Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
File: UucbOdfElDC7x3u2WVLkAhoCUxY.mft (raw, json)
Hash identifier: 9Z1qvdgLcqEf+89krFH5u2M07mKlVfX8/gWHTDBAjYY=
Subject key identifier: 55:64:98:9F:30:D2:06:99:76:A7:65:F5:E4:67:A5:63:29:93:20:F5
Authority key identifier: 52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16
Certificate issuer: /CN=52e71b39d7c49430bbc77bb65952e4021a025316
Certificate serial: 0199FCC6A85AC401091B13C8A62C7F1BC41E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
Manifest number: 13C6
Signing time: Sun 19 Oct 2025 14:01:41 +0000
Manifest this update: Sun 19 Oct 2025 14:01:41 +0000
Manifest next update: Mon 20 Oct 2025 14:01:41 +0000
Files and hashes: 1: UucbOdfElDC7x3u2WVLkAhoCUxY.crl (hash: WqUReh+pqtCI9YwFNgPGIvAlVBQ3BOYD1nQC2j7RDt0=)
2: gTDuY8r1VNymJYjX19G7pBZoVz8.roa (hash: DFZawHbPH3fUqxF/xfDF3iDUtDCENnqE3cXs8GAuxpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:a8:5a:c4:01:09:1b:13:c8:a6:2c:7f:1b:c4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e71b39d7c49430bbc77bb65952e4021a025316
Validity
Not Before: Oct 19 14:01:41 2025 GMT
Not After : Oct 20 14:01:41 2025 GMT
Subject: CN=5564989f30d2069976a765f5e467a563299320f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:20:19:74:78:5a:50:5c:0b:57:40:3c:db:72:
51:53:d8:e2:c0:30:ba:db:ad:6c:52:c9:72:2e:05:
57:dd:3d:9d:87:97:79:7f:76:44:09:b4:fa:94:eb:
22:9c:86:7c:a2:ff:ed:7c:e6:90:a6:3d:83:65:a7:
57:dc:9a:61:b9:83:4f:4c:bc:17:d9:e2:2d:3e:73:
09:38:ae:06:62:07:eb:aa:fd:2e:53:35:4d:74:78:
5c:69:72:83:99:65:01:12:46:e3:f7:dd:dd:87:a4:
92:87:9e:b4:83:c5:07:00:fd:0d:dd:99:7b:a4:0b:
cb:34:72:80:b1:4b:ad:3b:95:13:e4:ff:95:77:5b:
5e:e4:e7:00:d8:63:ee:00:68:19:7d:15:8a:a2:b7:
c5:92:a8:0f:3b:2a:85:1d:41:68:fe:c7:33:0c:a6:
68:fd:96:83:18:29:f4:b1:af:72:69:51:4a:2e:3e:
6a:83:d2:61:41:0a:0e:1a:79:c6:5d:00:39:86:f0:
67:d9:f6:3b:c1:6c:5e:ff:56:4b:2d:df:a5:e9:47:
4e:2e:84:cb:fc:43:7a:32:8c:5b:a0:48:c1:c0:4e:
83:71:e0:94:22:da:b5:1d:c8:e0:c4:16:4c:d1:b9:
db:90:49:0d:6c:2c:de:ad:a1:50:76:5c:ac:b5:dd:
cf:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:64:98:9F:30:D2:06:99:76:A7:65:F5:E4:67:A5:63:29:93:20:F5
X509v3 Authority Key Identifier:
keyid:52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a9:38:60:f5:b7:0b:cf:cd:3c:6a:3d:9a:31:19:f6:b0:ac:
9f:25:01:b5:dc:05:b5:7b:b9:a5:7b:6c:b5:11:0b:5e:62:79:
68:88:1e:40:7b:52:9d:09:69:12:41:14:da:99:75:3a:9c:e7:
69:1c:41:63:3c:08:69:72:cd:4e:2d:e8:79:21:31:cb:14:4d:
4e:23:35:a9:81:44:2c:c4:8d:d5:ba:ce:90:10:00:db:d3:24:
db:07:10:ff:fb:cb:b8:9e:97:97:bd:ed:e4:dd:9d:16:dd:28:
e6:43:15:71:ac:20:26:77:cb:ca:23:0f:91:63:bf:f6:26:b5:
db:72:5f:f1:87:3c:d2:63:33:9c:bb:17:d0:b4:3f:e7:9f:df:
93:34:48:a2:89:7f:d0:7f:d6:60:af:b8:2b:2b:c8:03:c7:c9:
b9:67:e2:7e:4f:e6:e6:85:a8:3b:87:f7:44:51:45:e9:0e:b0:
47:86:75:94:a1:15:c3:a3:fa:50:b2:71:7b:6b:56:a1:9c:b5:
85:04:71:cb:7d:b7:2b:83:81:03:8b:43:7b:7e:2a:06:a0:e9:
e2:52:9a:f0:6b:13:17:42:47:0b:a1:0b:79:d7:ef:6f:fd:53:
ea:88:42:5a:72:f6:e8:16:3e:62:4a:91:dd:7a:fe:39:b8:88:
47:4a:ef:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xqhaxAEJGxPIpix/G8QeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZTcxYjM5ZDdjNDk0MzBiYmM3N2JiNjU5NTJlNDAyMWEw
MjUzMTYwHhcNMjUxMDE5MTQwMTQxWhcNMjUxMDIwMTQwMTQxWjAzMTEwLwYDVQQD
Eyg1NTY0OTg5ZjMwZDIwNjk5NzZhNzY1ZjVlNDY3YTU2MzI5OTMyMGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SAZdHhaUFwLV0A823JRU9jiwDC6
261sUslyLgVX3T2dh5d5f3ZECbT6lOsinIZ8ov/tfOaQpj2DZadX3JphuYNPTLwX
2eItPnMJOK4GYgfrqv0uUzVNdHhcaXKDmWUBEkbj993dh6SSh560g8UHAP0N3Zl7
pAvLNHKAsUutO5UT5P+Vd1te5OcA2GPuAGgZfRWKorfFkqgPOyqFHUFo/sczDKZo
/ZaDGCn0sa9yaVFKLj5qg9JhQQoOGnnGXQA5hvBn2fY7wWxe/1ZLLd+l6UdOLoTL
/EN6MoxboEjBwE6DceCUItq1HcjgxBZM0bnbkEkNbCzeraFQdlystd3PbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVkmJ8w0gaZdqdl9eRnpWMpkyD1MB8GA1UdIwQY
MBaAFFLnGznXxJQwu8d7tllS5AIaAlMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXVjYk9kZkVsREM3eDN1MldWTGtBaG9DVXhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9jMzlhOGMtM2JiMC00NDlkLTg5YzMt
NmZiYTZhMWUwZWU3LzEvVXVjYk9kZkVsREM3eDN1MldWTGtBaG9DVXhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9jMzlhOGMtM2JiMC00NDlkLTg5YzMtNmZiYTZhMWUwZWU3
LzEvVXVjYk9kZkVsREM3eDN1MldWTGtBaG9DVXhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6k4YPW3
C8/NPGo9mjEZ9rCsnyUBtdwFtXu5pXtstRELXmJ5aIgeQHtSnQlpEkEU2pl1Opzn
aRxBYzwIaXLNTi3oeSExyxRNTiM1qYFELMSN1brOkBAA29Mk2wcQ//vLuJ6Xl73t
5N2dFt0o5kMVcawgJnfLyiMPkWO/9ia123Jf8Yc80mMznLsX0LQ/55/fkzRIool/
0H/WYK+4KyvIA8fJuWfifk/m5oWoO4f3RFFF6Q6wR4Z1lKEVw6P6ULJxe2tWoZy1
hQRxy323K4OBA4tDe34qBqDp4lKa8GsTF0JHC6ELedfvb/1T6ohCWnL26BY+YkqR
3Xr+ObiIR0rvsw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:16 2025 by rpki-client