObSMK3vRQWBjEELOBRkyinJqx3k+MV0sewJt2agyaSVSj5nyqThXq
WweGPs0EsIG6mlpYw21LZZgD2+PajFu58FvCC4802R2A56vb9lUMqOsIMWI7okeK
o/X13A6rofB09kh8yjUttpWdKwDfwM8G3zNonnUiBL5GsOvRgRBzovS2EUTwl8sw
pSlqUBfdtl2OQw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:38 2025 by rpki-client