Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c9619d-1b3b-49db-89c2-a70bc30a33c3/1/RE_UFLu7UMn_tejPBmVPeftYdsw.mft
File: RE_UFLu7UMn_tejPBmVPeftYdsw.mft (raw, json)
Hash identifier: SZE8c94exvJb9SSOMkxFduFXKpFrvDO0mZCfr9Dq8tA=
Subject key identifier: 31:CE:97:5B:97:84:A9:51:3F:64:71:95:25:F5:C1:00:79:C2:82:4F
Authority key identifier: 44:4F:D4:14:BB:BB:50:C9:FF:B5:E8:CF:06:65:4F:79:FB:58:76:CC
Certificate issuer: /CN=444fd414bbbb50c9ffb5e8cf06654f79fb5876cc
Certificate serial: 019A7293885E3746DD0BC9C02088D2051B37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RE_UFLu7UMn_tejPBmVPeftYdsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c9619d-1b3b-49db-89c2-a70bc30a33c3/1/RE_UFLu7UMn_tejPBmVPeftYdsw.mft
Manifest number: 0405
Signing time: Tue 11 Nov 2025 11:01:02 +0000
Manifest this update: Tue 11 Nov 2025 11:01:02 +0000
Manifest next update: Wed 12 Nov 2025 11:01:02 +0000
Files and hashes: 1: RE_UFLu7UMn_tejPBmVPeftYdsw.crl (hash: MIlByJLL30HVg6W9pu83shmEh+XwnmgQFz6n8MwpTy8=)
2: epx5ZtV1DmNUOssTw71RpRlPSQg.roa (hash: Mn6EWImg2YFEUwlk4S0gZpe8CjG2vGuON1o03HQf5Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c9619d-1b3b-49db-89c2-a70bc30a33c3/1/RE_UFLu7UMn_tejPBmVPeftYdsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/c9619d-1b3b-49db-89c2-a70bc30a33c3/1/RE_UFLu7UMn_tejPBmVPeftYdsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RE_UFLu7UMn_tejPBmVPeftYdsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:88:5e:37:46:dd:0b:c9:c0:20:88:d2:05:1b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=444fd414bbbb50c9ffb5e8cf06654f79fb5876cc
Validity
Not Before: Nov 11 11:01:02 2025 GMT
Not After : Nov 12 11:01:02 2025 GMT
Subject: CN=31ce975b9784a9513f64719525f5c10079c2824f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:29:bb:4d:d3:a5:c2:8a:5f:a8:81:ad:9f:a8:
b0:ae:af:90:fe:72:f3:69:11:db:86:23:ec:8a:48:
97:3c:56:84:52:ad:e5:3e:f5:bf:11:66:f4:fa:ba:
c2:78:82:0c:99:d4:cd:3c:8c:21:40:8c:80:d8:e6:
06:2c:be:5a:57:78:fb:00:dd:ac:f8:50:c0:fe:5d:
a2:ad:fd:5e:c0:e1:2e:50:d6:33:6a:01:c2:00:2c:
d7:0c:8b:e7:0a:34:26:f4:ae:d9:af:cb:7c:20:d0:
a2:74:7d:aa:16:19:ea:34:f6:54:fe:0a:ff:ea:f8:
93:8f:d3:c8:f8:84:27:72:09:9d:0a:c9:2a:32:04:
fb:0e:2a:46:26:24:53:f8:f3:2e:e9:dd:1f:2b:b0:
bd:e5:73:8b:3c:65:55:6c:00:60:08:2d:b3:d7:70:
ea:aa:96:69:db:18:2c:0c:2c:64:0b:b1:27:5c:f4:
b9:ba:68:0c:01:9a:2a:72:82:b6:c0:40:b1:59:9b:
00:15:42:28:e6:02:f4:e3:10:7c:b5:63:66:a4:32:
0f:4d:e8:1b:dd:4c:68:b5:0a:fb:d5:c0:a6:d4:27:
37:8e:d8:fa:0f:c1:c8:a8:2b:bf:a8:9a:87:13:79:
02:77:ca:f8:29:57:a0:ba:12:a5:50:2e:2e:fd:ca:
ea:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CE:97:5B:97:84:A9:51:3F:64:71:95:25:F5:C1:00:79:C2:82:4F
X509v3 Authority Key Identifier:
keyid:44:4F:D4:14:BB:BB:50:C9:FF:B5:E8:CF:06:65:4F:79:FB:58:76:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RE_UFLu7UMn_tejPBmVPeftYdsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c9619d-1b3b-49db-89c2-a70bc30a33c3/1/RE_UFLu7UMn_tejPBmVPeftYdsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c9619d-1b3b-49db-89c2-a70bc30a33c3/1/RE_UFLu7UMn_tejPBmVPeftYdsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:9f:1d:21:b4:0b:41:9b:b1:4a:9d:dc:15:c7:3a:c7:af:91:
92:ec:4b:0c:a7:36:52:0d:1a:41:04:41:fe:2e:c7:ed:5f:f1:
14:69:24:29:a7:16:2a:2d:08:49:81:95:7d:2e:54:62:fd:8c:
77:f0:77:f8:ab:67:d6:56:72:f3:7e:cc:a5:6d:8b:73:5f:5c:
54:82:52:93:cf:31:64:bc:bd:0e:df:9a:da:0b:f0:5f:a2:16:
4d:55:7c:08:9a:77:46:c8:85:d2:d6:43:a5:7f:ee:56:e6:b7:
e6:7a:7d:d6:24:41:8e:2e:20:8a:27:3c:aa:1a:f8:3d:44:06:
d4:83:78:68:ea:f8:1e:0e:17:11:4a:6e:88:bb:54:ab:a0:e0:
95:f4:6c:55:2d:07:de:c2:38:ec:8f:44:66:ce:82:23:c0:9c:
0e:3e:4c:a0:74:2d:7d:0b:c8:0f:24:2f:5c:ba:4f:90:72:13:
2c:57:22:7b:91:b7:db:97:42:a5:1b:08:6c:88:3b:6a:e2:6b:
bf:14:0f:49:97:34:8f:ad:53:02:8d:13:16:85:a5:a4:9f:37:
f1:09:17:54:a4:f0:61:8a:76:26:67:11:bf:b9:a5:68:81:2a:
af:76:86:db:79:c1:1f:2e:92:0f:f6:71:3d:09:29:e9:e3:be:
d8:68:92:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:49 2025 by rpki-client