Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft
File: Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft (raw, json)
Hash identifier: ub75nfM2ubLYZdy2k6z1udexEUJaolBtmn8qworh5w0=
Subject key identifier: 48:97:18:33:B3:AA:FE:D8:61:1A:9A:13:50:9E:CC:25:57:E5:37:41
Authority key identifier: 51:EE:1A:67:72:5E:B4:A7:64:A5:87:BC:37:07:9D:EB:BE:81:FB:64
Certificate issuer: /CN=51ee1a67725eb4a764a587bc37079debbe81fb64
Certificate serial: 019A57895F7432A7C8D89D5CF9F93B138CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft
Manifest number: 1614
Signing time: Thu 06 Nov 2025 05:00:11 +0000
Manifest this update: Thu 06 Nov 2025 05:00:11 +0000
Manifest next update: Fri 07 Nov 2025 05:00:11 +0000
Files and hashes: 1: 4ve1bR44fXpzC4OLaMdoWgSf4Wg.roa (hash: ORYpvPkbfZNFI/vr3Fjdbyn/Yoia3e4Tx4qioep5WQs=)
2: Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl (hash: EvIhKX1J09K1c/2O9S3/fbzly8/PM2W2vlC6qhC+4eE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:57:89:5f:74:32:a7:c8:d8:9d:5c:f9:f9:3b:13:8c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ee1a67725eb4a764a587bc37079debbe81fb64
Validity
Not Before: Nov 6 05:00:11 2025 GMT
Not After : Nov 7 05:00:11 2025 GMT
Subject: CN=48971833b3aafed8611a9a13509ecc2557e53741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:12:e4:35:9c:8e:ec:0d:d1:7b:33:14:00:f8:
0a:07:57:bd:ed:ff:18:26:63:b3:d8:9b:39:1c:7a:
d0:ff:64:1d:b9:55:13:9f:f5:c4:3c:b9:b4:1e:01:
ab:f4:5e:02:33:fc:86:0c:58:89:7f:0a:18:a5:12:
b1:41:88:36:c1:f5:65:5e:e4:c6:15:0f:1d:60:86:
11:22:59:10:20:63:9e:9a:7b:93:19:33:15:d0:d0:
30:bb:37:25:f2:87:4e:df:79:08:20:fe:11:eb:55:
78:ee:fa:fa:1c:d6:6a:3d:1a:7a:47:b1:0f:e3:9d:
d9:2f:75:3d:37:2d:6e:43:1b:be:8d:d8:cf:8f:49:
97:8a:20:e2:69:69:db:e4:d2:57:93:24:da:ff:16:
49:cc:33:9c:70:f1:20:84:d0:e4:ae:c1:a7:5a:c9:
dc:2a:b1:c0:bc:3b:ef:55:44:3f:d0:c5:c6:a5:04:
03:46:58:9e:bd:fd:ec:89:85:e1:ab:94:7c:2e:f4:
04:47:df:b6:06:75:10:5c:ce:8a:18:14:3f:4d:b3:
b9:a9:3c:93:2a:69:0b:10:d9:94:3a:a6:ef:7b:88:
39:65:f6:d3:b1:e5:ae:02:53:7d:37:33:9b:cd:1f:
99:5f:04:a5:e1:ee:16:1a:eb:5a:7d:aa:bf:c1:22:
b7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:97:18:33:B3:AA:FE:D8:61:1A:9A:13:50:9E:CC:25:57:E5:37:41
X509v3 Authority Key Identifier:
keyid:51:EE:1A:67:72:5E:B4:A7:64:A5:87:BC:37:07:9D:EB:BE:81:FB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:1d:b7:5d:a9:5e:82:3e:88:80:f3:16:82:b6:c0:a2:db:66:
58:b1:1b:18:c0:ed:27:82:13:17:1f:ba:38:8d:e0:c6:33:18:
48:8a:b3:ec:d6:e5:41:a9:fb:b2:15:45:5a:ac:75:f7:d6:d3:
72:ec:35:b7:c9:59:77:70:75:fd:d1:e2:5a:90:32:cd:3e:b2:
fe:a6:52:01:cc:fa:8a:62:ce:09:5a:2e:4c:96:45:e4:7e:7c:
1b:d4:d1:e1:e7:d7:a4:71:44:d9:07:c1:57:78:8a:eb:23:3a:
1a:f8:66:78:2f:a0:e5:d5:a1:53:3a:cf:3e:72:78:14:8d:2b:
bd:2a:58:0d:9d:c1:f0:8d:fb:77:62:d6:0c:38:e4:3a:bb:a3:
97:c2:31:ec:76:8f:f8:2c:a9:50:d4:43:fd:c7:68:e7:d8:f2:
d9:c4:a1:a3:2d:80:f1:2d:86:82:75:ad:3b:fd:54:ab:71:a3:
b0:2b:11:07:5a:50:e2:6f:70:3c:ba:94:66:e4:6c:2c:74:af:
59:7b:69:0c:a5:da:4d:8a:a9:3b:8a:6e:e1:d4:df:59:a0:6d:
2d:3a:4f:72:01:02:58:50:1c:e0:5e:11:32:b0:35:6c:9c:49:
85:67:c1:07:8b:1e:cc:bf:99:8d:40:0e:2f:d1:fd:5f:4d:76:
cb:fc:44:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 11:49:46 2025 by rpki-client