Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
File: Uez5urycprrpCFzikvscLMGNNE8.mft (raw, json)
Hash identifier: 03+pExIvC5AYVvHYvvrX55/VOGC2o71iyMXY4TZdt5E=
Subject key identifier: 13:3F:95:61:0A:DC:1B:54:F9:C2:12:13:E4:4D:47:A3:68:D2:29:8D
Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
Certificate issuer: /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Certificate serial: 019A4E8620CADAAA7610C62E9EE73D9EFCE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
Manifest number: 171A
Signing time: Tue 04 Nov 2025 11:00:04 +0000
Manifest this update: Tue 04 Nov 2025 11:00:04 +0000
Manifest next update: Wed 05 Nov 2025 11:00:04 +0000
Files and hashes: 1: Uez5urycprrpCFzikvscLMGNNE8.crl (hash: nwV3apITwEcZOtp9cI4gxBksjJnH48bIOWofbUgzZGw=)
2: l-hCkKbGiTfZLiw01nyzAqx9RrE.roa (hash: eNnspbPwHy2/o3P/VfKyhFa9HsXh1TKY3mCuqf0R7X4=)
3: xxWFbF3tgwbzUuCNrDoHcp9Qoi0.roa (hash: nF/SPLRIzHvrKRFZBuGbHBJ7AWT0/rnH1yU0BqremkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:20:ca:da:aa:76:10:c6:2e:9e:e7:3d:9e:fc:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Validity
Not Before: Nov 4 11:00:04 2025 GMT
Not After : Nov 5 11:00:04 2025 GMT
Subject: CN=133f95610adc1b54f9c21213e44d47a368d2298d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:90:59:2f:9c:6e:8a:a7:5f:2d:72:6b:7a:cd:
b1:04:4d:a8:33:82:d8:8a:2a:d5:5b:f9:ba:75:c2:
bd:72:55:94:02:de:cd:bb:e9:e4:33:18:83:25:82:
db:1b:0f:b8:77:89:5a:82:ab:7a:c2:c5:af:d8:ee:
11:86:60:23:b5:b8:1e:22:cc:16:50:bb:26:3d:68:
b1:14:2f:9b:6f:0a:69:fa:69:f2:73:e2:4b:8b:6f:
2e:e9:2a:a1:2a:f3:3c:ae:61:01:dc:2f:a3:b5:30:
9a:16:36:7d:d8:55:39:17:d8:a0:fe:06:42:7a:06:
61:8c:19:d0:b6:2c:7a:89:94:f9:3b:21:0f:4c:b7:
4d:3c:40:26:86:27:0e:53:cd:57:c6:1b:e0:fa:d0:
d7:72:74:99:c7:4e:21:4f:5d:08:b4:2f:d7:a3:03:
9c:0e:7f:8d:10:69:09:1e:e3:bc:1d:34:8a:da:d8:
d1:d0:a2:33:a6:62:62:dd:4b:7f:03:c8:4f:b4:fe:
6e:25:3a:df:ee:1a:c5:91:01:bd:42:97:3a:06:e9:
f3:bc:34:82:b0:24:a1:09:7c:ae:2f:14:69:43:a8:
09:7f:d5:f3:e9:62:8e:58:1d:59:c5:81:8a:0c:75:
40:0e:bb:06:ab:08:e3:9c:5b:ab:01:66:c1:0c:50:
02:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3F:95:61:0A:DC:1B:54:F9:C2:12:13:E4:4D:47:A3:68:D2:29:8D
X509v3 Authority Key Identifier:
keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f2:43:7d:74:c2:6f:e1:f3:5f:64:27:70:93:d5:26:86:39:
bc:61:dd:33:6f:e1:60:38:5c:9b:4f:ae:59:a1:58:21:e6:12:
00:59:77:bf:7a:0c:1e:b4:36:ca:91:90:78:c9:5b:3f:ed:8d:
32:b7:36:b2:7a:b8:47:28:77:e3:ef:89:68:c7:91:d6:0c:fd:
76:05:fb:a6:e4:63:b2:33:4c:fa:dc:c4:95:73:90:39:77:68:
fc:be:d9:73:cb:ce:ae:49:5f:53:6e:b1:dc:cc:67:59:89:97:
49:f8:db:25:e8:bf:e9:48:e4:e4:bc:53:88:b0:8c:2a:8d:61:
1b:09:9d:8c:2c:b5:a5:f9:0d:ce:d8:bd:05:32:10:a9:63:90:
99:b2:31:f2:44:a0:05:f8:09:b1:92:f0:c0:7e:57:be:84:71:
95:52:da:e1:50:d4:ae:d0:98:bd:28:43:12:75:9f:46:83:89:
85:88:9e:bb:3f:35:6d:0d:2c:32:c6:dd:7f:d0:78:10:ab:3a:
62:36:b6:90:0c:1d:75:81:70:4b:05:98:50:06:b4:96:df:3e:
e5:cf:61:ea:6c:c8:6c:27:85:81:74:87:96:e3:af:de:c8:e4:
b4:e7:8c:90:cd:0d:47:d3:ad:a7:1f:54:64:86:f3:9e:2c:f6:
6f:0c:b3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:38 2025 by rpki-client