Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft
File: UeMbSuzGWzElp7R6yQkIsKUXhIM.mft (raw, json)
Hash identifier: qysrvx2aD2bvgYlrWy/i0KOUXiaq96pV63/HZIa+YeY=
Subject key identifier: F7:E0:61:07:96:74:C8:79:71:54:FD:77:24:9C:B6:5B:D9:F3:38:68
Authority key identifier: 51:E3:1B:4A:EC:C6:5B:31:25:A7:B4:7A:C9:09:08:B0:A5:17:84:83
Certificate issuer: /CN=51e31b4aecc65b3125a7b47ac90908b0a5178483
Certificate serial: 019A706E65637FBC785D6940ECC4C726B350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeMbSuzGWzElp7R6yQkIsKUXhIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft
Manifest number: 0F88
Signing time: Tue 11 Nov 2025 01:01:14 +0000
Manifest this update: Tue 11 Nov 2025 01:01:14 +0000
Manifest next update: Wed 12 Nov 2025 01:01:14 +0000
Files and hashes: 1: 1mN4TTVsQBMWz0jdNdzF9ia-Nrk.roa (hash: j77lZH/1fvCNPjqeRf7BLA0vb4Pw3UvnzVBQAcJctxA=)
2: UeMbSuzGWzElp7R6yQkIsKUXhIM.crl (hash: 7YjVQZmiOraRpvrf6DrnuYDUr/LK5y56u4ZB9Nwi2QU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeMbSuzGWzElp7R6yQkIsKUXhIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:65:63:7f:bc:78:5d:69:40:ec:c4:c7:26:b3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e31b4aecc65b3125a7b47ac90908b0a5178483
Validity
Not Before: Nov 11 01:01:14 2025 GMT
Not After : Nov 12 01:01:14 2025 GMT
Subject: CN=f7e061079674c8797154fd77249cb65bd9f33868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4b:fd:52:67:e8:87:3c:56:ea:f2:6d:0c:9b:
8c:e9:f4:5d:03:f4:69:82:37:43:59:29:d2:12:aa:
b8:a1:ce:e1:4f:f1:7d:d7:82:5e:5a:9a:21:c4:53:
aa:50:05:dd:be:43:17:99:fb:a3:7c:10:01:2c:8b:
d1:45:8d:73:2b:9e:25:63:06:84:b2:34:b6:45:2a:
fa:e6:a8:80:ec:10:5b:74:9a:b4:21:17:f3:2a:47:
b6:32:7e:ca:5c:fc:b5:9a:c0:af:11:55:27:7a:5e:
df:f1:20:28:4a:5f:e5:59:b5:fb:82:eb:5f:bd:07:
3f:57:a8:99:3f:47:49:d6:99:01:ed:4b:d1:2d:c3:
d8:03:c4:3e:d8:b1:d7:4b:09:af:a6:1f:6a:6d:6a:
bc:a2:bb:86:ab:a2:fc:b3:74:22:1a:93:31:48:06:
79:f4:aa:cf:69:e8:5e:c2:f9:8d:c8:44:ca:a5:80:
ff:5e:a9:b0:84:2c:a1:85:7d:2f:43:0c:df:88:77:
25:2d:dd:49:1b:d5:78:3f:ad:c1:26:72:41:ad:0a:
54:0a:e6:3b:8b:a2:33:4a:a9:ab:89:8e:68:aa:85:
9b:86:ef:32:8d:eb:30:dd:0c:6c:af:3b:f1:34:bc:
cb:f6:16:76:a9:98:cf:01:6a:fd:45:d3:4a:df:67:
cf:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E0:61:07:96:74:C8:79:71:54:FD:77:24:9C:B6:5B:D9:F3:38:68
X509v3 Authority Key Identifier:
keyid:51:E3:1B:4A:EC:C6:5B:31:25:A7:B4:7A:C9:09:08:B0:A5:17:84:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeMbSuzGWzElp7R6yQkIsKUXhIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:0f:93:9d:e2:aa:3a:d9:2a:99:51:37:f8:e3:6a:72:92:a1:
ca:5f:3d:bd:3b:bb:67:73:c2:0f:36:62:cc:a7:7c:e5:ca:9a:
9f:65:6b:f6:59:f8:a3:c5:f9:3c:08:74:11:67:25:43:66:4d:
15:ce:79:75:76:6b:e0:54:4d:10:b8:69:ff:7d:a4:5c:56:cb:
de:de:cf:e2:d7:34:25:d4:bc:04:8a:5c:3e:15:72:0c:01:da:
84:f7:0f:73:ee:79:ce:1b:7e:45:dd:53:80:7c:dd:05:25:b2:
87:3e:f9:d3:ab:4c:e1:94:34:3b:bb:eb:fb:1e:cf:b7:43:d0:
03:0e:54:a1:39:89:ec:df:e2:86:97:31:d4:6d:b6:2f:4e:ae:
24:77:40:0f:63:9c:ac:17:9b:53:5b:07:ed:7d:25:80:0a:a1:
f6:3c:81:38:1d:a1:68:8a:01:cd:9c:e3:a9:ae:43:7b:e2:94:
7d:5c:05:8d:53:bd:e2:76:a2:fc:f4:44:a4:9e:98:14:1c:ae:
11:23:72:f3:df:d8:70:56:34:5e:21:dd:80:c0:3e:e4:82:bc:
5e:d6:eb:80:ce:5e:10:58:30:2d:16:88:71:1c:64:7e:86:f3:
8e:5b:95:07:b6:84:69:4f:13:39:76:f3:7c:61:cf:2a:cd:9c:
4e:d8:08:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:05 2025 by rpki-client