Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/ac0e71-2b19-4853-ae6c-159cead77275/1/uiaKbxMfI9Z6-DESZSOTC_7oDxs.mft
File: uiaKbxMfI9Z6-DESZSOTC_7oDxs.mft (raw, json)
Hash identifier: gJauuHOaVryvs5mPVwl+xX83pWLjN6jvOufwL/VA4lQ=
Subject key identifier: F9:89:C3:F5:0A:DA:E3:9F:2D:58:57:90:30:BC:53:69:36:37:06:8C
Authority key identifier: BA:26:8A:6F:13:1F:23:D6:7A:F8:31:12:65:23:93:0B:FE:E8:0F:1B
Certificate issuer: /CN=ba268a6f131f23d67af831126523930bfee80f1b
Certificate serial: 0199FA6A9BA47E6C00EF16B4CC45DC851DBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uiaKbxMfI9Z6-DESZSOTC_7oDxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/ac0e71-2b19-4853-ae6c-159cead77275/1/uiaKbxMfI9Z6-DESZSOTC_7oDxs.mft
Manifest number: 1E
Signing time: Sun 19 Oct 2025 03:01:54 +0000
Manifest this update: Sun 19 Oct 2025 03:01:54 +0000
Manifest next update: Mon 20 Oct 2025 03:01:54 +0000
Files and hashes: 1: uiaKbxMfI9Z6-DESZSOTC_7oDxs.crl (hash: lJXuy/MhVGcEXrX/utOw1/ohB6gmFTMBt7mXp9K43kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/ac0e71-2b19-4853-ae6c-159cead77275/1/uiaKbxMfI9Z6-DESZSOTC_7oDxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/ac0e71-2b19-4853-ae6c-159cead77275/1/uiaKbxMfI9Z6-DESZSOTC_7oDxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uiaKbxMfI9Z6-DESZSOTC_7oDxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:9b:a4:7e:6c:00:ef:16:b4:cc:45:dc:85:1d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba268a6f131f23d67af831126523930bfee80f1b
Validity
Not Before: Oct 19 03:01:54 2025 GMT
Not After : Oct 20 03:01:54 2025 GMT
Subject: CN=f989c3f50adae39f2d58579030bc53693637068c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:34:e2:6e:30:8f:c1:ef:8a:28:60:86:85:30:
7f:35:ee:4a:93:33:9d:d2:26:a6:dd:cd:5d:9b:fc:
de:ab:6e:ed:f7:13:be:9f:53:fc:8b:09:44:f3:9d:
bf:ef:0d:68:be:1f:8a:9d:b2:11:89:98:6f:35:31:
ac:0b:25:09:70:d0:14:fa:30:b9:6e:3e:0b:09:18:
6c:88:b6:ca:29:9b:d7:1c:e1:d1:5f:7f:ff:09:be:
17:ea:d2:3d:97:d9:c3:a7:62:66:94:8d:62:1e:c8:
f5:b3:b4:08:11:77:58:c3:b3:2a:db:39:b6:31:6b:
e9:83:8e:4d:dd:45:98:8c:6d:1f:8d:b5:5b:f7:2a:
ad:f0:8d:a5:2b:dc:d9:9b:b5:0b:71:4b:d0:0c:f1:
62:90:c5:2c:5e:a6:52:c1:ee:d7:4b:74:0e:ef:8f:
63:9e:6e:9a:4d:fc:2a:5b:14:b8:c8:08:0b:4f:98:
4d:6d:71:85:29:fc:75:e3:1f:46:db:94:69:35:44:
e9:8a:83:a4:02:59:bd:1f:85:34:d2:0e:cf:67:e2:
6c:06:34:58:50:db:f2:14:cf:39:fe:3a:06:f8:97:
c5:65:fa:28:4e:9c:ab:2a:6a:f3:c8:66:17:84:a8:
43:93:17:73:a3:09:c8:fd:7f:31:2f:5e:15:e3:2f:
34:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:89:C3:F5:0A:DA:E3:9F:2D:58:57:90:30:BC:53:69:36:37:06:8C
X509v3 Authority Key Identifier:
keyid:BA:26:8A:6F:13:1F:23:D6:7A:F8:31:12:65:23:93:0B:FE:E8:0F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uiaKbxMfI9Z6-DESZSOTC_7oDxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ac0e71-2b19-4853-ae6c-159cead77275/1/uiaKbxMfI9Z6-DESZSOTC_7oDxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ac0e71-2b19-4853-ae6c-159cead77275/1/uiaKbxMfI9Z6-DESZSOTC_7oDxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:68:fc:fb:58:c7:be:f9:e6:b3:f0:63:42:d5:c3:cd:78:e6:
92:9a:9f:87:62:ed:70:9f:c7:9c:87:3d:2b:07:47:37:bb:f3:
a3:87:c1:8e:06:d7:3f:85:df:77:f7:54:5c:37:84:3e:fd:00:
43:b8:d0:f8:38:31:f2:c4:13:ef:ca:20:7b:7e:e0:fd:b0:cf:
b1:f2:5c:32:21:ca:4a:27:d7:48:34:72:a7:5d:ba:09:b9:23:
b8:e0:d7:48:d5:8f:d9:36:07:d8:75:02:ca:d7:83:06:aa:79:
1b:99:ef:81:33:42:6c:0e:9f:10:95:14:19:c4:ef:c0:b5:cd:
c4:04:fc:12:60:09:a3:75:99:ed:3a:ab:ed:17:c5:0d:fd:16:
a9:ce:cf:93:05:25:28:28:91:04:1f:8b:f1:90:51:68:61:98:
9c:68:7e:cc:94:fe:59:bc:b6:6e:65:93:18:f0:05:21:c3:dd:
f2:5a:d0:a4:c5:f6:17:5e:5b:d5:c5:d2:20:50:c5:77:7a:be:
d2:e0:7a:f7:2b:8a:da:2f:a2:6a:05:40:92:e2:4b:83:30:51:
ad:96:cc:61:db:78:47:60:8d:70:18:c6:fa:2f:35:50:76:2f:
73:98:8c:84:08:1a:e5:1a:18:32:f6:ab:d1:1b:c0:61:26:14:
90:64:3b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:03:55 2025 by rpki-client