Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft
File: uREsgEp_SnTOWMxxyZT1qdVhIrE.mft (raw, json)
Hash identifier: ZTbBhvjq2lLZGx8K05teJiCKJ+eINzHa3FJEFtgkFlA=
Subject key identifier: B3:E0:A8:10:00:C4:FE:BE:39:29:73:9C:CE:DB:04:2F:6F:37:C4:B1
Authority key identifier: B9:11:2C:80:4A:7F:4A:74:CE:58:CC:71:C9:94:F5:A9:D5:61:22:B1
Certificate issuer: /CN=b9112c804a7f4a74ce58cc71c994f5a9d56122b1
Certificate serial: 019A729364AB506DB44BC347AD7AB18D08EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uREsgEp_SnTOWMxxyZT1qdVhIrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft
Manifest number: 0F7B
Signing time: Tue 11 Nov 2025 11:00:53 +0000
Manifest this update: Tue 11 Nov 2025 11:00:53 +0000
Manifest next update: Wed 12 Nov 2025 11:00:53 +0000
Files and hashes: 1: 1patb8mkVp0mJa0slQ7qQ-5WVBk.roa (hash: DsUMv9vQW0wvlxaSYrdoCYfaCKpNMHSpozAHeICWqOw=)
2: uREsgEp_SnTOWMxxyZT1qdVhIrE.crl (hash: oH0HBagzByCR1tY/v7JqzE48EK2HWhyBIMRivg8w8fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uREsgEp_SnTOWMxxyZT1qdVhIrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:64:ab:50:6d:b4:4b:c3:47:ad:7a:b1:8d:08:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9112c804a7f4a74ce58cc71c994f5a9d56122b1
Validity
Not Before: Nov 11 11:00:53 2025 GMT
Not After : Nov 12 11:00:53 2025 GMT
Subject: CN=b3e0a81000c4febe3929739ccedb042f6f37c4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:95:44:02:23:ef:02:c1:8b:68:0c:0c:3c:e1:
d6:0f:34:a8:86:61:76:36:4a:71:9b:f2:51:2c:41:
08:37:7f:b9:da:33:77:2a:ae:7f:a8:f4:5d:35:06:
f1:79:67:94:d2:b8:77:24:4c:4b:6b:83:9c:e6:50:
75:57:6d:a5:95:bd:d7:26:0e:33:ec:5b:2f:79:6f:
ed:e4:27:91:71:7c:e0:af:48:75:c7:f2:cb:d1:a0:
0e:3a:74:a6:0f:b2:11:8c:fc:8c:97:9b:be:f3:20:
f4:ae:52:e8:76:fc:ee:be:48:34:6b:bd:03:75:5b:
24:8b:f6:24:be:ba:ba:73:68:d1:04:2f:ba:47:f2:
00:fe:68:c4:f4:a2:39:3d:33:0c:d1:4e:09:b8:f9:
ed:6a:27:0f:29:09:35:e5:9c:a5:60:21:a4:4e:99:
c9:a2:b9:c6:03:c8:0c:b2:67:7e:1d:7f:a0:a9:9a:
a4:21:86:21:26:37:9a:08:c8:c5:af:65:3c:23:bf:
65:1f:50:e8:2a:88:92:2f:f3:17:b5:29:37:73:43:
16:72:f0:6f:a9:49:45:86:e7:48:1b:63:e0:6b:2a:
9e:85:d4:a0:71:67:94:68:b6:43:8e:9a:a7:09:dd:
12:9a:d6:af:e7:8e:c3:cf:22:23:7b:2d:cc:c0:f7:
49:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E0:A8:10:00:C4:FE:BE:39:29:73:9C:CE:DB:04:2F:6F:37:C4:B1
X509v3 Authority Key Identifier:
keyid:B9:11:2C:80:4A:7F:4A:74:CE:58:CC:71:C9:94:F5:A9:D5:61:22:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uREsgEp_SnTOWMxxyZT1qdVhIrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:bb:cb:e1:cb:23:b1:93:34:ec:80:a9:0c:1c:17:a4:11:de:
95:9b:b8:66:61:32:9d:ee:fb:6a:3e:8b:db:fc:f6:aa:aa:b2:
f6:99:63:2a:d5:99:df:68:c9:c7:32:16:f8:53:af:a4:f4:aa:
c8:58:bd:a1:db:0d:97:e0:05:d8:ae:83:76:8f:c0:9e:c8:21:
aa:44:14:22:36:a9:1d:34:60:25:21:48:d0:e6:e1:56:a0:2d:
52:95:08:42:cf:e5:e0:3f:c1:81:c2:bb:d0:0b:c9:06:56:23:
6b:99:42:d6:b2:27:9f:f3:da:d9:03:e9:26:11:b6:df:b6:c9:
42:a7:7d:7c:e6:4c:e7:c0:af:56:97:e5:0e:18:b9:13:d2:d4:
e3:b6:f6:73:77:8b:0f:4a:6d:4f:5e:dd:f4:1d:3c:6e:76:c2:
8a:45:0e:73:6a:f6:2b:36:b8:08:97:7c:00:c2:c9:d9:40:21:
05:8f:da:1c:64:ba:09:aa:1d:0d:0f:13:64:a9:11:2f:a4:ca:
62:36:74:bf:ba:0a:b0:1d:7d:d4:b9:b1:3b:df:73:d9:e1:28:
52:00:b8:a9:e3:05:4b:35:ca:ac:f6:80:d0:fe:3d:1f:00:54:
c5:74:87:fd:ca:e3:05:ec:61:27:07:8f:b9:10:6a:59:fe:d8:
aa:38:66:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:17:41 2025 by rpki-client