
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft
File: UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft (raw, json)
Hash identifier: 63+tS9YH7fqnJNVbyLudeXM6EqnJiHNVATekQD70Fbo=
Subject key identifier: 2C:83:E2:6C:20:96:A6:51:29:F3:C8:C9:F5:44:78:A1:89:FB:7A:E1
Authority key identifier: 51:E5:91:E5:49:03:D2:F9:EA:84:0A:14:69:55:BA:34:59:E3:3E:A1
Certificate issuer: /CN=51e591e54903d2f9ea840a146955ba3459e33ea1
Certificate serial: 01988EEC1A3505AC1EF133B3D0BD4334AE2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeWR5UkD0vnqhAoUaVW6NFnjPqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft
Manifest number: 12B7
Signing time: Sat 09 Aug 2025 13:01:34 +0000
Manifest this update: Sat 09 Aug 2025 13:01:34 +0000
Manifest next update: Sun 10 Aug 2025 13:01:34 +0000
Files and hashes: 1: UeWR5UkD0vnqhAoUaVW6NFnjPqE.crl (hash: +ldOFouOL8oKRGWkbcvFEzij7cU6lZNiot9IzFu818o=)
2: mh18CeMUKX0D009-9mGv8SAvgKs.roa (hash: zVhE4BkupXg5srZAaYXqVFIMgkPQ0zgGIp7W/596OI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeWR5UkD0vnqhAoUaVW6NFnjPqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:1a:35:05:ac:1e:f1:33:b3:d0:bd:43:34:ae:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e591e54903d2f9ea840a146955ba3459e33ea1
Validity
Not Before: Aug 9 13:01:34 2025 GMT
Not After : Aug 10 13:01:34 2025 GMT
Subject: CN=2c83e26c2096a65129f3c8c9f54478a189fb7ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a2:f0:3f:13:31:33:cc:55:49:a4:38:de:df:
86:37:aa:85:03:da:63:e1:08:bc:29:65:ba:d0:9f:
9b:82:68:0d:39:8c:70:a0:4b:3c:15:df:f1:b5:89:
45:97:be:53:56:d2:12:e0:19:f0:7f:41:74:16:50:
ef:0c:83:78:65:a8:a1:15:9a:6d:62:52:8a:4b:c2:
81:b1:ab:c5:37:03:27:3b:61:83:77:91:77:9b:c0:
2c:61:fe:8a:ac:37:24:23:33:3b:df:43:f2:7c:ed:
c6:61:8f:17:2c:d5:73:0b:ab:b6:54:e9:09:77:07:
f1:7c:33:f7:5b:f7:5d:88:26:d2:3c:8e:ba:8f:18:
67:84:31:65:09:f7:e5:49:16:a5:5e:61:5f:49:5a:
39:dc:15:02:ff:84:5d:e5:b3:e6:5c:ec:a6:74:5f:
5d:c0:0f:32:60:68:75:a0:9a:2c:3f:5f:43:79:88:
05:b3:18:d1:31:34:73:af:eb:5c:5b:94:cf:37:30:
0d:31:de:e3:fd:4b:48:ad:e7:5a:38:25:58:eb:4f:
25:0c:66:da:de:06:33:49:74:7a:a5:f6:ad:8e:d9:
c5:d0:f5:41:83:bf:a4:e7:01:9c:3b:35:ca:47:c8:
75:f1:85:7a:bb:04:64:e8:2d:e0:04:7b:b5:6d:05:
cb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:83:E2:6C:20:96:A6:51:29:F3:C8:C9:F5:44:78:A1:89:FB:7A:E1
X509v3 Authority Key Identifier:
keyid:51:E5:91:E5:49:03:D2:F9:EA:84:0A:14:69:55:BA:34:59:E3:3E:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeWR5UkD0vnqhAoUaVW6NFnjPqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:70:d3:68:58:b9:2f:22:25:5f:50:f2:9d:c6:a3:13:63:47:
d2:89:44:3c:6e:57:94:ed:c5:12:3f:ab:ab:1a:fd:0e:c1:bc:
6c:21:ed:2d:ef:31:4e:0c:08:36:3a:5f:fc:1a:90:15:b5:42:
3b:e1:e3:da:db:b0:27:0c:95:bb:cc:fb:fb:5e:8d:14:4e:fc:
d7:1a:7c:c2:c1:b3:c9:b3:e4:29:31:7d:15:55:02:e2:7d:f2:
0f:80:4e:76:d8:22:1f:8e:d0:ea:be:44:cd:e0:e3:c4:74:59:
03:06:2d:e0:35:9c:54:92:c0:fa:be:2d:4b:93:58:be:70:92:
b2:ed:99:e0:85:56:19:92:1e:47:3d:93:2c:92:15:65:64:2c:
27:3a:74:b2:4f:22:1b:ce:98:d3:fd:1c:ca:51:0e:83:ae:84:
3e:b4:bc:bd:27:96:f4:ef:ab:8e:5e:32:50:32:66:10:53:fe:
0c:51:9e:38:ff:6e:e9:0a:03:96:6a:4b:36:65:6c:71:7e:ed:
09:2c:d1:f3:ed:30:60:6b:eb:09:93:eb:ea:81:42:c0:c1:be:
e5:12:1b:11:b2:0a:d5:04:f3:d6:27:f6:3a:0b:d2:6e:f1:dc:
aa:da:93:06:b5:76:3d:62:4a:f6:8f:07:e3:e7:68:4c:be:37:
eb:f1:96:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:37:05 2025 by rpki-client