Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
File: ubWqn-6wClEnSH80OEB3rnlw-Bo.mft (raw, json)
Hash identifier: PCDF844oTWNzOKaKHLM9mA2IJwqUXSuDshMnJmemLmU=
Subject key identifier: B1:DA:C3:47:11:DB:A8:4B:22:45:9E:E3:2F:28:63:3B:AC:2A:1A:1A
Authority key identifier: B9:B5:AA:9F:EE:B0:0A:51:27:48:7F:34:38:40:77:AE:79:70:F8:1A
Certificate issuer: /CN=b9b5aa9feeb00a5127487f34384077ae7970f81a
Certificate serial: 019A71EECABE5A2BF788F61BFF245819F20D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
Manifest number: 125A
Signing time: Tue 11 Nov 2025 08:01:06 +0000
Manifest this update: Tue 11 Nov 2025 08:01:06 +0000
Manifest next update: Wed 12 Nov 2025 08:01:06 +0000
Files and hashes: 1: gmoUpsRbFiMA-YVm7rfIcmrKKCY.roa (hash: f5UVu1D2xToivyREz3dQQgbmn+Oo7D3EEy08Tqhgqrs=)
2: ubWqn-6wClEnSH80OEB3rnlw-Bo.crl (hash: xNj2om17kjQ7TxjZH6Lgpkzo5rhaVXKSGjE63t+SrW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ca:be:5a:2b:f7:88:f6:1b:ff:24:58:19:f2:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b5aa9feeb00a5127487f34384077ae7970f81a
Validity
Not Before: Nov 11 08:01:06 2025 GMT
Not After : Nov 12 08:01:06 2025 GMT
Subject: CN=b1dac34711dba84b22459ee32f28633bac2a1a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:92:b7:20:1a:f6:1c:e9:10:b0:f7:c3:98:d1:
d5:8d:04:b4:63:30:db:81:fc:d2:b2:3c:a6:e4:a4:
28:2f:fc:56:06:dd:89:5b:85:5a:de:51:7a:61:1e:
32:92:1e:ea:a7:58:41:23:f9:33:8d:09:fc:8a:d6:
c4:5b:5c:2c:11:e9:47:5a:6b:d5:44:f3:4b:29:3b:
c6:ad:33:86:81:7d:a8:00:47:cb:7d:29:34:f9:1f:
ec:f9:f2:9f:9c:d1:e0:1e:66:47:6d:8e:11:fe:88:
b2:fe:40:1d:06:b7:85:d2:44:c4:64:91:35:1f:1d:
35:d5:20:a3:76:36:05:66:06:24:e9:72:6b:b4:a8:
f1:cb:fe:7c:b7:65:04:49:fe:1e:c4:cf:ec:68:04:
5d:b0:25:f6:a3:ec:1e:42:fb:b0:01:9e:cc:e5:76:
dc:6e:c0:77:f9:e1:dd:23:e9:08:c2:09:7e:84:47:
df:69:32:0e:3b:d0:21:be:d3:f6:c7:b5:47:01:a0:
b3:64:e2:77:04:60:40:c7:f5:aa:57:ec:af:1c:59:
bb:3e:11:cc:49:e9:67:58:9f:da:6b:ff:1c:5b:fb:
03:03:3b:78:07:83:6e:1a:96:1c:a6:51:45:00:7e:
b9:50:3b:20:8b:f4:75:fe:db:9e:c0:04:9d:5c:ce:
c7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DA:C3:47:11:DB:A8:4B:22:45:9E:E3:2F:28:63:3B:AC:2A:1A:1A
X509v3 Authority Key Identifier:
keyid:B9:B5:AA:9F:EE:B0:0A:51:27:48:7F:34:38:40:77:AE:79:70:F8:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:19:98:58:c2:30:0f:a7:18:d5:62:b4:3b:69:42:23:64:3d:
43:23:c6:80:86:ed:80:d4:d2:d5:60:81:c9:0b:cc:ee:ad:4c:
f5:a1:c6:7a:7b:c7:a5:46:45:f8:3b:88:27:8d:ef:6e:00:58:
ff:0d:e9:52:6c:f7:b3:2e:08:96:b8:b8:c3:41:72:54:82:21:
e1:13:02:4e:04:7c:5f:34:66:ac:8d:96:ec:65:2b:20:79:81:
1f:ec:b9:a4:bb:a4:1a:79:37:48:2d:de:b9:20:64:3b:43:ff:
0f:e7:80:f5:44:6c:7f:7a:f5:74:f6:ca:14:41:c4:17:3a:7c:
a5:ca:7a:6b:91:b7:79:79:b8:72:b6:58:59:65:19:f9:44:2c:
50:73:eb:7f:b0:80:41:ea:98:53:bc:d6:d0:c7:17:1e:b9:50:
1b:6c:3c:58:40:6f:25:65:fb:e8:7f:17:f6:a4:f8:e5:e5:76:
02:85:9d:80:3e:e7:1e:56:3e:28:b4:5b:a7:7d:a3:ec:dc:26:
88:8e:39:f6:da:3f:1b:0e:0d:26:b2:cc:ae:7e:de:f3:c2:92:
04:cc:01:36:7e:b3:f8:aa:fd:62:dc:99:fc:bc:b6:a3:c7:7e:
73:78:af:19:e7:38:c1:c1:87:03:64:15:95:b0:93:df:21:1f:
45:25:84:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:29 2025 by rpki-client