Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft
File: M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft (raw, json)
Hash identifier: UZQsHQw/6TvxbvFY8vddfVD1wG0NrxTMTvw48KcecDc=
Subject key identifier: 99:FC:31:97:76:51:86:D6:79:92:66:73:D6:CE:0D:B3:00:B8:19:3F
Authority key identifier: 33:F5:0A:8D:E9:71:F8:54:7F:5B:56:C9:7C:36:C2:87:EF:54:BD:B8
Certificate issuer: /CN=33f50a8de971f8547f5b56c97c36c287ef54bdb8
Certificate serial: 019A4E18B7F023321D7A74BE0492C1F2E1BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft
Manifest number: 1499
Signing time: Tue 04 Nov 2025 09:00:34 +0000
Manifest this update: Tue 04 Nov 2025 09:00:34 +0000
Manifest next update: Wed 05 Nov 2025 09:00:34 +0000
Files and hashes: 1: M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl (hash: 5EPnj6JlDASmVbYCqFPtsuQ1KEBReSoO6+jxTjioNBk=)
2: pMHjgJekdS1MaOx6NO05QRcLwkA.roa (hash: 0cAR/UsqHx4Uoat+wXKZE3sY02i0A2U0Zxjt7/F3FS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:b7:f0:23:32:1d:7a:74:be:04:92:c1:f2:e1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33f50a8de971f8547f5b56c97c36c287ef54bdb8
Validity
Not Before: Nov 4 09:00:34 2025 GMT
Not After : Nov 5 09:00:34 2025 GMT
Subject: CN=99fc3197765186d679926673d6ce0db300b8193f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ec:86:75:a4:3c:cd:1e:aa:bc:ff:75:7f:a7:
86:f6:ed:65:1a:37:ad:3c:87:e3:13:e5:a7:42:ff:
50:4d:05:c3:76:a8:e4:e9:ff:72:6f:5d:03:ef:07:
38:a4:ce:0e:60:d3:83:f4:55:d2:f2:52:6c:3c:7d:
f7:a9:67:b5:37:5e:e0:f0:db:a2:51:94:af:58:2b:
3a:59:d4:1e:f5:f1:28:6e:49:51:dc:48:37:0f:74:
a1:90:22:db:36:fa:53:b6:5d:79:54:dc:0c:de:1b:
65:80:01:4f:1a:d6:7a:32:3f:f8:86:3b:e0:52:3e:
8b:01:3e:c2:e3:cd:ea:59:cb:48:59:4d:bd:c2:f0:
b4:22:ff:a5:c9:14:ee:79:4b:90:a5:3f:0f:49:73:
c1:fb:7a:e3:3a:97:15:73:dd:da:dc:07:65:6d:b2:
50:e7:7b:4f:fd:a4:ed:25:89:f5:55:6f:d0:95:41:
06:54:38:f5:79:be:d9:e0:1b:ea:65:52:de:11:d9:
c8:c2:40:87:d9:9a:b3:23:47:41:1c:9f:f2:6e:2c:
e8:3d:24:73:97:ea:d5:bf:f7:64:aa:37:65:cd:cb:
69:2d:03:d7:07:66:22:d4:73:a2:5f:0e:6e:3b:a6:
c3:4e:2a:81:e1:e5:6c:8f:dc:bd:5e:d9:4a:76:6d:
d4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FC:31:97:76:51:86:D6:79:92:66:73:D6:CE:0D:B3:00:B8:19:3F
X509v3 Authority Key Identifier:
keyid:33:F5:0A:8D:E9:71:F8:54:7F:5B:56:C9:7C:36:C2:87:EF:54:BD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:0e:6d:99:8d:dd:b0:4f:a3:2b:77:91:54:17:3a:4e:fa:0a:
a0:2e:e2:62:95:00:0e:e9:be:92:fc:33:cd:1f:a3:9c:b3:03:
55:9b:b1:25:7c:d7:03:7a:de:64:b1:f8:7f:5b:dc:d5:48:6a:
9f:59:10:a1:81:5b:e8:c8:e7:9e:6d:67:b1:0e:09:14:a8:bd:
70:16:27:b5:28:3e:c5:25:e3:6d:69:e2:de:ec:6d:b1:ef:0f:
b8:f6:9c:eb:d7:dd:b2:0c:b4:83:75:b3:75:f5:d5:16:98:f7:
00:cb:ed:19:08:03:e3:15:5a:01:bc:68:87:65:b0:b2:35:62:
4d:d8:60:de:73:50:68:01:c1:54:f7:29:a8:32:34:d9:a5:9b:
94:e6:54:13:d3:38:33:76:9b:f4:4f:90:b1:8b:fc:62:3c:7f:
6d:34:7f:c3:dc:fc:c0:bd:38:2a:36:dd:d4:46:5e:ef:c6:d6:
d2:34:b9:da:cd:0d:69:68:0b:86:a3:47:db:87:0d:9b:63:8d:
51:03:5f:e3:2a:03:a1:18:f6:c3:68:e1:ba:d5:1e:78:66:3e:
91:8c:fc:28:8d:0a:52:a2:d9:9c:0d:88:fd:41:50:97:5f:25:
d1:2e:d6:d9:ea:95:3e:6c:c5:c0:db:e0:c9:4d:27:b6:4c:06:
01:36:b8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:28 2025 by rpki-client