Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
File: UEUj-IEevlqjWYURpI87rwABqOg.mft (raw, json)
Hash identifier: ZEE1xJSN11gx4RKDO1zZsi280UaeIAw9B81A2uBrMwU=
Subject key identifier: 5D:C1:79:A2:7A:0D:49:9F:0C:30:8F:3C:6B:6D:F4:41:E3:EB:2B:BA
Authority key identifier: 50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8
Certificate issuer: /CN=504523f8811ebe5aa3598511a48f3baf0001a8e8
Certificate serial: 019A50E2AFCAA2FB1B5F0A6A0AA57E7D1152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
Manifest number: 11AD
Signing time: Tue 04 Nov 2025 22:00:24 +0000
Manifest this update: Tue 04 Nov 2025 22:00:24 +0000
Manifest next update: Wed 05 Nov 2025 22:00:24 +0000
Files and hashes: 1: UEUj-IEevlqjWYURpI87rwABqOg.crl (hash: gBoPs1lW7IsuKUhcs+KEkoo9yudP6KTUhxcfnBPuaa0=)
2: ZZhPPwqLkt0i32K3myspkarpm7w.roa (hash: I/Su6LLFQ+Dm0Pej9IN4WakV0FZtHq7XZa94FgMwfR8=)
3: _U1q7kl-Gvc0JP4VZVgWjqcMCOs.roa (hash: 3X8IGbj3QMA8V3ptFiyp/tKTSPuKRQ3qYJfTsAQKmxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:af:ca:a2:fb:1b:5f:0a:6a:0a:a5:7e:7d:11:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=504523f8811ebe5aa3598511a48f3baf0001a8e8
Validity
Not Before: Nov 4 22:00:24 2025 GMT
Not After : Nov 5 22:00:24 2025 GMT
Subject: CN=5dc179a27a0d499f0c308f3c6b6df441e3eb2bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:87:9a:b8:ea:50:c0:36:12:24:e4:dc:15:47:
f7:8b:ac:b7:04:cb:88:9c:d0:00:15:99:dd:04:60:
13:a5:f8:02:d8:16:f8:bf:7b:d7:f9:77:11:13:01:
66:b1:5e:0d:7f:11:2a:c4:cf:5c:de:b8:53:9c:79:
37:92:12:1d:2d:ce:8d:d9:91:7f:17:c9:87:25:07:
9d:c8:70:e4:ee:e6:f6:d4:6a:4c:97:27:9c:fb:ee:
b9:9e:91:fc:fd:76:b6:53:d5:32:3a:59:c9:11:38:
96:18:79:b0:4e:ba:1d:ca:4a:8d:5b:15:e1:6d:a9:
75:fe:71:34:cf:46:79:7a:52:71:69:38:1a:ef:8c:
f4:3c:6e:c2:83:25:7a:06:b7:61:a1:d7:43:36:93:
a9:2a:14:08:d3:92:73:7e:51:2c:8e:8a:ae:e1:58:
a7:f5:1e:b4:8f:67:29:6d:f4:eb:46:1a:4e:a4:5d:
c6:99:fa:1f:0c:c2:8a:87:4b:a3:ea:20:cd:a2:27:
db:54:64:10:60:2a:ca:f6:a2:0a:e5:d7:43:b0:41:
33:38:5b:a5:ab:e3:45:7d:5c:ee:08:71:9b:cd:5b:
e7:aa:17:44:9b:ca:16:08:83:a4:18:b8:f5:ef:fa:
cb:d8:b3:71:5c:c9:8c:88:d0:ac:47:eb:46:11:0b:
2d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C1:79:A2:7A:0D:49:9F:0C:30:8F:3C:6B:6D:F4:41:E3:EB:2B:BA
X509v3 Authority Key Identifier:
keyid:50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:49:4a:c7:60:f0:e7:56:c2:c6:71:c6:52:b1:be:38:a6:e5:
76:13:80:8a:5d:74:a9:97:39:a3:e0:cc:de:bc:a9:6e:13:ba:
cb:18:2f:81:df:38:9e:3f:98:10:b3:6a:2a:a0:fb:8a:8f:6f:
64:eb:73:6e:89:ba:6e:ee:3e:48:8a:3f:65:4e:67:27:f8:8e:
ec:a4:ef:66:7a:b8:05:b3:5f:f4:2d:83:96:7e:17:23:7c:db:
72:54:1f:93:25:a1:3f:05:96:32:5f:80:2d:cf:a1:fb:bc:bc:
9a:2f:e9:35:85:43:80:f7:6d:8a:4c:4d:79:f3:50:9e:4c:0c:
6d:80:6a:83:2a:13:1e:28:6a:68:fb:21:01:72:26:58:c1:7c:
a6:c1:c0:bd:05:32:4d:1f:e6:f9:f7:f0:ca:b5:84:71:0d:4f:
23:96:ab:46:e7:34:57:ce:2a:84:25:42:45:44:57:6c:62:4f:
c4:a1:ee:be:6c:0e:b4:b1:ce:52:53:a3:cb:d6:06:18:fb:bf:
c6:ee:30:41:ea:e3:d3:25:03:88:5d:70:2c:2f:88:66:d2:fb:
f7:6b:4b:1d:dc:92:d3:c7:f8:86:88:a2:91:2a:d6:22:6a:9f:
f2:70:f3:9b:56:b7:b7:1d:cc:ce:58:2b:46:54:0f:25:a6:78:
0a:47:cc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:37:08 2025 by rpki-client