Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
File: UeK-E5rnec09T-68zTaCgaH156A.mft (raw, json)
Hash identifier: gPyHCewtgbOWVXYEK6bt5emlEIonkk54TrAaEDHonuc=
Subject key identifier: 85:7E:F7:4F:E1:C9:B3:F3:F7:0D:9A:04:4F:38:2B:5E:95:38:C1:18
Authority key identifier: 51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0
Certificate issuer: /CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
Certificate serial: 019A2553CA2FF4DD8A4E279C9874C52DBA3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
Manifest number: 16F6
Signing time: Mon 27 Oct 2025 11:00:39 +0000
Manifest this update: Mon 27 Oct 2025 11:00:39 +0000
Manifest next update: Tue 28 Oct 2025 11:00:39 +0000
Files and hashes: 1: UeK-E5rnec09T-68zTaCgaH156A.crl (hash: uDZcjM0s0qCv9XwzGiN6D3xtCXPHsiB/IDX5Wkv7Wjc=)
2: VSiusRPyIc9Tc8bThvks1NkGA7Q.roa (hash: uzDtGIiakPGkLOEGtmPHEX+erK/AAaDobyuB+l6q1NI=)
3: oEAOgGGkZaklYkgZV_R2RLLowJE.roa (hash: nmzYZ74qwgtxEwczkSmrHUbIJNO39YmkNHQC+ORU3+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:ca:2f:f4:dd:8a:4e:27:9c:98:74:c5:2d:ba:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
Validity
Not Before: Oct 27 11:00:39 2025 GMT
Not After : Oct 28 11:00:39 2025 GMT
Subject: CN=857ef74fe1c9b3f3f70d9a044f382b5e9538c118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cc:bf:95:ef:03:8f:45:71:50:f9:23:11:52:
dc:ef:ba:fe:f9:be:ed:c8:71:19:2c:05:e5:36:29:
00:fa:ab:4c:c6:63:3a:6f:5d:4d:c9:61:5b:67:78:
82:11:79:e7:5e:3a:3d:cd:55:e2:40:b1:8e:7a:3c:
ff:f6:5c:ec:9b:1c:df:2c:76:b2:bd:e5:c6:8a:06:
7c:d9:b6:cd:05:34:c4:11:19:d8:3c:23:1b:d1:94:
ca:d6:21:5b:c6:37:bd:e7:f1:76:23:9b:aa:f9:58:
91:e3:8e:d9:6e:ac:e0:a0:17:cd:9e:0e:54:d6:d7:
79:bf:fb:ce:b9:21:76:c4:84:14:27:53:3b:02:12:
eb:0a:53:98:b4:e8:01:7b:94:97:5e:dd:ed:84:0a:
92:ef:49:9e:1a:35:af:bb:d4:e7:1b:ee:e1:a0:fb:
c7:9c:01:64:ac:1b:c7:f9:a3:52:d4:5d:be:c0:2f:
2c:ce:f9:94:36:14:3a:bc:6a:ea:b4:3b:31:33:88:
e5:b4:97:78:27:ba:fa:2b:99:67:be:f6:6d:f1:d8:
dd:5d:a0:7a:a6:3b:bf:f2:9c:c8:a0:4a:7e:2f:1b:
c5:6a:49:a2:2c:f0:12:eb:15:b6:5d:55:ed:f7:77:
96:7d:51:96:eb:12:0b:5e:0b:3c:c6:fd:88:a9:48:
bb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7E:F7:4F:E1:C9:B3:F3:F7:0D:9A:04:4F:38:2B:5E:95:38:C1:18
X509v3 Authority Key Identifier:
keyid:51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d4:d0:92:7a:51:10:5d:37:bb:5f:af:2e:11:10:50:19:f6:
e9:be:b9:58:90:31:9f:10:79:cd:45:d8:46:95:22:be:67:e0:
f3:38:cc:2c:f6:2f:27:9b:24:08:84:81:1e:a2:dd:66:af:04:
32:fa:bb:78:d7:60:bb:f9:f6:17:65:7d:25:a0:ec:5b:f7:5c:
ce:4d:cf:e6:56:2d:31:f7:59:fe:47:d2:02:08:64:0f:16:8f:
b2:4e:c0:5d:dc:3f:e6:b3:a0:ae:7c:b1:a7:aa:08:be:02:78:
db:a0:ed:1a:36:8b:94:44:68:fe:33:ff:71:32:56:4b:d8:63:
40:1e:74:e0:e5:d3:a7:8e:0e:d3:c3:b6:64:ea:da:4a:d6:2c:
f8:1d:5f:4f:f3:28:ca:cf:ae:75:b4:49:07:36:0d:6b:1a:76:
df:5f:df:d3:d4:da:31:3c:15:4e:d8:61:3a:ed:2e:e2:90:9d:
61:79:9b:a8:95:5b:b7:c3:a0:de:3e:98:14:05:18:e8:a6:c7:
3f:40:90:b1:7d:64:de:1a:f8:1d:b2:b5:29:24:c1:f6:7c:98:
0e:c2:f2:50:0c:0f:df:7b:a1:bb:50:d8:09:ae:82:99:a5:0f:
14:fe:d9:d7:76:4c:e6:6d:56:cb:11:85:50:df:91:fd:d1:2f:
3c:62:73:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 19:47:15 2025 by rpki-client