Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.mft
File: Uev2DyIajjHTawfqptLlP20GS20.mft (raw, json)
Hash identifier: PuLMfr44ja1LB1Vb1L50cssA4DzYXeJv/gCXt377bek=
Subject key identifier: 64:44:E1:FC:37:14:1C:9C:0A:77:A5:37:37:26:44:DC:02:8B:A6:FA
Authority key identifier: 51:EB:F6:0F:22:1A:8E:31:D3:6B:07:EA:A6:D2:E5:3F:6D:06:4B:6D
Certificate issuer: /CN=51ebf60f221a8e31d36b07eaa6d2e53f6d064b6d
Certificate serial: 019A725C6868280AE83375DA7E7E95A4A921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uev2DyIajjHTawfqptLlP20GS20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.mft
Manifest number: 01E9
Signing time: Tue 11 Nov 2025 10:00:49 +0000
Manifest this update: Tue 11 Nov 2025 10:00:49 +0000
Manifest next update: Wed 12 Nov 2025 10:00:49 +0000
Files and hashes: 1: 6cL0Kq2jENP4RbTfqSWNtMD0gog.roa (hash: B9YDbFIbrVtsJdUb+90YG+5LOIPbPTqvU71w0BJqJSg=)
2: Uev2DyIajjHTawfqptLlP20GS20.crl (hash: vqYO4w6XnT+xyItlG8z3Fu2kvpv7rWmcdHwT007WQEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uev2DyIajjHTawfqptLlP20GS20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:68:68:28:0a:e8:33:75:da:7e:7e:95:a4:a9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ebf60f221a8e31d36b07eaa6d2e53f6d064b6d
Validity
Not Before: Nov 11 10:00:49 2025 GMT
Not After : Nov 12 10:00:49 2025 GMT
Subject: CN=6444e1fc37141c9c0a77a537372644dc028ba6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:68:cb:35:ed:42:37:24:8a:d2:90:b4:13:b2:
91:c1:4e:c0:4d:c7:7f:41:ad:f3:0b:f1:a9:91:d3:
58:c9:3c:5b:34:ea:89:7b:ea:a4:b3:33:f2:df:cc:
f7:bf:6f:16:86:d6:7f:39:6c:1c:e2:c5:50:40:54:
7d:11:ad:44:8a:6a:98:c2:30:a5:ba:16:1c:4a:21:
bf:7a:89:67:85:09:59:20:03:b4:f8:16:b2:fe:be:
f5:fb:52:9e:eb:f9:6b:58:9a:b6:b2:00:3f:e2:67:
5d:28:91:18:fd:6a:cf:e1:23:1c:dd:43:6a:fe:10:
76:13:1f:fb:ec:9e:e2:bb:16:b1:8a:45:31:19:43:
ad:9d:e4:43:f5:4b:fd:35:70:20:49:10:83:64:66:
3e:cd:b9:a3:bf:7c:17:87:c9:bc:79:97:b4:14:d4:
db:18:ad:4a:2d:d3:6b:28:3c:ff:f5:1c:8c:a7:69:
80:63:a9:0f:9c:01:b7:63:f3:ea:f3:73:31:0c:f5:
9c:3b:8d:fc:58:42:18:94:64:61:b8:bd:ab:0c:81:
08:85:e3:db:87:cc:8e:4f:a9:3c:31:e2:5e:18:a3:
90:09:ea:40:a5:d9:ba:cf:07:c6:f1:ad:d7:1e:af:
fc:83:fd:6f:fd:c6:d8:48:3d:25:99:eb:0c:84:5c:
ea:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:44:E1:FC:37:14:1C:9C:0A:77:A5:37:37:26:44:DC:02:8B:A6:FA
X509v3 Authority Key Identifier:
keyid:51:EB:F6:0F:22:1A:8E:31:D3:6B:07:EA:A6:D2:E5:3F:6D:06:4B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uev2DyIajjHTawfqptLlP20GS20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a1:6d:21:30:91:0a:6d:a2:fd:59:e1:a5:d8:7d:4b:ec:30:
64:81:01:dd:6c:3b:22:a8:df:97:74:fa:8d:7c:99:04:79:e7:
c0:ec:2a:73:f1:72:ed:b0:cb:bf:85:c1:c2:78:44:3f:44:23:
40:ed:17:64:bd:36:71:09:99:f1:90:15:6e:22:1c:7f:d2:b5:
d2:2c:fb:9f:d1:7e:d9:71:c8:74:d5:da:78:bd:e7:52:99:71:
19:95:ff:f5:8d:77:10:0c:58:a3:8b:18:0c:7f:ed:af:2f:9b:
e3:17:55:35:a2:30:16:de:b4:4f:fc:6c:07:39:f9:4b:9a:bf:
6f:fa:92:07:3b:be:d7:c1:c9:86:b4:a5:9a:86:db:cd:5c:42:
e3:d8:43:52:72:4f:da:1f:89:ff:a4:af:25:42:09:9f:4c:8a:
0f:d2:54:ec:49:da:08:e2:17:1f:68:a8:46:97:7d:be:c6:e7:
44:1b:0c:14:ff:70:d7:d0:9c:fd:eb:c3:2c:0e:1d:8b:7c:59:
bc:f0:d4:67:45:7f:22:dc:a1:be:e6:ca:97:97:c5:e9:20:52:
e5:a3:65:1d:5e:77:06:da:73:bd:b6:9d:75:5a:40:85:3b:7e:
de:84:a6:6d:38:55:30:d1:1e:e5:e9:4e:fb:57:6a:73:6b:cd:
6c:09:ba:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:49 2025 by rpki-client