Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft
File: M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft (raw, json)
Hash identifier: mQUjQSSwNmquFVxsJP3NicvziBAwiuScZYPo+XpYWpo=
Subject key identifier: 8D:A6:E8:1D:2E:16:8C:D8:BA:AC:5B:8D:B7:68:CC:7F:91:52:AA:99
Authority key identifier: 33:F5:0A:8D:E9:71:F8:54:7F:5B:56:C9:7C:36:C2:87:EF:54:BD:B8
Certificate issuer: /CN=33f50a8de971f8547f5b56c97c36c287ef54bdb8
Certificate serial: 019A70DC24946A1CD8CF97E579059611B2B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft
Manifest number: 14AB
Signing time: Tue 11 Nov 2025 03:01:06 +0000
Manifest this update: Tue 11 Nov 2025 03:01:06 +0000
Manifest next update: Wed 12 Nov 2025 03:01:06 +0000
Files and hashes: 1: M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl (hash: 96bD3ZCLxahogfTsvqJtOaEJOQjl5087RnpbA+JVqL4=)
2: pMHjgJekdS1MaOx6NO05QRcLwkA.roa (hash: 0cAR/UsqHx4Uoat+wXKZE3sY02i0A2U0Zxjt7/F3FS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:24:94:6a:1c:d8:cf:97:e5:79:05:96:11:b2:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33f50a8de971f8547f5b56c97c36c287ef54bdb8
Validity
Not Before: Nov 11 03:01:06 2025 GMT
Not After : Nov 12 03:01:06 2025 GMT
Subject: CN=8da6e81d2e168cd8baac5b8db768cc7f9152aa99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6c:b9:03:60:82:69:82:9d:99:dc:16:4b:c1:
34:3f:bc:95:74:87:85:14:94:27:9c:10:9f:34:09:
de:18:9c:3e:8c:9f:8e:32:64:97:39:1b:f0:5a:19:
72:fe:5c:48:e5:51:e9:fd:24:ba:97:d5:2e:9e:c4:
c0:0b:0e:c3:67:9f:57:b9:5d:f3:fb:aa:97:b9:49:
c5:4c:56:42:11:41:26:45:e1:e4:67:16:c9:ea:e6:
54:0f:c3:1f:7a:ac:6c:70:9b:6b:a4:11:c6:26:1a:
7f:6e:04:e1:b5:f4:d5:33:bd:75:b1:db:d4:16:59:
87:cd:3f:06:81:74:47:4b:3e:49:69:de:f9:de:d0:
cf:2b:36:db:c8:2c:8d:c6:90:7a:b6:dd:c6:5c:fe:
e9:bf:ea:59:30:58:2a:fe:91:17:c9:4c:32:bd:87:
f3:35:ac:a1:31:1d:33:20:b4:e8:e2:7f:0e:76:df:
38:d9:af:ac:e9:ed:7c:4f:fb:ad:24:3f:d0:b9:c9:
ef:39:75:ba:f8:89:b7:3d:31:b0:92:d2:71:08:a4:
4f:1b:ac:bb:65:07:0f:da:f9:5b:cd:c8:c6:0f:e0:
c3:d2:40:cb:63:6f:f6:62:a4:47:04:89:61:f9:7a:
83:34:2a:f0:10:15:6a:cf:ad:64:d9:e3:f9:6d:e3:
04:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A6:E8:1D:2E:16:8C:D8:BA:AC:5B:8D:B7:68:CC:7F:91:52:AA:99
X509v3 Authority Key Identifier:
keyid:33:F5:0A:8D:E9:71:F8:54:7F:5B:56:C9:7C:36:C2:87:EF:54:BD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:17:b4:ef:a3:5f:b7:cd:9d:97:54:ad:61:e1:86:54:d0:cd:
d3:50:7e:c2:3a:21:09:d2:13:fc:73:65:c7:33:68:ed:e4:8f:
b2:57:26:c6:0f:c0:70:8a:40:11:0b:15:71:b4:6e:d3:fe:cc:
ff:3d:f9:00:58:56:ee:33:7b:34:12:f3:bc:5e:6e:79:d5:71:
37:a7:60:9f:eb:de:e1:24:31:c6:73:8c:c1:65:77:1a:06:aa:
09:59:da:03:c1:c2:d5:82:c9:d2:0c:ba:ba:8a:ff:15:40:5e:
a8:cc:81:dc:32:ad:bd:03:61:3a:34:73:bb:0d:aa:6b:f1:72:
85:fa:36:4d:be:74:76:d3:b8:f1:bb:6c:13:e0:cf:cf:1b:db:
1c:f5:d5:22:0e:38:aa:71:fd:cd:51:eb:fa:ea:3f:68:76:70:
60:9a:87:c2:a3:c7:a3:2d:ff:d1:00:58:07:a0:11:a3:c4:28:
28:88:2b:4f:d9:12:ae:cd:68:8b:0e:76:c5:41:2a:37:58:44:
f1:f5:8a:b4:f6:e5:5e:bf:fb:64:b0:33:14:b1:50:30:28:83:
9c:89:dc:52:17:34:63:13:29:25:70:92:2e:72:c2:10:c3:1b:
97:dc:55:ed:12:55:de:26:66:fb:e0:01:cf:d5:e8:a2:40:0b:
b6:9c:4c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:04 2025 by rpki-client