Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
File: UeFdozln1BRwqW1hQcg0DyJAWBw.mft (raw, json)
Hash identifier: JmrGyj+1Wjmgu/BQoNqJvN5ap+Xlf74XAcnhL9tHx6w=
Subject key identifier: 17:C2:29:1B:A0:22:EB:1D:F6:83:8C:55:19:3C:A1:B3:6C:5F:13:0F
Authority key identifier: 51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C
Certificate issuer: /CN=51e15da33967d41470a96d6141c8340f2240581c
Certificate serial: 019A70A4CC998D4BB86554565F5CD40E0A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 02:00:39 +0000
Manifest this update: Tue 11 Nov 2025 02:00:39 +0000
Manifest next update: Wed 12 Nov 2025 02:00:39 +0000
Files and hashes: 1: UeFdozln1BRwqW1hQcg0DyJAWBw.crl (hash: IZcjja07TqDlH1Uvsm7PYjak8QH8viRJGlA9GwiAp5I=)
2: gBYCWzo5jT_O6BTkSg1kyvPsFw4.roa (hash: +/mKf9OZ57+DTvZmgtnYONd6u+f9yDN0GFvCHTpFrgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:cc:99:8d:4b:b8:65:54:56:5f:5c:d4:0e:0a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e15da33967d41470a96d6141c8340f2240581c
Validity
Not Before: Nov 11 02:00:39 2025 GMT
Not After : Nov 12 02:00:39 2025 GMT
Subject: CN=17c2291ba022eb1df6838c55193ca1b36c5f130f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1a:34:a9:bc:4f:b9:b7:a3:e8:68:c7:af:e8:
17:bc:1a:88:8c:80:43:d2:e2:62:52:7d:1b:47:81:
43:ee:91:a3:9d:e7:1c:45:40:e1:d6:ef:ee:f2:7f:
aa:f8:32:9d:06:05:22:d3:6b:11:d6:89:23:17:74:
40:df:44:75:46:7c:90:45:33:d2:74:29:7e:7d:8e:
06:33:c2:c0:96:a7:43:d9:4b:ca:36:04:25:f6:58:
3c:83:35:87:e5:7a:93:97:fe:50:11:4d:aa:73:6f:
7e:fb:da:cd:39:cb:4f:57:5b:90:e5:32:06:77:ad:
3d:19:12:20:ca:6c:9e:99:f1:10:43:f5:35:af:7f:
4a:31:88:b5:d3:b4:ed:7f:ed:11:c5:7f:bb:a4:06:
03:cb:e3:b8:8e:dc:42:d5:d8:7f:ec:30:d7:f2:9b:
45:9a:6c:6e:dc:5d:79:78:98:97:f6:a1:39:04:ae:
45:86:0c:11:54:21:f4:86:c2:6a:19:f6:da:ff:3d:
e9:d4:65:40:08:34:18:b7:11:5f:96:70:f8:79:88:
2a:cb:9b:99:d2:96:cf:71:2a:3b:34:e7:df:eb:b2:
43:f1:49:b6:22:33:7a:30:1d:8c:66:69:6c:d2:6d:
6e:eb:4e:ef:a7:a7:ea:b7:40:7a:28:be:8d:59:05:
df:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C2:29:1B:A0:22:EB:1D:F6:83:8C:55:19:3C:A1:B3:6C:5F:13:0F
X509v3 Authority Key Identifier:
keyid:51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:cc:d5:4a:ac:e8:1f:61:5d:47:7e:d8:84:4d:e1:7b:2c:d7:
9e:fe:38:ce:82:5e:8b:d6:50:50:de:f6:c0:99:5d:60:58:f2:
a9:73:be:2c:34:2a:b0:93:3f:43:80:73:af:4e:36:d9:88:28:
fb:37:02:50:61:8d:95:05:de:87:b4:78:5c:e7:af:64:b8:b5:
6b:9b:74:8c:90:0c:99:44:ab:1b:e5:6f:11:1e:37:0a:c0:dc:
b1:ad:0b:a9:cb:66:e2:48:5a:25:28:ed:d2:a6:6c:8e:1c:77:
2d:0f:a1:b9:6d:22:2c:de:e0:51:0d:d6:cc:21:fe:26:84:85:
05:27:78:77:f2:41:09:51:e3:39:69:2a:a0:c1:88:78:43:ed:
b2:51:80:46:e2:0c:19:0b:9d:d2:f3:43:f4:f9:09:48:96:f0:
24:30:34:69:6a:d2:77:db:24:a9:7e:ac:45:f5:52:dc:f0:51:
09:e0:3e:95:62:85:11:10:e2:0b:ea:7a:e0:b6:a1:6c:0a:02:
25:e8:65:67:7e:d4:32:31:55:f3:e7:75:ef:f6:05:a1:bc:f4:
5c:09:66:85:d0:01:54:06:4b:0f:01:84:61:31:82:9b:04:96:
b9:99:a5:83:09:90:33:93:7f:15:21:f5:25:f9:8b:3b:2b:85:
12:72:1b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:51 2025 by rpki-client