Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.mft
File: UC_eWr0nGEuqmtq3za-8w6VEGus.mft (raw, json)
Hash identifier: GcHVYptVlBaqxMw9PfeR3mZXMiEYBKav7jK/xLYSiVk=
Subject key identifier: 52:F5:D7:8E:56:8C:A2:41:9F:D9:C7:D1:A5:3C:A3:6B:E9:1D:1E:80
Authority key identifier: 50:2F:DE:5A:BD:27:18:4B:AA:9A:DA:B7:CD:AF:BC:C3:A5:44:1A:EB
Certificate issuer: /CN=502fde5abd27184baa9adab7cdafbcc3a5441aeb
Certificate serial: 0199FD34564D832CB378D94FA5FA62449BF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UC_eWr0nGEuqmtq3za-8w6VEGus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.mft
Manifest number: 141B
Signing time: Sun 19 Oct 2025 16:01:29 +0000
Manifest this update: Sun 19 Oct 2025 16:01:29 +0000
Manifest next update: Mon 20 Oct 2025 16:01:29 +0000
Files and hashes: 1: UC_eWr0nGEuqmtq3za-8w6VEGus.crl (hash: svEpuH8p0M2YffiHH8bgssiubXNRgDxeTc8DgpeSNHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.mft
rsync://rpki.ripe.net/repository/DEFAULT/UC_eWr0nGEuqmtq3za-8w6VEGus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:56:4d:83:2c:b3:78:d9:4f:a5:fa:62:44:9b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=502fde5abd27184baa9adab7cdafbcc3a5441aeb
Validity
Not Before: Oct 19 16:01:29 2025 GMT
Not After : Oct 20 16:01:29 2025 GMT
Subject: CN=52f5d78e568ca2419fd9c7d1a53ca36be91d1e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:73:dd:f2:66:c1:9e:06:4c:1d:2c:c8:28:25:
32:ed:a7:fb:64:8b:12:ba:e9:4a:b4:fb:c5:85:18:
5a:32:f1:dd:56:05:f0:d4:9d:0e:aa:cd:43:90:71:
4b:bd:ad:d5:37:cc:73:ea:d9:53:d9:43:ef:77:d7:
81:8b:40:f5:2b:ba:d2:d7:34:70:d3:0a:2e:3f:40:
bc:3d:db:61:d5:06:98:fe:bb:63:0e:98:97:a4:97:
fa:4d:8f:71:c6:d4:56:6d:c6:9a:48:e2:b8:84:88:
33:ea:67:aa:fe:e2:c8:2c:bb:19:83:ff:38:09:99:
7a:ab:fe:dc:06:39:0c:0f:4c:0e:74:ff:a7:49:14:
95:30:02:76:83:70:d4:33:9c:78:55:66:b3:da:79:
44:88:53:63:90:27:db:cd:db:0d:8c:95:45:08:d0:
f1:15:1a:c0:cd:31:36:0f:46:3d:3c:ce:35:fd:5d:
f6:ec:f2:1a:0c:af:d9:91:fd:20:ff:80:66:9d:d7:
3e:3a:05:ca:77:8c:8b:6d:22:26:5b:1c:b0:90:8a:
3f:c7:33:68:5a:f1:a8:2e:27:81:52:98:16:f2:c7:
c1:ac:91:ca:b4:cf:7e:26:8e:de:13:4d:55:d8:79:
33:10:74:b2:78:99:14:5d:61:21:aa:0e:aa:e2:1b:
5c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F5:D7:8E:56:8C:A2:41:9F:D9:C7:D1:A5:3C:A3:6B:E9:1D:1E:80
X509v3 Authority Key Identifier:
keyid:50:2F:DE:5A:BD:27:18:4B:AA:9A:DA:B7:CD:AF:BC:C3:A5:44:1A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UC_eWr0nGEuqmtq3za-8w6VEGus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a6:91:4e:b3:5a:23:7f:8d:25:72:b1:97:53:b1:cf:e3:05:
cf:be:5a:8d:7d:4f:97:b3:b2:13:29:d5:94:12:79:0d:a5:1b:
c2:a9:83:51:30:50:83:fb:26:2b:95:ef:72:86:b6:72:40:67:
58:9f:60:6d:b5:dc:b5:4e:45:9f:87:1f:ee:a1:f8:ea:00:c1:
f6:61:57:c0:29:24:22:7f:cc:3b:d1:00:15:aa:12:4d:d9:7d:
70:37:e9:c4:96:af:5f:12:cc:38:a9:d6:f7:bf:13:f8:11:eb:
f5:77:b6:b1:7f:0c:7d:b3:8f:7a:ac:42:7d:a6:f6:13:b8:73:
ff:5c:71:5e:82:1a:df:45:e4:c1:b2:4a:81:84:87:ee:80:7a:
08:a9:cf:51:86:80:a6:e6:1e:33:4f:a2:f8:e8:16:f5:c4:c7:
31:5d:7f:f9:71:38:d5:93:58:23:b1:4f:2f:aa:c9:b1:db:ac:
d7:4d:8a:9d:cb:d5:aa:e5:e6:ed:26:f5:0e:97:13:e1:97:d6:
e9:35:1b:6b:00:be:60:a2:b9:5a:04:34:04:b0:78:8e:7a:fa:
e5:96:71:84:80:59:65:54:bc:a8:a5:86:09:20:65:77:bb:2c:
f2:25:5d:d7:56:08:ed:99:9a:18:e9:4e:f4:b9:4e:e6:b6:f2:
48:6b:b8:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NFZNgyyzeNlPpfpiRJv1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMmZkZTVhYmQyNzE4NGJhYTlhZGFiN2NkYWZiY2MzYTU0
NDFhZWIwHhcNMjUxMDE5MTYwMTI5WhcNMjUxMDIwMTYwMTI5WjAzMTEwLwYDVQQD
Eyg1MmY1ZDc4ZTU2OGNhMjQxOWZkOWM3ZDFhNTNjYTM2YmU5MWQxZTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3Pd8mbBngZMHSzIKCUy7af7ZIsS
uulKtPvFhRhaMvHdVgXw1J0Oqs1DkHFLva3VN8xz6tlT2UPvd9eBi0D1K7rS1zRw
0wouP0C8Pdth1QaY/rtjDpiXpJf6TY9xxtRWbcaaSOK4hIgz6meq/uLILLsZg/84
CZl6q/7cBjkMD0wOdP+nSRSVMAJ2g3DUM5x4VWaz2nlEiFNjkCfbzdsNjJVFCNDx
FRrAzTE2D0Y9PM41/V327PIaDK/Zkf0g/4Bmndc+OgXKd4yLbSImWxywkIo/xzNo
WvGoLieBUpgW8sfBrJHKtM9+Jo7eE01V2HkzEHSyeJkUXWEhqg6q4htcdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFL1145WjKJBn9nH0aU8o2vpHR6AMB8GA1UdIwQY
MBaAFFAv3lq9JxhLqprat82vvMOlRBrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUNfZVdyMG5HRXVxbXRxM3phLTh3NlZFR3VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS84MTUyYWUtNTFiZC00MTA2LWJmNTkt
NzEzZmQ4ZTkxZmE5LzEvVUNfZVdyMG5HRXVxbXRxM3phLTh3NlZFR3VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS84MTUyYWUtNTFiZC00MTA2LWJmNTktNzEzZmQ4ZTkxZmE5
LzEvVUNfZVdyMG5HRXVxbXRxM3phLTh3NlZFR3VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6aRTrNa
I3+NJXKxl1Oxz+MFz75ajX1Pl7OyEynVlBJ5DaUbwqmDUTBQg/smK5Xvcoa2ckBn
WJ9gbbXctU5Fn4cf7qH46gDB9mFXwCkkIn/MO9EAFaoSTdl9cDfpxJavXxLMOKnW
978T+BHr9Xe2sX8MfbOPeqxCfab2E7hz/1xxXoIa30XkwbJKgYSH7oB6CKnPUYaA
puYeM0+i+OgW9cTHMV1/+XE41ZNYI7FPL6rJsdus102KncvVquXm7Sb1DpcT4ZfW
6TUbawC+YKK5WgQ0BLB4jnr65ZZxhIBZZVS8qKWGCSBld7ss8iVd11YI7ZmaGOlO
9LlO5rbySGu4YQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:20 2025 by rpki-client