Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
File: UeFASVvQbC6O-st-0KMVFtsfQF8.mft (raw, json)
Hash identifier: uI7PW2qxBYkS1wENpEDlUAw8W4Vg8vXSUzeZnSwnaqo=
Subject key identifier: AF:AA:80:8C:CF:30:82:A5:FA:F0:E8:7D:2F:64:00:41:43:FE:A3:BC
Authority key identifier: 51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
Certificate issuer: /CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Certificate serial: 01994F6571F503A02F4B5F7464F25EABB8A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
Manifest number: 0DE3
Signing time: Mon 15 Sep 2025 22:01:12 +0000
Manifest this update: Mon 15 Sep 2025 22:01:12 +0000
Manifest next update: Tue 16 Sep 2025 22:01:12 +0000
Files and hashes: 1: It1W1nFMSnvON6n0WueAxjrC3W0.roa (hash: FlHwhHOBprRKHgvgu+zMZLXgeJSLpK6evOb32wMUYTo=)
2: UeFASVvQbC6O-st-0KMVFtsfQF8.crl (hash: RLZfk+yy40qdBUPkctwmHSVoakE/64wGrhcYLZpbqhY=)
3: aLexfPDGULdeLEaZK1qcN8F_0gk.roa (hash: mf1iYDEjsne4mRwDfdumJxwd7j7HuNwZ6q+crjDLiV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4f:65:71:f5:03:a0:2f:4b:5f:74:64:f2:5e:ab:b8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Validity
Not Before: Sep 15 22:01:12 2025 GMT
Not After : Sep 16 22:01:12 2025 GMT
Subject: CN=afaa808ccf3082a5faf0e87d2f64004143fea3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e7:f5:9a:b4:4e:79:07:02:2b:9a:ae:95:bb:
d5:b1:2f:a1:eb:08:ee:cb:f3:35:21:fe:39:fc:38:
75:86:1b:20:24:53:0c:f0:5f:1f:8e:6f:68:7d:3e:
62:4e:3e:b8:98:6e:c4:a2:34:5c:80:fc:e1:09:d1:
4f:29:d7:1a:5b:e4:d3:fc:4e:b0:ef:ee:5a:d8:11:
64:c3:86:69:31:05:f6:27:6f:ac:98:7d:09:60:b4:
c1:bb:bc:00:d0:2c:dc:05:1a:3c:a4:ac:3c:7e:c2:
11:00:f6:ab:1c:c6:24:e2:f7:b8:e5:f6:85:e3:ad:
00:d3:18:8d:a0:32:9b:6e:18:44:51:85:e2:30:b8:
8e:d0:f6:6d:f3:53:90:7c:d1:17:81:3e:49:66:92:
b7:7d:5f:c1:16:82:bc:3e:8b:56:14:c5:5f:76:28:
50:31:5d:0b:7a:d0:22:97:77:bf:d0:80:d6:52:3a:
ff:b5:13:32:51:e2:23:80:46:ec:9e:20:43:90:94:
35:11:8a:e7:91:70:99:2c:27:d2:a8:8d:7c:02:5c:
81:15:6e:36:63:aa:d9:9b:8f:74:a9:42:d3:35:98:
bd:1a:54:00:1f:48:9b:ed:fb:19:94:85:84:66:4d:
98:d9:f5:19:49:de:87:17:f0:28:a0:5d:8b:6c:6b:
43:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AA:80:8C:CF:30:82:A5:FA:F0:E8:7D:2F:64:00:41:43:FE:A3:BC
X509v3 Authority Key Identifier:
keyid:51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:98:22:84:b9:76:c8:d6:e5:66:9e:12:79:4a:a0:0a:39:9f:
8f:5c:a6:ad:f3:cf:01:5a:68:63:9c:93:51:0a:8a:2c:1f:0a:
32:d6:d5:28:d4:55:01:52:2f:d3:0a:a0:9e:01:be:5f:82:cc:
89:a8:6b:a9:54:b0:fc:8c:71:bf:85:cf:7a:fc:5b:c0:8d:f8:
08:af:67:59:65:3a:bd:c1:be:9c:97:90:c3:ee:69:67:75:d2:
25:34:66:00:53:83:a7:c2:d5:54:c9:0f:5b:7a:ae:08:ed:1c:
5a:61:28:03:5b:00:ca:41:69:88:09:71:85:33:66:0b:19:c2:
fa:cf:20:12:be:40:45:af:be:f0:66:60:2b:40:53:da:85:cb:
48:64:33:fe:87:ce:e9:11:29:1b:98:78:91:e7:30:43:7b:55:
46:15:0f:2b:9a:91:5e:b7:9c:4a:68:8f:12:f4:6b:f4:6f:3e:
f5:cf:57:a6:35:0d:08:5e:8c:4d:e9:d3:6c:2b:33:b9:46:be:
71:b9:cd:f6:76:90:b7:7e:3d:2a:62:6b:31:0b:49:05:21:8e:
36:ad:cc:93:50:69:c8:3b:62:d5:e2:94:fa:d8:b9:0b:d1:c7:
fc:b5:5a:e8:7b:70:6a:d7:4f:80:37:2f:af:94:b2:b0:84:0d:
dd:0a:eb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 05:36:37 2025 by rpki-client