Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.mft
File: UaDZglED2dpHYe-pGmDqLKdY0AM.mft (raw, json)
Hash identifier: 3NneP5AlA2qXNB0/EM6mgF7xC97qLDzXp9LevqFCCq0=
Subject key identifier: 00:39:D3:E9:97:FD:E9:BF:6A:54:2A:39:3D:8D:10:98:EE:F1:C2:8C
Authority key identifier: 51:A0:D9:82:51:03:D9:DA:47:61:EF:A9:1A:60:EA:2C:A7:58:D0:03
Certificate issuer: /CN=51a0d9825103d9da4761efa91a60ea2ca758d003
Certificate serial: 019A4F98D80EB24F7800FD4E9E32E58802C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UaDZglED2dpHYe-pGmDqLKdY0AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 16:00:08 +0000
Manifest this update: Tue 04 Nov 2025 16:00:08 +0000
Manifest next update: Wed 05 Nov 2025 16:00:08 +0000
Files and hashes: 1: 66TcSNbBS48EyvLzXsLP_EU_XtE.roa (hash: mxP/fnqVDCctHj8c19Sszp5bbRYZ2HG/t1D6LTj1adg=)
2: 6y4imLI7mrPUCyC4ohAhkXPWZIs.roa (hash: 3goWR3fPUqFMR5Z8Kw7Vpz2bSo/rQ358QT4CHplZTiw=)
3: UaDZglED2dpHYe-pGmDqLKdY0AM.crl (hash: 0VGsYjvAJ3VzD+Noq+ubdfUaZdQGwmdt31/D576PRm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UaDZglED2dpHYe-pGmDqLKdY0AM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:d8:0e:b2:4f:78:00:fd:4e:9e:32:e5:88:02:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51a0d9825103d9da4761efa91a60ea2ca758d003
Validity
Not Before: Nov 4 16:00:08 2025 GMT
Not After : Nov 5 16:00:08 2025 GMT
Subject: CN=0039d3e997fde9bf6a542a393d8d1098eef1c28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:48:21:01:c7:4c:2b:f2:c3:a2:5b:02:b4:db:
0b:23:8a:bc:76:3e:4c:31:7e:87:be:64:ea:1e:37:
3f:a6:73:3e:87:34:c0:db:e1:0b:15:84:0c:4d:33:
7c:09:8f:3e:d2:80:6a:17:bd:f4:d9:81:11:20:2e:
44:5b:1d:91:59:b7:c1:f2:84:5c:9a:d1:65:3c:3e:
2e:e3:28:02:20:9e:fc:aa:b6:7b:a8:3a:bc:e0:aa:
0f:8e:83:99:26:62:11:7d:be:5b:f6:ec:22:31:63:
17:a0:03:bf:05:be:ce:de:e1:a4:a2:60:20:c4:84:
f9:0b:4f:4b:30:0f:c0:0b:45:67:62:31:38:93:97:
c0:6d:88:88:b1:5d:4b:61:30:c4:3a:3e:f1:ee:2a:
a1:77:48:cd:59:df:fd:3f:3d:7c:1b:d2:62:bc:48:
bc:25:20:a6:d4:6f:a8:ea:5a:a5:f4:21:4a:28:b6:
3a:e1:45:f8:7a:e2:9a:9c:7c:00:83:00:a2:cb:60:
31:3f:53:9f:e8:af:4f:75:39:23:ad:d1:4e:80:a6:
b6:2d:bd:70:c5:c0:d4:47:7b:af:aa:7d:38:ad:1e:
c7:ae:d8:fd:05:c9:0d:09:ab:e1:9e:3c:4d:6b:24:
dc:7c:ae:d7:25:1a:43:9a:16:cb:18:0e:3f:75:41:
53:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:39:D3:E9:97:FD:E9:BF:6A:54:2A:39:3D:8D:10:98:EE:F1:C2:8C
X509v3 Authority Key Identifier:
keyid:51:A0:D9:82:51:03:D9:DA:47:61:EF:A9:1A:60:EA:2C:A7:58:D0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UaDZglED2dpHYe-pGmDqLKdY0AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:0c:d3:c5:5a:b8:aa:4f:66:16:28:01:2e:1d:0d:f5:d7:e0:
b4:c3:5a:f4:a1:bd:52:f0:a3:0a:b3:96:84:3e:db:fb:9f:22:
78:bd:63:51:04:ba:10:f3:72:b2:89:f3:83:41:42:b5:c6:1e:
dc:07:eb:2c:32:b5:5f:55:b3:9a:b9:64:46:8a:cc:9f:f4:cb:
0a:2a:80:d6:d6:2f:77:5e:ae:33:b6:ef:11:4e:a6:42:42:5c:
80:89:5f:79:9a:30:a1:21:9c:97:fa:f2:fb:5e:75:9a:b4:d8:
bb:5e:ea:1b:34:93:11:32:6c:df:89:ee:27:bc:b2:36:c7:4d:
b5:37:e7:6d:8c:6c:e3:b6:bf:cb:67:a1:3e:25:87:62:1a:6c:
b0:e6:5c:09:ce:b7:90:bd:44:b3:a0:4e:8e:7a:4a:3f:74:4b:
9f:ac:16:3b:8f:e8:d2:0a:ac:90:d6:a3:fd:69:87:19:1a:dd:
b2:64:b6:b4:3b:cd:ef:8e:24:29:94:58:d8:e6:16:9e:3a:f4:
02:59:b2:99:03:5f:cb:53:6a:cf:ee:10:0f:e7:c8:5c:bb:82:
d9:5f:d6:6f:99:6d:5e:e1:40:fd:54:0f:e4:b7:80:48:68:99:
be:27:74:3e:fc:fb:6e:4d:97:e8:85:5e:46:dd:ff:f8:3a:e0:
12:d9:ed:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:26 2025 by rpki-client