Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
File: UucbOdfElDC7x3u2WVLkAhoCUxY.mft (raw, json)
Hash identifier: 2C2Yik0hv6/J26ZpjfsRdG/rMU8sXm8KdE9C0wyxkn0=
Subject key identifier: E9:A9:51:77:B1:87:89:34:AC:AA:59:33:95:87:82:4B:B8:DC:B4:FF
Authority key identifier: 52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16
Certificate issuer: /CN=52e71b39d7c49430bbc77bb65952e4021a025316
Certificate serial: 019A70A53E7AEDED342B63697AEC60380EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
Manifest number: 1402
Signing time: Tue 11 Nov 2025 02:01:08 +0000
Manifest this update: Tue 11 Nov 2025 02:01:08 +0000
Manifest next update: Wed 12 Nov 2025 02:01:08 +0000
Files and hashes: 1: UucbOdfElDC7x3u2WVLkAhoCUxY.crl (hash: Ap3Sj29d1Yz+Et0H9v1BIgJq3tElW8uH0BtnDLVlp38=)
2: gTDuY8r1VNymJYjX19G7pBZoVz8.roa (hash: DFZawHbPH3fUqxF/xfDF3iDUtDCENnqE3cXs8GAuxpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:3e:7a:ed:ed:34:2b:63:69:7a:ec:60:38:0e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e71b39d7c49430bbc77bb65952e4021a025316
Validity
Not Before: Nov 11 02:01:08 2025 GMT
Not After : Nov 12 02:01:08 2025 GMT
Subject: CN=e9a95177b1878934acaa59339587824bb8dcb4ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a4:3e:64:10:9b:6e:03:91:ac:f2:ce:22:27:
16:2b:9e:fa:1b:43:15:01:8b:66:8f:ed:02:3e:6d:
08:d0:b1:41:b0:12:66:45:a8:70:27:ff:6b:8e:4a:
3d:82:8c:23:76:a5:2d:83:f0:54:00:05:2f:bb:52:
19:56:41:d6:c1:68:82:26:fa:db:b9:cd:46:59:af:
bf:87:66:8a:04:6b:57:9c:75:18:b6:2f:b7:6c:f6:
f7:bb:cf:42:d6:fc:f5:4a:78:2b:27:9c:f1:8c:aa:
ac:87:8c:48:8c:55:1f:66:71:31:0c:c5:a9:76:ce:
61:dc:e7:8c:76:0e:a3:8a:90:4d:93:5d:94:8e:5b:
79:e2:94:75:a2:25:6d:bf:f1:f6:b6:17:eb:4e:bf:
fb:57:8b:0a:8e:1b:5d:1b:1b:5b:24:65:c2:79:58:
19:78:88:6d:98:b5:f1:b7:e5:cc:c1:dc:f8:74:62:
8c:06:67:dd:20:fb:2e:d9:fd:28:1f:0d:ef:23:8c:
b6:59:f9:f6:c1:9f:92:ab:c6:39:64:56:b2:70:e5:
92:b9:24:93:59:6f:81:02:be:ec:d2:7b:28:8d:d2:
f7:37:08:04:5e:43:2b:3b:54:6b:f4:60:c3:bb:69:
bd:61:fb:fd:8f:ed:ff:86:00:ac:53:47:f9:e2:d5:
c6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A9:51:77:B1:87:89:34:AC:AA:59:33:95:87:82:4B:B8:DC:B4:FF
X509v3 Authority Key Identifier:
keyid:52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:37:f1:b2:bb:7e:38:70:c9:c7:ee:93:3b:00:bc:71:5f:f4:
e0:a6:24:8c:e5:20:17:57:ba:af:3d:38:11:0d:12:63:df:02:
9c:21:d8:f3:50:d5:ea:32:98:07:6b:b0:25:2a:56:b0:13:1e:
da:16:1f:32:22:b7:6d:99:d2:67:45:6c:43:72:80:d0:4c:78:
a1:40:d2:61:c0:07:eb:d7:b2:da:17:80:ab:a3:87:78:79:2b:
6e:db:de:8c:3f:cc:cc:ca:32:87:59:e2:c0:5b:0d:19:06:da:
bc:91:f6:8a:f1:d1:c6:7f:ad:e8:7c:7e:0f:99:09:23:87:e3:
ce:b0:04:8e:e6:a0:e5:e6:00:3c:99:8a:93:0f:c3:0f:41:e0:
d7:a7:7f:a0:a2:a3:64:2b:aa:58:48:60:bb:83:25:77:93:30:
d7:6d:eb:af:c8:43:41:17:49:9b:05:05:f2:b9:23:a7:30:ae:
39:a0:f1:f7:23:e0:6a:0b:92:c7:69:aa:cb:9f:a5:85:12:b1:
47:f1:92:44:61:86:28:00:c9:f7:ff:fd:35:8e:38:9c:df:7a:
00:e7:86:15:f4:cf:1b:cc:22:73:3b:7b:ff:e9:ff:cd:7a:fc:
7b:15:3b:3c:cb:ef:1c:36:a9:5d:90:da:4e:5e:84:93:0a:5f:
a1:22:02:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:18 2025 by rpki-client