Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft
File: Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft (raw, json)
Hash identifier: aUp9h9psXXbQDBoT0UgVfCc+fGVqsc4f7GiIjkUf+IM=
Subject key identifier: 41:A6:2F:22:0B:BB:26:BF:64:5A:34:E6:58:A7:31:91:04:CD:01:B7
Authority key identifier: 51:EE:1A:67:72:5E:B4:A7:64:A5:87:BC:37:07:9D:EB:BE:81:FB:64
Certificate issuer: /CN=51ee1a67725eb4a764a587bc37079debbe81fb64
Certificate serial: 019A4FD0497BB64063BC6D58D2DE5A1B6AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft
Manifest number: 1610
Signing time: Tue 04 Nov 2025 17:00:41 +0000
Manifest this update: Tue 04 Nov 2025 17:00:41 +0000
Manifest next update: Wed 05 Nov 2025 17:00:41 +0000
Files and hashes: 1: 4ve1bR44fXpzC4OLaMdoWgSf4Wg.roa (hash: ORYpvPkbfZNFI/vr3Fjdbyn/Yoia3e4Tx4qioep5WQs=)
2: Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl (hash: Kf1p6tUYXXhiZir1w/67qisbEI1mo55Chdmuehpt+y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:49:7b:b6:40:63:bc:6d:58:d2:de:5a:1b:6a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ee1a67725eb4a764a587bc37079debbe81fb64
Validity
Not Before: Nov 4 17:00:41 2025 GMT
Not After : Nov 5 17:00:41 2025 GMT
Subject: CN=41a62f220bbb26bf645a34e658a7319104cd01b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9c:3e:9e:62:26:ab:fd:13:07:60:bf:7c:dc:
d3:67:bd:cd:95:4c:55:95:06:e7:5c:4c:30:48:97:
79:81:5d:50:cd:54:67:64:4c:5c:3b:42:28:a9:1a:
a5:71:f9:5b:57:a3:13:66:8a:ec:7b:d9:37:1a:43:
52:75:0e:cd:6f:5f:42:09:e8:2d:1f:33:c6:aa:77:
52:04:d3:97:6c:cc:7a:67:b2:2f:32:ac:18:89:3b:
54:d1:1c:b1:59:d1:da:67:15:40:49:d1:c6:d4:38:
0e:28:a7:81:d9:56:01:a6:af:05:a5:3f:ad:4e:e7:
84:d5:4c:20:8e:7d:71:4a:59:26:30:b1:7a:e1:49:
82:bc:21:7c:1b:b2:89:cb:ec:7d:e9:96:34:29:6e:
db:a3:1a:e8:4e:59:29:fe:34:3e:55:38:e3:9e:f5:
48:0c:bb:f5:50:a7:57:ae:02:9f:7e:71:fc:48:8c:
0a:1f:1c:70:8e:67:77:2e:59:9e:f9:08:93:3b:43:
b7:b7:ba:03:55:d7:68:ef:37:e5:02:06:51:a8:8f:
c8:41:d6:a5:df:a6:07:33:9c:78:51:ea:dc:ad:a3:
41:51:e9:d7:09:e8:a0:ef:85:07:a8:05:89:ee:13:
63:f1:3a:8d:ba:17:39:91:21:3c:4f:b5:1f:04:15:
62:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A6:2F:22:0B:BB:26:BF:64:5A:34:E6:58:A7:31:91:04:CD:01:B7
X509v3 Authority Key Identifier:
keyid:51:EE:1A:67:72:5E:B4:A7:64:A5:87:BC:37:07:9D:EB:BE:81:FB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:48:c7:ae:ad:00:07:9b:d4:0b:24:39:ae:24:cc:6c:bd:e0:
4b:52:d9:61:63:1c:57:07:dc:54:0d:25:0e:b6:82:65:9d:20:
6c:2a:0c:b6:de:8e:29:78:f7:ba:2e:8e:25:e2:ff:32:c1:f8:
26:6c:b9:1c:8e:11:ca:6e:a6:f4:43:08:4f:3e:9d:52:1b:13:
b4:a3:7a:71:b9:c8:d9:8d:86:ba:9e:30:9d:39:f5:c6:64:4c:
50:89:2a:d2:77:08:9b:0a:c1:f0:1f:6f:bc:86:fb:7b:ff:37:
b1:99:10:58:7e:d0:bf:f0:6d:32:0e:c5:68:30:7a:88:3a:6f:
f6:78:b5:4f:8f:9f:59:53:7d:26:75:2c:a3:3e:a5:9c:d0:54:
69:17:4d:7e:76:ea:be:c1:ca:e4:1b:5d:20:e8:88:6c:f3:90:
bd:8e:f9:c1:df:ef:3f:7f:7e:5a:9d:9f:3b:82:ec:92:13:cb:
23:45:56:12:af:99:d6:88:b9:91:9f:85:c5:70:58:2e:91:49:
3b:06:5a:7c:d1:ce:2a:0f:9c:f6:72:b4:ee:32:06:f4:e6:a0:
cf:c0:e6:a9:e4:9a:11:dd:bb:0e:98:55:22:9b:f4:9f:68:7e:
b1:68:be:31:62:89:d7:d4:85:15:5c:b9:1e:9d:e0:d3:82:a5:
a0:89:58:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:59:34 2025 by rpki-client