Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
File: UeK-E5rnec09T-68zTaCgaH156A.mft (raw, json)
Hash identifier: 3228pteiH4iCav1cyFhFZuRkDb6CirJZiyQQpdDquRE=
Subject key identifier: D4:34:60:AE:AE:42:3E:A5:75:34:7F:B9:8F:96:B4:E2:69:D6:A9:52
Authority key identifier: 51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0
Certificate issuer: /CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
Certificate serial: 019A4DE1D332694FAB744BE204404DF49A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 08:00:36 +0000
Manifest this update: Tue 04 Nov 2025 08:00:36 +0000
Manifest next update: Wed 05 Nov 2025 08:00:36 +0000
Files and hashes: 1: UeK-E5rnec09T-68zTaCgaH156A.crl (hash: n4DB6b4EuaiisvWia6LwLRWguwgleKbnxwEaufx2REo=)
2: VSiusRPyIc9Tc8bThvks1NkGA7Q.roa (hash: uzDtGIiakPGkLOEGtmPHEX+erK/AAaDobyuB+l6q1NI=)
3: oEAOgGGkZaklYkgZV_R2RLLowJE.roa (hash: nmzYZ74qwgtxEwczkSmrHUbIJNO39YmkNHQC+ORU3+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:d3:32:69:4f:ab:74:4b:e2:04:40:4d:f4:9a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
Validity
Not Before: Nov 4 08:00:36 2025 GMT
Not After : Nov 5 08:00:36 2025 GMT
Subject: CN=d43460aeae423ea575347fb98f96b4e269d6a952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:96:65:2f:4d:9d:46:d1:89:10:73:92:72:a4:
51:b7:e6:59:d3:91:98:b5:85:aa:ab:35:21:2b:54:
3d:40:14:8d:de:f8:de:b1:a8:b8:e2:ba:06:17:41:
34:57:62:46:a1:95:85:c2:3b:e2:83:17:37:a4:86:
ce:f5:f1:8b:8d:4d:36:e7:76:30:6c:7f:f0:b1:2d:
42:dd:8f:72:8b:b2:d9:0e:29:e3:87:d8:87:e0:f7:
4d:57:27:08:90:fd:12:a7:7b:31:c1:6d:b6:65:1f:
d5:43:a9:02:0d:78:3d:5b:7b:54:4c:b2:de:db:5d:
1c:65:72:7a:37:b5:5f:db:7d:56:58:95:7b:fe:4d:
63:c8:46:7d:4f:da:44:30:f5:d5:46:5d:fb:14:2f:
7f:ab:25:bb:65:ff:c7:be:4f:9a:e4:85:fd:cc:65:
f3:59:5e:4f:bd:0f:97:92:36:2b:94:d5:c8:7d:1e:
33:ba:50:14:b8:de:ad:19:31:f4:e6:b6:91:89:8c:
92:79:e7:f8:79:29:a0:da:48:38:92:c8:ed:ae:ed:
a5:59:b7:66:b5:28:c0:f5:27:3b:1c:ae:b7:d4:dd:
cd:03:13:48:bc:7e:35:d8:50:f8:3e:ee:d0:f2:d0:
e7:94:56:26:e2:f4:02:42:c9:c8:4f:b5:e3:99:12:
76:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:34:60:AE:AE:42:3E:A5:75:34:7F:B9:8F:96:B4:E2:69:D6:A9:52
X509v3 Authority Key Identifier:
keyid:51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:bc:ee:1e:0d:0b:63:73:b1:95:67:eb:74:30:b5:aa:9e:94:
51:39:1f:8d:3f:e9:c4:c5:ed:17:30:e8:66:51:d3:d0:49:63:
cb:68:6c:48:8a:f1:7d:62:62:9f:83:52:a4:61:6b:7c:b8:dc:
f4:a5:2f:a8:c6:42:db:e0:1f:d6:02:9b:5c:f2:89:4e:92:01:
16:c5:36:ab:c0:b2:5e:df:fc:1e:97:d6:4a:b0:87:8f:84:5d:
47:a5:19:ea:fd:c3:83:52:5f:9d:e9:75:c1:e6:0b:23:d4:b6:
90:22:5f:11:d3:b2:3e:1a:cb:6d:fc:5f:29:63:63:a0:8b:ff:
56:86:53:9c:c6:cf:ff:36:82:59:f9:80:39:1e:00:24:d5:b1:
21:ba:d6:e6:a3:80:78:f0:b9:a1:4b:99:26:bb:ee:d3:d8:aa:
d0:ca:ef:5e:bc:79:98:f1:c7:0f:1d:31:3f:19:1a:f5:e3:9a:
e0:7d:9a:f6:9b:2b:ef:c5:07:73:e6:40:68:0b:97:37:9d:c8:
50:1b:b0:02:cf:98:cb:66:07:cd:c0:36:dc:45:55:2e:f6:e0:
72:5e:b7:50:6d:e0:64:d7:58:02:98:1d:95:3f:86:13:7f:e7:
ab:d1:93:c6:48:c8:e7:f4:b2:08:3f:fc:dc:8a:3a:bc:70:8c:
d7:af:62:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:02 2025 by rpki-client