Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
File: Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft (raw, json)
Hash identifier: df/NrTdXfGSRYtm/3Q8RUK1d0230t1XGqj57tvn7d78=
Subject key identifier: BB:DB:DA:A5:92:4C:EF:D0:A7:DA:05:21:C2:10:2F:76:E5:3D:80:9C
Authority key identifier: 51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
Certificate issuer: /CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Certificate serial: 019A4F627A92988AE437D3915B9E8EE534DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
Manifest number: 06DE
Signing time: Tue 04 Nov 2025 15:00:45 +0000
Manifest this update: Tue 04 Nov 2025 15:00:45 +0000
Manifest next update: Wed 05 Nov 2025 15:00:45 +0000
Files and hashes: 1: Hi9hJLSsqdfwwjDafJDvlExJJoI.roa (hash: PID2YEd+ZOdlQLJzFIlElIOxp8cs3tI73VYlO3AzPb4=)
2: Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl (hash: 4nXPuoG9tCQWRDEsEgTyXSAR9SKOrlPbGTvO22kzBIw=)
3: Yy7EyL4jOYhS2ny07A-uohis4hw.roa (hash: 939gAFuZ8T1J06oXgjy3uy3jHGyJvoFV29uIXoQOhss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:7a:92:98:8a:e4:37:d3:91:5b:9e:8e:e5:34:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Validity
Not Before: Nov 4 15:00:45 2025 GMT
Not After : Nov 5 15:00:45 2025 GMT
Subject: CN=bbdbdaa5924cefd0a7da0521c2102f76e53d809c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d2:7e:80:2e:a0:96:54:02:87:41:b1:c2:cc:
27:c7:bf:73:f9:68:8c:62:ae:75:8d:15:2c:3b:c1:
a9:23:c8:0b:f9:95:73:76:c3:1a:24:85:35:cc:24:
1f:ca:0f:68:fd:37:e3:4c:1c:25:3f:e5:9d:6d:da:
ee:09:72:ff:56:61:fd:c8:fb:02:70:68:91:84:d6:
34:58:1f:65:29:aa:2b:d7:6e:51:92:a4:d0:19:5c:
0c:64:96:fb:dc:44:a6:d5:4d:a6:e6:c4:9b:25:22:
a3:ad:a3:ec:92:bd:a8:f2:b7:46:40:9c:56:d6:87:
b0:ae:07:3b:32:55:fa:19:21:6f:24:57:ea:48:c9:
80:51:f5:18:13:5e:bc:a2:52:9b:1b:24:82:26:54:
49:68:17:59:9b:c5:9f:bf:94:49:d5:40:41:01:3f:
de:09:75:7d:f7:38:4b:3c:ad:4b:6d:4d:b6:4b:8c:
be:b1:36:92:85:85:f5:75:52:7e:2d:66:1b:77:e2:
25:0e:f7:d6:ce:81:5f:2e:c2:53:1f:0b:c0:6d:ac:
a6:33:bc:0a:1c:80:59:dd:a1:cd:11:ac:f8:78:5e:
e0:d0:0a:01:d3:bb:5e:8c:6a:91:44:6c:c7:bc:71:
ff:9e:97:6d:16:fd:cf:98:58:a4:aa:19:97:5a:e6:
0b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DB:DA:A5:92:4C:EF:D0:A7:DA:05:21:C2:10:2F:76:E5:3D:80:9C
X509v3 Authority Key Identifier:
keyid:51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:97:02:e7:78:57:37:71:02:58:58:41:2b:a4:69:12:56:ab:
0a:e3:11:64:d1:1b:9a:22:ec:ed:b5:a9:20:11:b7:3a:15:d2:
d0:fe:89:56:6a:62:d7:fd:bc:d5:16:19:80:eb:46:3c:28:33:
0e:5e:4e:52:2d:59:00:c5:09:aa:8a:11:28:09:5d:b8:73:b7:
e5:7e:3e:81:98:c8:08:57:7c:8b:e7:6a:d6:65:96:ff:ab:39:
77:b3:54:84:30:17:01:1f:c9:0f:d9:ce:6d:51:48:81:ce:a1:
83:43:c9:b0:69:3f:0d:98:5e:db:83:26:a9:ed:f6:16:9c:f3:
30:38:8d:09:30:d1:3e:aa:09:aa:d9:94:ec:fa:24:c4:ba:c1:
a2:6c:6c:aa:c4:0a:b8:84:a1:43:54:52:4d:a5:23:89:d2:59:
99:0a:25:f1:e5:f0:03:5d:88:5d:8f:a8:7f:a5:d8:59:51:42:
57:d9:9c:8c:47:ab:f6:88:7f:d6:03:6a:e9:fc:b0:ca:dc:36:
b3:6a:6e:b6:36:0a:d6:5e:ec:f5:22:71:71:84:db:01:3a:72:
2c:0e:c5:82:19:9a:ad:32:a2:f7:04:25:07:4d:a8:5c:4e:8f:
cf:05:ad:e7:e1:fe:8a:fa:2a:3b:17:5c:53:5f:38:a6:a4:8f:
6b:2a:f0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:40 2025 by rpki-client