Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
File: uATBl0RFlLEexZnSBWVvZOTR_GE.mft (raw, json)
Hash identifier: Mji0phqs4gAejbtE58u6K9ZvckwQ32+7YK4aQlEw1QY=
Subject key identifier: C9:F6:7F:D9:AF:CB:DE:43:4D:C3:9B:D3:5A:04:E6:92:36:D9:00:D0
Authority key identifier: B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
Certificate issuer: /CN=b804c197444594b11ec599d205656f64e4d1fc61
Certificate serial: 019A014824742E029EE0945B59C385590A9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
Manifest number: 052B
Signing time: Mon 20 Oct 2025 11:01:36 +0000
Manifest this update: Mon 20 Oct 2025 11:01:36 +0000
Manifest next update: Tue 21 Oct 2025 11:01:36 +0000
Files and hashes: 1: foSChvs7xZT_ef4fRZkz6kbja-A.roa (hash: qhfs8w9z0W9ldi8xd+XO5IRrkBZgJCAhgjlxgOvdESc=)
2: uATBl0RFlLEexZnSBWVvZOTR_GE.crl (hash: LCWCvuU/HP8/exJ6X3Sq70vuSDEf20aWaVsldPruCrQ=)
3: yO6MuzyCfqPl_Bd-5T_EUZAJiu0.roa (hash: uW68gXrjLbDAKIgIT5+2g3ynceUkFahctGoUtv0xIl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 11:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:48:24:74:2e:02:9e:e0:94:5b:59:c3:85:59:0a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b804c197444594b11ec599d205656f64e4d1fc61
Validity
Not Before: Oct 20 11:01:36 2025 GMT
Not After : Oct 21 11:01:36 2025 GMT
Subject: CN=c9f67fd9afcbde434dc39bd35a04e69236d900d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bb:ae:e1:d3:42:3a:16:00:27:12:3b:5a:32:
1c:0c:9e:90:b8:0e:2b:fe:88:00:d2:bf:44:12:2e:
44:4e:b3:f2:0d:22:a3:f9:4d:e5:06:f7:7a:fc:21:
b3:26:06:ca:ad:7c:8c:e4:a4:e1:fe:cd:b7:16:12:
74:cc:8c:30:6c:7d:6c:b5:e0:48:c7:0a:41:cc:bd:
3e:1c:22:86:92:6d:ec:3f:e6:0e:8e:7c:35:10:b1:
e6:d5:b5:1a:ec:11:2d:b0:f6:96:87:e9:88:a1:c1:
26:24:e3:7a:b7:53:8a:75:03:4e:8f:34:05:76:d4:
73:a9:f1:ec:bf:6b:e4:33:cb:48:eb:f1:05:56:8e:
19:48:ca:33:92:73:1b:1d:2c:e5:0d:25:ae:d8:70:
47:6c:df:ea:34:7a:70:f1:b4:18:f9:70:27:c9:24:
9e:51:87:f6:3e:90:f2:a7:b2:0c:1b:bd:39:8c:2e:
a1:3a:ef:b1:f7:24:0d:9e:37:ef:95:2a:77:55:40:
0d:88:c4:da:ef:06:50:eb:55:e4:16:4d:7b:16:18:
ac:3a:e0:d1:5e:5e:85:05:97:bc:1f:2c:f1:01:12:
0c:b9:b5:cf:24:6b:14:a1:94:ef:2b:f2:97:3d:c1:
2d:cf:8e:58:11:79:03:5e:dd:0b:24:98:20:b2:95:
91:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F6:7F:D9:AF:CB:DE:43:4D:C3:9B:D3:5A:04:E6:92:36:D9:00:D0
X509v3 Authority Key Identifier:
keyid:B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:af:82:4d:be:89:6a:88:8e:a2:81:5b:ff:65:9a:ec:eb:b3:
98:af:8c:4b:92:79:73:12:7b:1f:70:5f:4c:7b:3d:8e:ee:2f:
62:09:5d:30:d4:45:12:15:51:b4:d2:a7:24:cc:ba:d1:8f:62:
d8:97:3f:2f:b8:62:d0:cb:4d:97:5e:d4:4c:30:64:95:99:78:
5d:e4:77:71:eb:f9:be:7a:5b:d3:b2:be:87:46:0b:91:74:d4:
22:ef:18:d1:aa:47:85:0a:32:0b:fa:84:b4:b4:d6:4b:50:bf:
64:b1:5f:51:f2:60:83:63:75:2b:a6:2d:85:3e:dd:9a:d9:17:
18:19:df:fc:5e:64:a2:51:c7:5e:0c:90:ad:50:7f:4e:92:4b:
e7:e6:20:d5:ad:7e:a4:af:d8:77:06:ec:ee:c9:a3:70:e2:41:
31:6e:96:6b:c9:b1:50:07:d0:64:3a:77:d4:03:71:38:58:86:
ee:8d:ec:27:db:b2:85:9e:ce:8f:8e:d3:93:86:eb:7e:c5:3f:
04:d5:99:5d:81:46:2d:be:4a:c0:90:46:ff:d5:8f:0c:75:90:
cb:51:d4:29:ce:bd:26:4a:27:19:0e:ed:00:3c:70:22:6a:23:
7c:cb:e3:4c:ee:33:eb:0f:56:8a:77:f0:0f:5d:de:76:ae:15:
63:43:9f:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBSCR0LgKe4JRbWcOFWQqaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDRjMTk3NDQ0NTk0YjExZWM1OTlkMjA1NjU2ZjY0ZTRk
MWZjNjEwHhcNMjUxMDIwMTEwMTM2WhcNMjUxMDIxMTEwMTM2WjAzMTEwLwYDVQQD
EyhjOWY2N2ZkOWFmY2JkZTQzNGRjMzliZDM1YTA0ZTY5MjM2ZDkwMGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLuu4dNCOhYAJxI7WjIcDJ6QuA4r
/ogA0r9EEi5ETrPyDSKj+U3lBvd6/CGzJgbKrXyM5KTh/s23FhJ0zIwwbH1steBI
xwpBzL0+HCKGkm3sP+YOjnw1ELHm1bUa7BEtsPaWh+mIocEmJON6t1OKdQNOjzQF
dtRzqfHsv2vkM8tI6/EFVo4ZSMozknMbHSzlDSWu2HBHbN/qNHpw8bQY+XAnySSe
UYf2PpDyp7IMG705jC6hOu+x9yQNnjfvlSp3VUANiMTa7wZQ61XkFk17FhisOuDR
Xl6FBZe8HyzxARIMubXPJGsUoZTvK/KXPcEtz45YEXkDXt0LJJggspWR1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMn2f9mvy95DTcOb01oE5pI22QDQMB8GA1UdIwQY
MBaAFLgEwZdERZSxHsWZ0gVlb2Tk0fxhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFUQmwwUkZsTEVleFpuU0JXVnZaT1RSX0dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zYmM1NTMtMGVlMC00YjcyLWI5M2Ut
OTM4YWI5NjQ1NGU5LzEvdUFUQmwwUkZsTEVleFpuU0JXVnZaT1RSX0dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zYmM1NTMtMGVlMC00YjcyLWI5M2UtOTM4YWI5NjQ1NGU5
LzEvdUFUQmwwUkZsTEVleFpuU0JXVnZaT1RSX0dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMq+CTb6J
aoiOooFb/2Wa7OuzmK+MS5J5cxJ7H3BfTHs9ju4vYgldMNRFEhVRtNKnJMy60Y9i
2Jc/L7hi0MtNl17UTDBklZl4XeR3cev5vnpb07K+h0YLkXTUIu8Y0apHhQoyC/qE
tLTWS1C/ZLFfUfJgg2N1K6YthT7dmtkXGBnf/F5kolHHXgyQrVB/TpJL5+Yg1a1+
pK/Ydwbs7smjcOJBMW6Wa8mxUAfQZDp31ANxOFiG7o3sJ9uyhZ7Oj47Tk4brfsU/
BNWZXYFGLb5KwJBG/9WPDHWQy1HUKc69JkonGQ7tADxwImojfMvjTO4z6w9Winfw
D13edq4VY0Of9g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:18:28 2025 by rpki-client