Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
File: UeFASVvQbC6O-st-0KMVFtsfQF8.mft (raw, json)
Hash identifier: Np6dSqPEttoDPowDmdqZvhNT6ddkfTCQ2PLUGm/7Y8g=
Subject key identifier: 52:BC:96:15:53:5E:31:01:F7:3F:46:D3:98:0A:88:B8:3A:F6:52:FC
Authority key identifier: 51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
Certificate issuer: /CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Certificate serial: 019A4E4F6307B8D87FDCFF9F7D60AFA95E34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
Manifest number: 0E67
Signing time: Tue 04 Nov 2025 10:00:16 +0000
Manifest this update: Tue 04 Nov 2025 10:00:16 +0000
Manifest next update: Wed 05 Nov 2025 10:00:16 +0000
Files and hashes: 1: It1W1nFMSnvON6n0WueAxjrC3W0.roa (hash: FlHwhHOBprRKHgvgu+zMZLXgeJSLpK6evOb32wMUYTo=)
2: UeFASVvQbC6O-st-0KMVFtsfQF8.crl (hash: iK5ZoP2V+2tiZlT/N9DL8HS5LNfnTpZGVCGVMnaDEZs=)
3: aLexfPDGULdeLEaZK1qcN8F_0gk.roa (hash: mf1iYDEjsne4mRwDfdumJxwd7j7HuNwZ6q+crjDLiV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:63:07:b8:d8:7f:dc:ff:9f:7d:60:af:a9:5e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Validity
Not Before: Nov 4 10:00:16 2025 GMT
Not After : Nov 5 10:00:16 2025 GMT
Subject: CN=52bc9615535e3101f73f46d3980a88b83af652fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9a:91:cc:67:fd:c1:5f:53:e5:74:27:f6:29:
ff:bb:f3:00:d1:e4:81:71:84:8d:33:07:33:3e:7d:
ec:10:b9:de:a4:e1:c4:a0:22:11:38:46:6b:9e:9f:
e9:6b:15:9a:67:67:f6:2a:d2:30:c6:59:6d:c8:52:
2e:ff:1e:6a:41:8b:bb:2c:02:c1:b2:1c:fd:80:12:
de:dc:a6:6d:d7:3d:39:9f:9e:81:8a:39:c3:5c:77:
fe:e5:97:e1:65:e0:2a:1c:09:d3:5c:42:c4:f3:0a:
23:ce:ec:41:fe:e8:66:9b:da:8b:f9:e5:16:41:8d:
22:b4:b4:81:34:8b:d1:be:54:6f:72:5b:c7:55:c9:
d4:bc:58:34:14:b1:54:4e:44:da:9c:67:e5:59:07:
ef:91:90:8f:4c:75:44:e2:6d:eb:96:1b:18:14:8d:
44:88:4a:95:f1:38:5e:cc:ab:a6:f5:0a:5a:ed:4d:
9e:31:45:25:33:53:58:d8:be:8a:0e:62:05:ce:f9:
03:80:3b:8c:d0:da:fa:e5:36:34:e5:3c:b9:66:8d:
13:cf:a8:53:e5:e3:02:9c:e8:33:f8:11:4e:ba:8c:
9f:e4:55:aa:25:0e:52:e3:7f:90:df:38:62:85:08:
9b:e3:76:a8:6b:6c:8f:74:79:24:ef:d2:b7:74:6f:
81:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BC:96:15:53:5E:31:01:F7:3F:46:D3:98:0A:88:B8:3A:F6:52:FC
X509v3 Authority Key Identifier:
keyid:51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:fb:d6:a7:6f:b6:6e:85:6d:cc:5f:95:cd:18:41:ff:10:bf:
2b:7c:9e:5e:45:76:ff:dc:e6:b4:ec:53:c0:e0:99:98:5f:6b:
47:8b:72:a6:63:18:76:e0:58:c3:89:d1:53:ba:5c:37:a1:f6:
a4:d0:ae:47:d5:02:d8:89:e8:f7:8a:67:37:a8:58:85:88:95:
ae:27:c7:17:15:40:29:f8:a8:ab:38:c2:a2:7f:96:75:87:c6:
ea:32:67:b1:c3:23:9c:55:da:9a:ac:a0:7a:1c:5f:6a:aa:30:
e2:22:7f:73:b9:fa:ce:0e:71:06:63:11:37:79:36:b7:d2:27:
d5:dc:f5:b7:40:4b:9b:05:f4:ae:97:2a:16:51:13:a5:bc:38:
26:9c:0a:e8:0b:34:cc:65:2c:91:fc:75:5e:b9:32:57:30:39:
ea:da:f8:04:5b:5b:84:b5:1e:da:35:ac:bc:21:08:a3:3a:fc:
4e:05:4a:0b:bd:4c:eb:3f:ac:a2:8e:94:5e:d4:47:7e:e8:69:
74:b0:7d:9e:61:5b:e4:5d:01:26:03:03:28:c8:cb:04:97:3d:
10:30:7b:57:70:81:23:91:47:53:4b:c1:61:4b:55:d9:29:56:
3e:a0:f3:7f:d6:1f:40:85:17:87:71:4e:62:37:d0:67:00:5e:
8b:48:d4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:58 2025 by rpki-client