Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
File: Uez5urycprrpCFzikvscLMGNNE8.mft (raw, json)
Hash identifier: /TP2+HPC3oxHlXYzXjBgOr8lmk6ruHaR2ZNNVLxkWoE=
Subject key identifier: E9:BD:81:EE:F2:E6:35:F3:D9:A2:CD:20:5C:7F:42:65:7D:7B:FB:B6
Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
Certificate issuer: /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Certificate serial: 019A7149F3FB3D098E7DFD6F9F68D1A6B1B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
Manifest number: 172C
Signing time: Tue 11 Nov 2025 05:01:03 +0000
Manifest this update: Tue 11 Nov 2025 05:01:03 +0000
Manifest next update: Wed 12 Nov 2025 05:01:03 +0000
Files and hashes: 1: Uez5urycprrpCFzikvscLMGNNE8.crl (hash: dNm32Ln9CC4zy1w8iEMpHuI2Obs1rtBOUwI00PuR1Uw=)
2: l-hCkKbGiTfZLiw01nyzAqx9RrE.roa (hash: eNnspbPwHy2/o3P/VfKyhFa9HsXh1TKY3mCuqf0R7X4=)
3: xxWFbF3tgwbzUuCNrDoHcp9Qoi0.roa (hash: nF/SPLRIzHvrKRFZBuGbHBJ7AWT0/rnH1yU0BqremkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:f3:fb:3d:09:8e:7d:fd:6f:9f:68:d1:a6:b1:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Validity
Not Before: Nov 11 05:01:03 2025 GMT
Not After : Nov 12 05:01:03 2025 GMT
Subject: CN=e9bd81eef2e635f3d9a2cd205c7f42657d7bfbb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ed:83:f6:7c:08:75:0d:03:82:5b:18:93:f9:
ae:85:42:38:9f:ba:bb:21:79:e7:3c:01:b2:b2:e7:
fc:dc:59:04:d9:8d:f3:6f:c7:07:d7:f8:af:df:6b:
8f:c7:8f:00:b6:f0:7a:b0:c2:80:31:e3:09:71:4b:
d4:d4:a4:43:d3:0d:c7:7b:42:d2:eb:be:b9:4a:6f:
47:bc:5d:a4:70:2b:9b:7e:78:a8:02:aa:ec:6c:e8:
56:8e:d1:60:25:d9:e3:1c:5d:d1:8b:4d:ea:d4:79:
61:5a:d2:00:e5:b9:3a:9d:bb:29:6a:e5:9a:20:fa:
6c:b8:01:52:73:8a:54:7f:e3:cc:63:be:2e:01:8a:
fe:13:fc:cd:23:63:0c:8d:a0:2f:08:b9:44:5c:ad:
6d:1d:fc:02:a9:1d:06:4e:b0:cb:6b:93:63:35:f4:
e2:b1:94:17:01:be:d8:0b:5c:f3:b8:85:fd:d8:20:
09:6f:e1:51:b3:73:94:bb:51:e2:e8:b7:f4:32:93:
c0:eb:fc:af:c8:5b:33:73:1d:6a:1b:4a:dc:16:ee:
c8:cc:a6:d3:28:23:0b:13:e6:b0:48:e3:21:b2:ae:
77:e8:44:ee:bf:04:23:26:a3:8b:b9:f1:1d:83:4f:
aa:9a:40:ed:3e:a7:9a:91:f0:03:59:ad:52:95:39:
78:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BD:81:EE:F2:E6:35:F3:D9:A2:CD:20:5C:7F:42:65:7D:7B:FB:B6
X509v3 Authority Key Identifier:
keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d9:68:4f:90:e1:23:40:18:1c:d4:60:a1:5f:26:0f:da:dd:
df:18:05:8e:1e:15:24:81:8d:54:9b:0a:fe:06:ab:8a:b1:2c:
e1:d5:11:27:ed:9b:dd:ea:1d:cc:1a:99:bd:3d:5b:60:fa:e4:
79:8c:8f:5e:82:a0:8c:5a:c7:b1:e7:2e:49:79:22:4f:07:1e:
b9:bc:69:7c:31:fa:78:04:b7:92:8b:e2:ac:52:0c:8c:d6:e7:
80:48:04:fb:90:ba:39:9a:76:34:23:9f:0a:76:4a:1b:50:c0:
50:7c:02:95:7b:6c:59:9c:7e:aa:7f:56:cb:31:08:dc:db:21:
84:47:9f:52:39:38:29:1a:df:9b:51:84:a0:df:1e:46:7b:79:
c5:cb:82:69:9e:48:2d:95:db:bf:7c:99:f6:54:84:54:87:99:
f8:13:32:0d:40:47:12:4d:6b:28:2a:ed:09:dc:5e:4f:46:91:
d6:33:1d:75:78:95:18:c7:81:e9:62:7b:1b:d1:0a:d8:70:06:
40:5c:39:83:21:00:fc:35:06:c7:16:10:cc:1a:6a:57:f8:21:
2d:55:af:7b:80:96:0a:f3:c6:00:24:d5:99:5a:f6:76:6e:73:
06:02:68:f8:4f:c0:75:12:37:34:e0:94:bc:cc:32:d1:32:10:
c6:9c:e7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:38 2025 by rpki-client