Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
File: UaLCwG3bhGaaiamfuHVglRNMh2Y.mft (raw, json)
Hash identifier: hzh6Bud9708lA16ICW7qUdJXTmgb8aypPbQcMDnlZQs=
Subject key identifier: 91:B8:50:2D:B5:D3:01:AD:F9:8E:2B:65:CF:68:3C:DB:0C:8C:70:49
Authority key identifier: 51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66
Certificate issuer: /CN=51a2c2c06ddb84669a89a99fb8756095134c8766
Certificate serial: 019A71809AC3EDE41416689F228B18552D83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
Manifest number: 057E
Signing time: Tue 11 Nov 2025 06:00:44 +0000
Manifest this update: Tue 11 Nov 2025 06:00:44 +0000
Manifest next update: Wed 12 Nov 2025 06:00:44 +0000
Files and hashes: 1: UaLCwG3bhGaaiamfuHVglRNMh2Y.crl (hash: LmuhnXCOVQmkPlcCiI8aPFdVotyX6bDeAaeix7fmiQo=)
2: mQRNvpgGDTxl1ClE8lP4fBCE_zY.roa (hash: Y4EjZw1j54zSv6D2ykaYLyeNan8XUPzgXS8YGYvdiOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:9a:c3:ed:e4:14:16:68:9f:22:8b:18:55:2d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51a2c2c06ddb84669a89a99fb8756095134c8766
Validity
Not Before: Nov 11 06:00:44 2025 GMT
Not After : Nov 12 06:00:44 2025 GMT
Subject: CN=91b8502db5d301adf98e2b65cf683cdb0c8c7049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:2c:1f:e9:74:58:4c:dc:eb:a3:8d:eb:54:a2:
b8:27:d6:bc:9d:12:2c:d7:55:a3:85:65:a9:9f:4b:
24:99:00:40:29:d4:3f:fb:cd:5b:63:2a:6e:67:71:
da:1b:d0:3a:c1:75:01:47:1d:02:90:01:7c:59:3f:
c5:40:91:4a:23:ee:91:80:27:ca:a5:2d:9e:38:d5:
64:ec:c3:86:60:30:62:25:b3:be:45:ae:a8:d1:41:
05:7a:f3:16:fd:48:12:c0:44:48:72:08:b8:4c:48:
7e:b1:af:9b:d4:70:21:16:9e:07:80:dd:9b:12:56:
3c:63:cd:a9:e5:58:f2:4c:0b:31:d3:66:5a:9f:21:
a1:02:1c:de:bc:67:d4:2b:76:e1:9c:c3:24:61:75:
bf:41:2b:7e:79:78:fe:63:54:cd:e1:74:81:7d:e6:
ce:ca:9e:6b:5f:08:f7:87:5f:ab:10:d5:22:8e:ec:
9f:3e:d4:5c:35:0a:ae:44:15:d9:51:af:2f:fa:a6:
dc:c2:5b:52:38:da:5b:8a:71:c6:52:88:7d:71:60:
04:6f:30:99:e1:e5:e5:04:4a:ef:2d:0c:16:a0:7b:
30:f3:bd:2b:4d:77:44:e7:1f:1d:cb:07:d2:b6:2a:
d5:9c:81:d5:0c:38:7e:b8:eb:10:17:d1:1d:24:e1:
3b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B8:50:2D:B5:D3:01:AD:F9:8E:2B:65:CF:68:3C:DB:0C:8C:70:49
X509v3 Authority Key Identifier:
keyid:51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:a8:71:2c:e2:c1:05:3d:87:cb:43:0f:07:0a:3e:43:28:f8:
19:8a:14:38:91:dc:11:11:94:24:cc:f1:6c:9b:10:c7:1b:46:
98:c1:e3:cd:2d:fc:b4:b6:88:36:1a:ee:67:df:8e:b3:c4:6c:
20:8a:2f:ae:17:0f:e2:80:f9:c7:59:35:be:70:33:16:a6:ca:
42:45:b9:99:a2:4f:ab:d7:cc:33:b9:6e:30:12:c5:1d:c0:50:
63:fc:ea:8c:71:da:6e:fb:00:c2:d2:72:9e:15:ae:07:03:9c:
f2:9c:85:80:aa:52:7d:c5:cd:a6:4a:00:61:8d:75:f0:ad:b7:
14:51:2c:2d:46:59:14:a7:52:ce:24:8c:6e:49:88:3d:e6:22:
72:fe:cd:ef:8e:68:aa:ee:fe:78:fe:dd:fc:d5:91:7d:62:0f:
4f:a6:80:12:33:d7:59:43:63:84:b1:57:6e:e9:98:25:04:e8:
5e:34:d7:01:15:8d:7d:07:33:12:68:71:b0:55:f4:a1:fb:c9:
20:4c:51:58:7b:40:aa:f4:4d:d9:1f:ce:45:b8:53:6d:97:82:
fe:b3:73:e3:bd:9e:74:f2:d8:3c:48:7f:f1:1b:a5:ff:49:76:
df:e3:13:ac:53:bb:cd:bb:08:e6:5c:fb:bc:b1:8c:0f:f5:41:
df:8c:cb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:48 2025 by rpki-client