Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
File: UEUj-IEevlqjWYURpI87rwABqOg.mft (raw, json)
Hash identifier: 8/G+jyUdiqBeb41DRUELfQ2iHKYNpmrMaiJcnFgAmYc=
Subject key identifier: D9:4A:62:CE:80:4E:86:C8:15:74:A7:B6:E5:BB:AD:84:27:4F:74:31
Authority key identifier: 50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8
Certificate issuer: /CN=504523f8811ebe5aa3598511a48f3baf0001a8e8
Certificate serial: 019A71B8B64D95BACE37F286CC0A81D53B16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
Manifest number: 11BE
Signing time: Tue 11 Nov 2025 07:02:01 +0000
Manifest this update: Tue 11 Nov 2025 07:02:01 +0000
Manifest next update: Wed 12 Nov 2025 07:02:01 +0000
Files and hashes: 1: UEUj-IEevlqjWYURpI87rwABqOg.crl (hash: W5ITXNvESCQy86bS0ahIzTPWvThI+6ym74R0fypwHQs=)
2: ZZhPPwqLkt0i32K3myspkarpm7w.roa (hash: I/Su6LLFQ+Dm0Pej9IN4WakV0FZtHq7XZa94FgMwfR8=)
3: _U1q7kl-Gvc0JP4VZVgWjqcMCOs.roa (hash: 3X8IGbj3QMA8V3ptFiyp/tKTSPuKRQ3qYJfTsAQKmxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b6:4d:95:ba:ce:37:f2:86:cc:0a:81:d5:3b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=504523f8811ebe5aa3598511a48f3baf0001a8e8
Validity
Not Before: Nov 11 07:02:01 2025 GMT
Not After : Nov 12 07:02:01 2025 GMT
Subject: CN=d94a62ce804e86c81574a7b6e5bbad84274f7431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:09:81:27:5c:8b:5d:0f:26:6e:45:f5:43:
94:f1:51:f1:90:3b:9b:60:86:71:60:66:df:23:63:
1c:07:95:ec:46:45:9d:db:f0:97:8c:ef:f0:9d:52:
4a:00:a2:d2:3f:b7:81:89:80:28:47:56:39:40:c7:
cc:53:11:42:ef:33:b1:84:a1:1b:33:44:10:19:63:
f8:2e:ab:6e:32:9d:14:91:a5:8d:37:51:4c:b7:75:
4d:dd:18:43:b7:50:3f:25:76:65:0e:7d:c8:b2:3e:
d7:03:1b:47:8b:8b:c2:ae:46:7a:8b:7c:17:da:93:
82:ec:5e:f2:51:09:72:7d:9e:8b:84:95:05:e3:b4:
f1:ad:b1:f7:26:83:43:17:4b:15:d5:0b:a3:b0:5f:
ec:07:9a:0a:1b:3f:51:86:3d:2c:cb:0e:6e:af:08:
00:48:a1:2f:7f:96:8b:8b:72:69:9a:99:e2:b1:9a:
c6:02:ee:07:e1:a1:c6:07:1b:35:4c:85:df:90:c7:
d2:7d:54:b9:b2:b4:00:18:ac:7f:77:2f:06:86:3b:
36:55:70:cf:bf:2c:54:89:e1:99:05:e1:46:05:c5:
7b:ea:f8:24:25:a6:3c:cb:04:28:4a:e5:72:1f:1b:
ab:25:74:d4:9c:43:a3:9c:ca:ca:a7:58:e6:b5:14:
9d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4A:62:CE:80:4E:86:C8:15:74:A7:B6:E5:BB:AD:84:27:4F:74:31
X509v3 Authority Key Identifier:
keyid:50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ee:fa:98:d4:49:df:47:1a:f1:60:a5:d2:04:60:b7:9a:b0:
a9:6d:8a:a1:78:c2:96:a8:80:a4:c2:ff:0f:d7:14:df:2f:7c:
d7:57:d3:38:2b:d7:1f:f9:f8:ba:97:b7:46:5c:29:eb:f7:f2:
21:3c:b7:01:c5:21:ec:a7:66:25:8a:df:f6:9e:60:74:4c:ab:
34:ce:3a:70:da:8c:8a:1f:e8:6b:c2:35:e6:ad:8f:56:27:3b:
8a:8f:5c:5c:cb:3a:db:f2:fd:53:f1:6c:87:7c:12:64:68:3b:
15:e5:97:24:d0:02:7a:d9:71:36:1a:bb:e6:04:f8:bd:aa:a8:
cd:9c:8e:e1:26:04:f8:53:13:75:57:66:69:fd:c1:e4:61:1f:
03:52:ca:d9:6b:a5:42:db:59:6d:8b:14:f2:bb:93:50:dd:75:
9b:ff:51:a1:a4:6e:77:cb:6d:6b:60:89:10:ba:5d:c4:e5:4d:
f6:2b:a2:70:ab:08:20:ef:c0:1c:23:2a:4d:46:c0:bc:df:63:
20:18:5f:7d:50:71:51:89:e3:62:e5:a0:90:f5:08:6b:f3:fd:
27:b5:83:00:24:42:64:1f:64:70:74:47:a6:69:3c:79:c6:8f:
a3:31:72:c8:2d:ac:4a:a4:cc:a1:10:a5:82:57:09:9b:e5:97:
2f:c4:ed:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:53 2025 by rpki-client