Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/63fe9e-60a0-4f80-8c01-1673749bceec/1/USt7qR3DDrtBPNBVvUMpLi0UAY8.mft
File: USt7qR3DDrtBPNBVvUMpLi0UAY8.mft (raw, json)
Hash identifier: GbllIKYcx7qFlByLyzkZ0GebuTt3Ee4qwQK8v3DommI=
Subject key identifier: 51:6D:29:4C:ED:75:5B:68:EC:5E:23:C1:EA:3F:D2:AD:81:2E:5D:EE
Authority key identifier: 51:2B:7B:A9:1D:C3:0E:BB:41:3C:D0:55:BD:43:29:2E:2D:14:01:8F
Certificate issuer: /CN=512b7ba91dc30ebb413cd055bd43292e2d14018f
Certificate serial: 019A5119C1657D32A278634E5E81A9774FF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/USt7qR3DDrtBPNBVvUMpLi0UAY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/63fe9e-60a0-4f80-8c01-1673749bceec/1/USt7qR3DDrtBPNBVvUMpLi0UAY8.mft
Manifest number: 0691
Signing time: Tue 04 Nov 2025 23:00:33 +0000
Manifest this update: Tue 04 Nov 2025 23:00:33 +0000
Manifest next update: Wed 05 Nov 2025 23:00:33 +0000
Files and hashes: 1: USt7qR3DDrtBPNBVvUMpLi0UAY8.crl (hash: PntaFohI8qdpKwC61CsUFO5DRqfyLcuKissYI+ZGM1Q=)
2: vloVVT9ufVGR6rj5SefMS3qmK1c.roa (hash: /V+TKP3WFA5NtQkzEdfMB+4hHPZcd6oAqeonzaeqn0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/63fe9e-60a0-4f80-8c01-1673749bceec/1/USt7qR3DDrtBPNBVvUMpLi0UAY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/63fe9e-60a0-4f80-8c01-1673749bceec/1/USt7qR3DDrtBPNBVvUMpLi0UAY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/USt7qR3DDrtBPNBVvUMpLi0UAY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:c1:65:7d:32:a2:78:63:4e:5e:81:a9:77:4f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=512b7ba91dc30ebb413cd055bd43292e2d14018f
Validity
Not Before: Nov 4 23:00:33 2025 GMT
Not After : Nov 5 23:00:33 2025 GMT
Subject: CN=516d294ced755b68ec5e23c1ea3fd2ad812e5dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:a8:08:cd:6a:5a:57:46:47:25:71:5e:a2:
7b:ad:1d:d7:20:3e:07:74:27:0b:3f:88:8c:cd:23:
7b:af:0d:a1:5c:65:e9:8a:bb:44:36:91:b3:ae:34:
75:d2:55:de:7b:00:3d:64:4e:dd:a0:fc:9f:c5:f5:
d4:aa:75:cd:e0:24:77:25:90:a0:5c:8d:27:68:a1:
a3:35:52:da:88:08:e6:b3:0e:78:97:03:d7:b7:8c:
c1:1d:ce:56:12:3b:0e:47:3f:e6:b9:52:67:3d:2d:
5a:35:d2:af:7c:aa:ee:3d:4f:85:90:16:b6:17:88:
cc:22:cc:5b:16:55:f7:65:9b:76:d5:94:d4:57:37:
4e:8a:5b:92:19:cc:88:54:70:11:ec:5f:c8:94:02:
6c:d6:1e:1e:ad:3f:24:3e:49:79:18:49:01:8d:16:
ed:e8:aa:08:17:0d:ce:7a:54:e5:a4:7d:d1:97:b6:
e3:e2:b2:27:b5:b6:a4:4c:dd:9f:3e:24:bf:4a:76:
1b:5d:70:35:7c:92:fa:09:9a:3d:6c:d2:52:93:38:
bb:8a:91:3e:73:55:5d:02:bf:10:90:c4:52:34:6a:
20:5a:86:32:97:c8:b3:a9:91:59:50:11:6e:9d:18:
7b:61:90:ae:bc:f9:9e:1f:87:d1:3c:7e:48:a0:0f:
a6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6D:29:4C:ED:75:5B:68:EC:5E:23:C1:EA:3F:D2:AD:81:2E:5D:EE
X509v3 Authority Key Identifier:
keyid:51:2B:7B:A9:1D:C3:0E:BB:41:3C:D0:55:BD:43:29:2E:2D:14:01:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USt7qR3DDrtBPNBVvUMpLi0UAY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/63fe9e-60a0-4f80-8c01-1673749bceec/1/USt7qR3DDrtBPNBVvUMpLi0UAY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/63fe9e-60a0-4f80-8c01-1673749bceec/1/USt7qR3DDrtBPNBVvUMpLi0UAY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e9:2c:ef:fa:7f:eb:92:ec:44:54:31:af:ae:a1:21:a4:70:
d6:f9:52:34:db:5b:71:23:71:e7:66:3a:26:06:2e:1d:af:c1:
13:3c:0e:1c:9a:84:bc:3b:ce:8f:64:0e:03:06:f0:c8:1a:53:
a6:d9:80:7d:1a:ef:4e:5a:13:b5:89:5e:73:61:b9:c2:88:87:
7b:28:02:1b:bc:61:5c:8e:21:8a:55:00:fa:be:83:09:c3:51:
a5:58:57:f6:6e:8f:35:17:69:7f:9b:f4:cb:c7:2a:d3:d7:9e:
2b:84:51:f4:f0:e8:8d:95:1d:88:c3:b9:94:37:35:d0:af:f0:
10:87:52:2b:bb:c8:a9:b6:5e:ce:9c:54:c5:ef:e8:e3:4c:50:
5c:48:01:b5:88:6d:2b:eb:29:45:4d:34:78:c6:3d:86:ec:5d:
4b:af:60:6f:a5:cc:a1:e5:bf:41:d4:59:df:4b:0e:c6:97:53:
36:1b:1f:1a:eb:3d:c6:19:bf:53:8f:32:42:45:27:c7:66:91:
1d:61:25:74:a2:9e:4f:91:78:06:22:ec:54:f6:bd:ee:03:74:
55:42:5f:70:b0:b5:8e:4d:ef:de:78:d2:a3:76:8e:41:57:7b:
33:0a:80:73:b0:fc:84:46:82:6b:4a:be:90:55:f9:06:5c:6d:
b5:ec:80:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:18 2025 by rpki-client