Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
File: UUxVK7lETAD5Ty8FlMujUvwsu7w.mft (raw, json)
Hash identifier: cfxGCU9dvNPWJSbOJsRn2/JzyY99pXvfHobAbqRS/n0=
Subject key identifier: 42:45:B3:97:AA:EE:1D:AC:58:11:EF:99:D4:84:02:11:7C:85:D7:D1
Authority key identifier: 51:4C:55:2B:B9:44:4C:00:F9:4F:2F:05:94:CB:A3:52:FC:2C:BB:BC
Certificate issuer: /CN=514c552bb9444c00f94f2f0594cba352fc2cbbbc
Certificate serial: 019A71EE77FFEBF6F7BF81FBF5E65D4C2BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 08:00:44 +0000
Manifest this update: Tue 11 Nov 2025 08:00:44 +0000
Manifest next update: Wed 12 Nov 2025 08:00:44 +0000
Files and hashes: 1: UUxVK7lETAD5Ty8FlMujUvwsu7w.crl (hash: /XcrvWciVti+TSt6PWqRbrhV0XgRFB4fUyRjAl0ImCA=)
2: xWOpZfRr7thuD6cUtKvPdI-_VBQ.roa (hash: Pf5kik5m7cGGBhNkzoxIAzTv7Y7VAUUsC50OhLmpfJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:77:ff:eb:f6:f7:bf:81:fb:f5:e6:5d:4c:2b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=514c552bb9444c00f94f2f0594cba352fc2cbbbc
Validity
Not Before: Nov 11 08:00:44 2025 GMT
Not After : Nov 12 08:00:44 2025 GMT
Subject: CN=4245b397aaee1dac5811ef99d48402117c85d7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:35:10:fe:61:6a:1d:72:af:26:b8:bd:c7:4b:
d8:61:e4:97:5a:09:a9:f1:77:80:07:22:cd:19:ed:
53:f4:6b:7f:b3:80:1c:e7:c6:37:23:8f:92:6f:be:
d2:19:1c:f2:a5:29:26:e9:dc:1b:a4:c5:22:7f:ce:
2e:0d:6d:6f:6a:74:ee:71:47:29:ee:75:56:69:6c:
52:e5:f4:cf:2f:db:dd:98:73:79:b4:26:13:85:de:
57:ce:e9:5c:08:d4:70:cb:63:0a:bd:71:61:a2:c4:
ba:e5:96:92:4a:9a:d5:2e:17:5e:fd:66:91:02:4b:
eb:44:d1:b8:a2:48:a5:ac:fa:bc:b9:55:f6:a6:f4:
87:0e:bb:fa:f2:90:4a:ee:3c:98:24:05:87:96:ad:
e8:f8:26:f6:1f:6c:57:72:60:87:87:dd:14:ad:3f:
79:a3:f3:6f:e6:87:fa:4f:96:f1:03:4c:9f:d4:dc:
c6:eb:21:58:e0:a3:a0:af:b5:fb:f6:b1:cb:71:6e:
0f:28:41:70:ac:a7:80:17:8f:2f:2c:d8:88:92:9f:
32:f1:e9:e8:8f:b7:de:b1:3f:52:6e:52:14:77:2a:
ee:bd:26:bd:f8:14:d7:68:22:ae:8d:24:2c:9f:6c:
ea:5a:07:ce:bd:df:aa:2b:a5:c9:3f:8c:75:1a:1c:
9e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:45:B3:97:AA:EE:1D:AC:58:11:EF:99:D4:84:02:11:7C:85:D7:D1
X509v3 Authority Key Identifier:
keyid:51:4C:55:2B:B9:44:4C:00:F9:4F:2F:05:94:CB:A3:52:FC:2C:BB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:4f:7b:18:84:fa:89:dc:e8:df:a1:a7:20:cd:73:5d:2f:b6:
7f:04:dc:af:05:eb:1e:b3:b1:6b:3c:ed:ff:65:eb:50:cb:58:
91:ef:15:af:21:7b:9b:a3:ed:98:19:f9:30:ed:cc:26:e4:d7:
40:e7:bf:89:90:bc:fe:a4:b5:85:cb:de:33:7d:e2:aa:3c:ed:
b5:c9:31:0c:2c:7e:cf:ed:17:08:13:a1:ea:e0:e9:eb:53:29:
bf:73:9d:e6:ca:0a:98:85:4b:55:e4:33:5d:da:05:9a:42:41:
48:f0:84:c3:11:11:02:cd:8b:e1:01:55:30:4d:9e:ef:d4:01:
79:1d:ba:6e:76:a9:75:6d:1e:4e:7e:04:90:b6:e9:30:28:d4:
3f:25:f6:06:bd:17:5f:45:c9:b6:f2:74:6d:43:23:a5:17:39:
47:6d:33:5f:6a:7b:c0:d0:0f:61:03:27:ce:6e:ab:93:2c:a6:
06:12:48:03:72:3c:b0:5b:9f:95:19:f0:2b:53:1e:df:5e:1c:
b2:29:6c:2b:c5:59:55:93:70:4a:80:9b:9f:ed:f5:96:17:9b:
b9:2e:4d:94:ec:f9:9c:ac:b7:04:0b:ae:d3:9f:a5:fd:ea:8b:
9f:d5:a4:d6:d1:f6:64:81:69:94:42:c5:25:5e:78:f8:95:e4:
b2:84:b4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:18 2025 by rpki-client