Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
File: UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft (raw, json)
Hash identifier: 7iGMIVblbMLPDMvvBdGKdb19eOCBM0SNGvM5+TKX4lQ=
Subject key identifier: C1:B8:81:7C:5E:5A:0E:DE:C0:35:0B:D2:B1:CB:CC:06:59:FD:5A:E0
Authority key identifier: 51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37
Certificate issuer: /CN=51476318d71bf658f9a845f54ab27bd899892437
Certificate serial: 019A71B84719C9529D4D0FB32D60340EF3EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:01:33 +0000
Manifest this update: Tue 11 Nov 2025 07:01:33 +0000
Manifest next update: Wed 12 Nov 2025 07:01:33 +0000
Files and hashes: 1: EPpzGnxJ9r252oa5CpCAjLjJAgw.roa (hash: 9S/swt0ExX/3EIBGsHjHQcT/9v/asJqd/AUXI6MuTis=)
2: UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl (hash: BvVtwBL4Et65KjzT0PV33xNiUzpcIwg770RhJuNJeyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:47:19:c9:52:9d:4d:0f:b3:2d:60:34:0e:f3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51476318d71bf658f9a845f54ab27bd899892437
Validity
Not Before: Nov 11 07:01:33 2025 GMT
Not After : Nov 12 07:01:33 2025 GMT
Subject: CN=c1b8817c5e5a0edec0350bd2b1cbcc0659fd5ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2a:f2:f5:ad:c7:ab:07:41:d0:86:4d:ae:2a:
68:b2:32:80:84:c8:23:00:e2:1c:bf:ca:8d:73:de:
a7:42:82:5a:d2:8b:d2:5e:a2:6b:81:cb:9c:db:8a:
8b:b9:66:79:9a:58:cf:71:58:3c:c9:b8:9c:66:6b:
da:bd:3a:cd:ae:36:4c:0f:08:26:09:4c:c1:77:3c:
e6:72:88:fc:c0:b4:d4:e6:ac:98:37:08:ed:cd:d7:
94:96:1f:df:a6:4d:80:c8:1c:57:49:cf:f3:97:12:
58:c4:10:73:bc:23:42:e3:b6:63:f9:5f:2f:5d:4f:
d8:83:3c:b3:e0:ef:ff:75:7d:81:fc:2d:f7:e8:c1:
d2:ef:a5:5a:69:e7:03:96:5f:f6:ab:96:72:ea:4e:
59:9e:de:f4:a3:a7:61:2c:2f:96:cf:35:cb:a4:34:
c9:19:1a:2f:e2:5e:03:da:da:8c:66:c0:8c:62:13:
8d:59:31:e0:77:d7:c9:12:64:f1:e1:98:07:70:6f:
8e:8b:c2:f1:84:90:1b:e0:8d:74:e0:12:3a:c6:ce:
73:6a:d6:e2:22:c7:32:85:c1:e0:12:7c:82:d7:ee:
7c:c2:f5:bb:16:d2:ee:a2:80:f4:69:2d:82:d9:5e:
6b:26:2b:46:b5:36:6f:10:2e:1b:a8:3d:81:04:0d:
85:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B8:81:7C:5E:5A:0E:DE:C0:35:0B:D2:B1:CB:CC:06:59:FD:5A:E0
X509v3 Authority Key Identifier:
keyid:51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e6:bd:76:5a:2c:35:3c:dc:dd:5f:b9:b6:12:ed:52:37:e4:
22:01:45:9e:10:d8:bc:d6:b2:77:30:73:0d:ac:30:3a:d9:9b:
8a:f0:26:6d:1b:26:f2:02:11:29:e5:0d:28:e3:72:36:f4:3d:
19:39:fc:a2:05:29:2c:f5:62:44:b9:1c:23:08:f7:7b:d5:3f:
18:d1:74:17:fe:f7:b6:87:cc:28:b8:0d:02:0b:fc:9a:cf:c2:
26:50:99:67:63:83:75:a9:c7:c3:99:75:74:8b:40:8a:7e:03:
80:91:34:4f:b0:fd:c1:dc:31:bb:5f:55:d6:36:bc:ff:44:24:
43:11:a8:57:2b:25:1c:88:c5:c3:d9:de:c6:1f:4a:75:2b:53:
20:d4:29:ee:e8:51:a9:ac:d4:bf:c9:32:57:09:8b:09:f0:dd:
73:3c:c4:1d:fe:05:c6:5e:56:7e:e4:0c:2e:36:e2:70:d0:de:
5e:b3:16:c8:72:e3:8a:6f:50:65:33:9b:77:55:be:58:a4:a4:
59:71:7f:51:f3:19:35:bd:4a:c3:65:cd:0f:2b:93:fc:5f:24:
dc:aa:9e:f9:b5:eb:76:ac:d4:87:f8:07:aa:9a:38:45:9a:22:
9c:b2:7a:47:94:48:99:90:52:cf:40:5a:2a:e7:d0:01:78:d2:
e7:88:6a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:40:16 2025 by rpki-client