Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft
File: UeMbSuzGWzElp7R6yQkIsKUXhIM.mft (raw, json)
Hash identifier: YYmxcf2upjd+2A9nRRp4n3oHRofzyHnGfeNbNx4mLgw=
Subject key identifier: 34:E7:66:3C:B3:E4:C1:97:06:ED:9A:26:FF:43:A6:A4:11:AF:B3:87
Authority key identifier: 51:E3:1B:4A:EC:C6:5B:31:25:A7:B4:7A:C9:09:08:B0:A5:17:84:83
Certificate issuer: /CN=51e31b4aecc65b3125a7b47ac90908b0a5178483
Certificate serial: 019A4F9933684EE4D5E40608B1B64890CDAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeMbSuzGWzElp7R6yQkIsKUXhIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft
Manifest number: 0F77
Signing time: Tue 04 Nov 2025 16:00:31 +0000
Manifest this update: Tue 04 Nov 2025 16:00:31 +0000
Manifest next update: Wed 05 Nov 2025 16:00:31 +0000
Files and hashes: 1: 1mN4TTVsQBMWz0jdNdzF9ia-Nrk.roa (hash: j77lZH/1fvCNPjqeRf7BLA0vb4Pw3UvnzVBQAcJctxA=)
2: UeMbSuzGWzElp7R6yQkIsKUXhIM.crl (hash: H73hgBbQIDzorWbEioxo7svYRRCLEnxt9pkaHT14ByQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeMbSuzGWzElp7R6yQkIsKUXhIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:33:68:4e:e4:d5:e4:06:08:b1:b6:48:90:cd:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e31b4aecc65b3125a7b47ac90908b0a5178483
Validity
Not Before: Nov 4 16:00:31 2025 GMT
Not After : Nov 5 16:00:31 2025 GMT
Subject: CN=34e7663cb3e4c19706ed9a26ff43a6a411afb387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:31:d8:48:58:00:6a:99:2a:34:53:bf:f7:8c:
7f:7d:93:70:94:8b:2f:70:0f:9e:27:f2:02:e6:c9:
e2:51:9f:2d:39:3b:0a:77:32:ed:b9:1a:5d:e3:04:
0d:3d:32:6c:b7:03:7a:e0:89:65:7d:da:51:35:65:
73:e6:23:6e:10:98:2c:cf:75:97:60:d3:84:a2:6b:
2d:3c:b3:e9:1d:5b:99:83:2c:d6:50:ea:02:be:de:
fc:de:2f:73:d4:78:02:a8:03:ed:1c:bc:45:04:ad:
b2:3a:d9:2f:08:63:8c:40:a9:18:37:72:b3:f0:83:
c0:f6:7a:2a:3f:77:b6:b1:15:99:18:f8:84:e4:31:
64:c9:ef:a7:b2:71:cc:0c:82:32:a1:ff:1b:2f:13:
07:9d:b8:0c:ee:60:a4:c6:bf:16:a7:67:4a:20:70:
a3:83:29:8c:6b:b2:38:4c:e5:8c:cc:a7:f7:d2:b5:
fc:a9:bd:ed:99:f2:72:d5:60:0a:0c:23:22:b7:b5:
39:78:14:db:98:b6:9c:48:92:35:b0:c5:6b:b6:31:
23:d4:72:cc:93:27:ce:d8:0a:b9:2e:65:85:28:18:
57:ab:23:ad:a7:68:b6:8f:39:d9:30:05:af:ee:2f:
3a:a4:b2:bc:48:7f:5a:9c:34:45:b7:5b:e2:b6:74:
ea:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E7:66:3C:B3:E4:C1:97:06:ED:9A:26:FF:43:A6:A4:11:AF:B3:87
X509v3 Authority Key Identifier:
keyid:51:E3:1B:4A:EC:C6:5B:31:25:A7:B4:7A:C9:09:08:B0:A5:17:84:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeMbSuzGWzElp7R6yQkIsKUXhIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f3:17:72:44:f5:84:07:ba:f0:4c:40:e3:cc:35:0f:1a:3f:
e5:ae:e2:91:79:00:5b:e0:fd:89:7b:2a:98:57:65:c2:71:a8:
f9:9a:6a:0c:0a:c5:26:9d:8a:d9:a1:3d:fe:2d:0f:48:41:65:
58:c6:2e:f5:77:7c:f9:df:d5:83:95:89:0a:fb:81:23:11:88:
43:d2:74:5d:9f:24:c9:02:08:88:21:56:cf:79:d8:8c:a0:60:
db:99:5a:77:a2:5c:92:73:55:18:77:29:f5:1f:0d:57:6a:79:
31:f7:10:76:c3:68:50:2b:76:86:bb:a6:79:04:48:a7:2c:6a:
fe:4f:87:75:c5:0b:70:eb:33:d1:2f:b7:67:46:8c:e6:66:61:
7b:6a:e9:35:11:86:a0:2a:30:f0:18:ed:c9:7f:b1:14:76:d4:
6b:dc:76:95:89:ae:1f:0d:99:3e:db:40:d4:82:c5:35:3c:7c:
9b:b9:20:6e:4a:1b:6b:a9:06:b1:7b:9d:12:d6:e8:9b:0d:2e:
73:a3:f7:11:31:54:3c:c6:4e:f7:1c:52:7a:5e:68:33:6f:0e:
37:ca:dd:e5:c6:e7:f8:61:e2:9e:eb:30:28:bf:3c:30:98:98:
a2:7a:04:92:e2:4a:b0:c0:5e:47:fe:e4:f9:9d:2e:a8:5e:44:
52:26:b3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:59 2025 by rpki-client