Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
File: UeFdozln1BRwqW1hQcg0DyJAWBw.mft (raw, json)
Hash identifier: xZIB6PT88A6n7nrNEIRuOHSswM4p1DRzmEzoDbKahds=
Subject key identifier: 83:A4:62:A6:87:CE:9E:9C:2A:16:D1:9F:C0:49:41:E5:64:83:DF:8D
Authority key identifier: 51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C
Certificate issuer: /CN=51e15da33967d41470a96d6141c8340f2240581c
Certificate serial: 019A4DE1C91F0228D9A5ADA195286D11EF9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 08:00:33 +0000
Manifest this update: Tue 04 Nov 2025 08:00:33 +0000
Manifest next update: Wed 05 Nov 2025 08:00:33 +0000
Files and hashes: 1: UeFdozln1BRwqW1hQcg0DyJAWBw.crl (hash: cXX2lvX4iNk7xss3zWj1/iuwyjAabhbgbOidfJM0pcI=)
2: gBYCWzo5jT_O6BTkSg1kyvPsFw4.roa (hash: +/mKf9OZ57+DTvZmgtnYONd6u+f9yDN0GFvCHTpFrgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:c9:1f:02:28:d9:a5:ad:a1:95:28:6d:11:ef:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e15da33967d41470a96d6141c8340f2240581c
Validity
Not Before: Nov 4 08:00:33 2025 GMT
Not After : Nov 5 08:00:33 2025 GMT
Subject: CN=83a462a687ce9e9c2a16d19fc04941e56483df8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8f:e9:24:c9:60:76:5e:cd:29:73:56:0d:7c:
1d:03:3a:f8:89:b3:8c:cf:bc:7c:e8:16:5b:e3:11:
10:f3:10:70:fc:18:79:70:17:d7:fb:27:bd:d1:43:
b0:3a:82:09:2d:ad:5f:03:50:61:29:9a:9b:fc:c5:
06:4d:ae:4a:39:e0:fb:0f:2d:dd:59:21:57:1d:aa:
1e:3a:63:15:ac:d7:88:b0:a4:bd:68:7f:1b:b9:c8:
a6:c9:b2:06:2d:72:ca:fe:63:14:cf:09:8d:dd:5b:
3b:27:26:ae:4c:cf:40:81:8b:b0:8e:a9:f4:be:01:
8d:60:96:a7:12:41:52:6a:1d:80:27:b8:05:e5:5b:
93:86:80:a2:07:e3:4e:70:2d:7c:7c:02:da:d8:92:
07:08:7c:5b:f3:66:ca:50:af:18:6d:e1:15:0e:a7:
6f:21:db:ec:ea:8e:3b:63:d0:b3:d9:4e:6d:18:c6:
5e:b9:a1:62:82:50:05:9d:cb:12:86:82:99:b0:25:
ba:b9:4a:61:a7:4c:c9:5e:35:db:fc:fb:57:4d:b8:
96:21:b5:27:e0:91:ec:43:05:da:95:9f:23:1a:62:
7e:64:0b:88:f3:38:49:74:4f:71:07:b6:b6:62:8f:
e6:a3:e7:0e:d1:92:c6:6d:8a:3f:1f:c6:09:4c:64:
07:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A4:62:A6:87:CE:9E:9C:2A:16:D1:9F:C0:49:41:E5:64:83:DF:8D
X509v3 Authority Key Identifier:
keyid:51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c3:4d:8b:6f:19:dc:b1:4d:6e:6d:06:5c:9c:bb:68:87:2e:
3c:39:89:30:4c:1f:0c:ac:ce:c5:bf:6b:27:bb:3a:4d:bb:29:
c1:56:64:9c:42:8a:16:90:8e:0b:65:c8:56:9f:7f:36:d3:a5:
cf:81:4c:1d:7e:e3:d6:d7:7d:11:24:d4:58:c9:55:42:15:3c:
85:50:61:af:bd:9c:f2:45:85:fb:78:c0:f5:cb:b0:81:56:f4:
7c:ad:1b:f9:e5:f7:85:10:e1:cf:86:ac:8b:70:85:c6:0b:86:
43:b6:72:6d:14:3e:ab:18:8b:35:bf:cb:47:85:76:13:91:f0:
b3:83:48:28:4b:a1:ee:a3:f0:01:e2:45:3c:54:f6:db:6b:e3:
47:5f:0f:66:70:f4:01:49:f0:18:a2:f3:e2:06:b9:cb:25:25:
88:50:d2:26:22:36:af:eb:ed:af:d3:56:d6:f2:89:1c:31:b8:
92:e5:5f:db:3b:54:55:2a:17:a1:ad:bb:02:94:9a:4f:3e:d7:
72:bb:e3:08:16:18:4e:f9:9e:d5:c3:0a:02:43:78:3a:49:f1:
0a:5f:06:82:9f:ac:df:87:49:55:0e:03:18:f9:94:f1:ed:cf:
4d:39:5d:79:87:b9:78:83:53:72:19:d4:f9:1c:ef:a1:6f:cb:
54:70:43:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:20 2025 by rpki-client