Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft
File: Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft (raw, json)
Hash identifier: tBzTSVqFFBPm7grineuUW0UcFhA+pZfilE0ClkMzZMw=
Subject key identifier: E1:64:E9:41:41:2F:68:8E:65:F2:4D:CA:D9:45:BE:FD:20:DB:C8:A4
Authority key identifier: 52:EE:48:9F:36:DE:04:21:9C:D2:19:2E:04:A7:BD:B1:39:14:64:8F
Certificate issuer: /CN=52ee489f36de04219cd2192e04a7bdb13914648f
Certificate serial: 0199FDD8F7EA75B18A0F99DE14739AF86F6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft
Manifest number: 120D
Signing time: Sun 19 Oct 2025 19:01:18 +0000
Manifest this update: Sun 19 Oct 2025 19:01:18 +0000
Manifest next update: Mon 20 Oct 2025 19:01:18 +0000
Files and hashes: 1: Uu5InzbeBCGc0hkuBKe9sTkUZI8.crl (hash: wUjoWvcO1369iOmkxx61x3YzRgWs1UL1b58q94/JdXI=)
2: f_wj04ETq9bQrF4XPngK42N1KfA.roa (hash: g/L8C+Uofn47VNMVi+59N+SowKWU37rtsG4L1uBFxUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:f7:ea:75:b1:8a:0f:99:de:14:73:9a:f8:6f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ee489f36de04219cd2192e04a7bdb13914648f
Validity
Not Before: Oct 19 19:01:18 2025 GMT
Not After : Oct 20 19:01:18 2025 GMT
Subject: CN=e164e941412f688e65f24dcad945befd20dbc8a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3d:f9:95:36:a4:42:6c:ff:47:81:d2:b0:ee:
af:91:8d:fd:88:60:91:06:f0:63:0c:f5:47:96:81:
3f:ad:5a:b5:79:fe:6d:1a:02:4f:0f:2f:8a:45:84:
5d:3f:f3:32:af:81:87:82:be:4c:e5:ab:50:18:87:
2a:a0:0b:d2:e9:99:81:a3:ea:2f:9c:68:c1:03:d4:
4a:8f:df:19:de:f7:be:cd:c5:05:58:50:07:64:c0:
67:a8:fe:6d:e5:17:4e:bc:68:57:bf:12:0a:96:a6:
8a:1a:82:67:fa:62:4d:ff:13:01:99:80:c5:d6:31:
05:55:03:80:f6:13:73:50:0b:08:63:c7:d6:ed:e8:
91:8d:b4:2f:49:39:db:5b:0f:d8:97:05:33:e2:b1:
fb:de:ec:c8:78:57:5a:3b:eb:bf:e2:be:a7:57:35:
f8:f9:b1:61:ac:63:03:b7:13:6d:23:ed:99:24:da:
f7:a0:77:17:b1:23:7c:b1:5a:88:c9:8b:3a:f7:b8:
c9:88:0e:ce:22:c5:92:10:f7:08:f4:e3:d1:6a:ba:
3c:50:cc:82:fc:f2:bc:ef:a2:91:53:4a:b7:72:8b:
36:5a:69:0c:49:cc:12:8d:78:a6:d3:11:f5:b0:55:
ff:3e:cc:6c:14:ba:cf:ee:d3:7a:4f:82:c6:13:39:
1f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:64:E9:41:41:2F:68:8E:65:F2:4D:CA:D9:45:BE:FD:20:DB:C8:A4
X509v3 Authority Key Identifier:
keyid:52:EE:48:9F:36:DE:04:21:9C:D2:19:2E:04:A7:BD:B1:39:14:64:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:bf:80:bd:23:92:76:c6:ba:4f:59:17:d0:d7:95:5f:a1:3d:
92:9c:18:3a:9b:ce:32:8c:cd:00:27:d5:16:40:fb:f0:23:c8:
4a:ba:14:af:c3:ee:da:8d:b9:6e:d2:7c:65:57:46:20:41:14:
0b:06:3d:2b:e1:36:64:ce:4c:98:77:59:06:57:1f:95:bc:00:
9b:b0:5b:d2:a8:ec:06:f5:02:79:99:1e:bc:a4:03:f4:00:0a:
7a:75:a2:1a:5a:9d:56:fd:8e:a6:6d:88:dd:3b:85:d2:21:ba:
eb:40:98:fa:b7:2b:98:13:69:5b:9f:c6:30:e3:34:5b:eb:7e:
ee:9e:01:07:3d:4f:ff:6d:31:39:a4:66:6e:38:5a:a6:ac:89:
89:79:46:17:80:5a:18:0a:f7:18:c5:dd:8b:d2:d0:95:64:c5:
cc:20:aa:0c:1e:1e:f3:56:7c:fb:14:a4:f7:ad:22:de:6a:48:
3f:7a:2b:5f:dc:ca:27:5e:a3:05:c4:dd:38:27:27:f7:c9:f2:
20:09:11:a5:07:28:17:ce:c0:b0:97:3e:3e:ab:e0:8e:06:b6:
a9:07:dc:41:4f:f5:d3:bf:2b:38:e5:91:85:26:12:c3:87:08:
9f:84:ae:61:eb:91:cc:ef:17:97:58:eb:e5:1b:81:1b:38:cc:
f8:ab:9a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:17:13 2025 by rpki-client