Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.mft
File: Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.mft (raw, json)
Hash identifier: pfw7yyd02MJ1jiKF+0jbXZ8yehp7ODOSz8R2qjdI1Hk=
Subject key identifier: 3C:6C:7D:74:E6:08:9E:52:43:5C:C6:31:5D:A2:21:88:6C:08:8B:F3
Authority key identifier: 51:F8:3B:80:0B:F5:D6:6C:C7:6D:0E:62:48:47:FB:66:8E:17:7C:71
Certificate issuer: /CN=51f83b800bf5d66cc76d0e624847fb668e177c71
Certificate serial: 019A725CF47EC9F4D10A1538E51B0D5752B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.mft
Manifest number: 01B0
Signing time: Tue 11 Nov 2025 10:01:25 +0000
Manifest this update: Tue 11 Nov 2025 10:01:25 +0000
Manifest next update: Wed 12 Nov 2025 10:01:25 +0000
Files and hashes: 1: Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.crl (hash: SjiI5laXafcpvH4Qjh2h4OEoJPQywRXHK/labFAZH2U=)
2: UzdAI9r8ururR3efFNaAcO55XaM.roa (hash: pCH+pFsUkI5n2Li26SVl8WqYpHuk5K9R9H/mh0OmiJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:f4:7e:c9:f4:d1:0a:15:38:e5:1b:0d:57:52:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51f83b800bf5d66cc76d0e624847fb668e177c71
Validity
Not Before: Nov 11 10:01:25 2025 GMT
Not After : Nov 12 10:01:25 2025 GMT
Subject: CN=3c6c7d74e6089e52435cc6315da221886c088bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4e:86:12:7f:3c:a3:ea:e1:dd:e4:fd:87:87:
65:2c:a4:1a:dd:90:63:69:e3:df:90:ff:f9:88:a3:
84:44:c5:92:fb:4c:de:1b:b5:79:be:b7:b7:e1:1b:
ee:c8:22:e8:f2:b6:c6:67:b2:00:69:86:1b:26:0d:
29:14:f3:35:b7:99:0f:14:1c:93:5e:16:35:27:0a:
49:a8:df:34:13:9e:79:0c:5e:3a:7d:b9:2c:6d:70:
2d:67:2e:c7:06:f1:77:8f:3f:e6:69:8f:43:b6:20:
35:83:f0:79:64:d7:51:97:4b:a8:35:1d:ee:2f:3d:
86:a5:d6:59:8b:a1:1a:c4:6a:5d:7b:e6:f5:f0:fb:
47:28:47:19:12:39:a7:78:cc:c6:32:de:b0:71:a9:
e3:5b:95:99:b4:56:48:b4:4d:d5:79:cf:a8:6d:cd:
d3:e7:4a:8b:d4:b4:f2:83:d8:8b:ad:e7:8f:d1:5c:
1d:84:9b:8a:91:1c:a9:3a:65:ea:fa:27:3b:f2:13:
6e:5b:57:52:19:94:4e:06:c0:65:b1:da:0d:e0:9b:
91:23:1e:b6:2d:21:e9:0c:29:f5:b4:29:80:b1:84:
61:95:40:aa:b8:7c:68:72:61:00:e1:03:e7:08:c5:
9c:c6:82:c1:92:04:e9:6f:1e:4d:81:2f:08:c1:e3:
84:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6C:7D:74:E6:08:9E:52:43:5C:C6:31:5D:A2:21:88:6C:08:8B:F3
X509v3 Authority Key Identifier:
keyid:51:F8:3B:80:0B:F5:D6:6C:C7:6D:0E:62:48:47:FB:66:8E:17:7C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:e7:d0:af:2c:fd:2b:e0:07:ef:4b:25:91:c1:c8:3e:ad:26:
e7:f3:31:f0:46:1f:c8:90:f9:d3:5e:3b:21:ef:e8:29:bc:3c:
ae:f2:d1:2c:82:0f:dc:85:9c:1c:da:2e:9d:f7:66:cb:59:5b:
87:ff:6d:3d:12:6b:44:6b:13:08:69:b3:de:f1:f0:24:cf:96:
09:f6:1c:1b:78:b4:23:63:d1:d0:9d:9d:43:e5:17:4d:d4:49:
f9:0d:f7:a7:a7:dd:7a:9d:15:9e:a1:6a:ec:bf:de:61:86:ff:
02:ee:e3:b9:9d:41:85:b4:e3:54:1f:2e:b2:e5:09:4e:d8:52:
49:ed:a3:b2:24:2f:95:f0:d5:26:21:83:02:c5:b0:45:91:5a:
a7:da:a1:dd:cc:d0:b5:54:6c:f0:03:50:c6:75:f8:8a:c2:dd:
80:60:b6:1d:e3:87:19:cd:63:9f:bd:ae:a6:66:0c:28:42:ad:
76:f0:06:57:04:2e:5b:0f:32:e5:8c:b5:13:e8:07:5c:f7:38:
fc:b5:e4:02:60:2c:f4:b5:b1:27:fe:f2:f9:ea:07:ee:74:44:
1b:76:d7:48:35:31:ea:ae:9e:f2:c4:60:b3:14:18:de:89:f4:
3d:b9:8a:b9:4f:be:3f:fb:63:7a:9c:15:39:51:1a:3a:b6:4b:
bf:bc:38:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:28:04 2025 by rpki-client