Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.mft
File: Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.mft (raw, json)
Hash identifier: G6kOkQ2jg7JZaZeflxxNd9vt1Dy3sWV9Vs89YrInrB0=
Subject key identifier: A3:81:A3:14:52:DD:0C:F9:77:1A:63:91:EA:50:8A:4F:9A:E5:9B:92
Authority key identifier: 51:F8:3B:80:0B:F5:D6:6C:C7:6D:0E:62:48:47:FB:66:8E:17:7C:71
Certificate issuer: /CN=51f83b800bf5d66cc76d0e624847fb668e177c71
Certificate serial: 0199FC8FAB5C5B3C3E10BFAD755A06F3A48D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.mft
Manifest number: 0173
Signing time: Sun 19 Oct 2025 13:01:37 +0000
Manifest this update: Sun 19 Oct 2025 13:01:37 +0000
Manifest next update: Mon 20 Oct 2025 13:01:37 +0000
Files and hashes: 1: Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.crl (hash: nF4R5Xy+0KOznSbauZShhBHCTY0L20HgxVj1yBY6vjk=)
2: UzdAI9r8ururR3efFNaAcO55XaM.roa (hash: pCH+pFsUkI5n2Li26SVl8WqYpHuk5K9R9H/mh0OmiJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:ab:5c:5b:3c:3e:10:bf:ad:75:5a:06:f3:a4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51f83b800bf5d66cc76d0e624847fb668e177c71
Validity
Not Before: Oct 19 13:01:37 2025 GMT
Not After : Oct 20 13:01:37 2025 GMT
Subject: CN=a381a31452dd0cf9771a6391ea508a4f9ae59b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2f:82:ad:88:5c:d9:3f:91:81:07:6b:fb:a7:
9e:49:9b:5e:4e:28:e2:8d:f2:2d:cf:bd:b9:fe:b1:
bc:69:50:18:67:d9:5b:51:22:c1:78:51:9a:98:3f:
f3:b1:ba:86:37:34:f6:96:f8:4a:10:96:e9:08:4d:
95:54:79:6c:11:6d:07:47:ec:0b:9e:73:12:f7:94:
5e:a7:64:7f:44:0c:ca:1f:b9:60:ba:2a:cc:1c:2b:
85:5a:ab:92:cf:6b:0d:e2:90:86:fa:10:c1:9b:88:
c6:d5:61:84:d9:57:1f:3d:df:19:df:0e:7a:da:c5:
a7:df:93:a4:6e:8b:c3:f1:93:28:a2:04:96:50:cb:
a3:06:9d:77:b9:f5:c2:71:9e:2c:53:e8:d0:de:b9:
76:04:3e:24:40:74:80:ed:94:dc:75:f4:13:bb:f7:
ae:9e:03:ff:bf:ea:74:16:65:18:4b:66:8b:b3:e6:
28:a6:4a:27:6b:97:03:07:fb:99:1d:66:63:90:2d:
48:65:bc:7d:b8:c1:e9:d7:30:18:cb:78:c2:77:fd:
37:5c:50:34:71:81:a0:ab:37:05:fd:94:3e:24:c0:
6f:82:be:78:18:51:1c:09:c5:03:c6:c1:17:2b:96:
93:ef:21:d7:c1:b4:03:77:04:01:e2:ee:73:f0:e8:
f8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:81:A3:14:52:DD:0C:F9:77:1A:63:91:EA:50:8A:4F:9A:E5:9B:92
X509v3 Authority Key Identifier:
keyid:51:F8:3B:80:0B:F5:D6:6C:C7:6D:0E:62:48:47:FB:66:8E:17:7C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:64:5e:3d:21:5a:13:dd:21:b1:b3:4f:be:ba:46:1d:96:b6:
bd:05:06:99:71:04:c9:2e:d4:a7:5c:2c:c1:3b:bb:74:f7:7f:
c2:1a:62:45:fa:7d:fb:bf:27:61:68:66:46:87:b5:16:f6:b2:
1c:40:4e:4d:74:89:c2:8e:a9:cb:58:86:c2:5e:a8:5d:b4:1c:
19:a0:9c:c9:cb:41:18:c3:92:c6:65:49:7c:35:fb:ca:4d:88:
0c:65:64:a3:f7:e7:98:f6:40:62:76:a4:1e:32:de:c3:fd:03:
21:fa:cf:87:37:31:2a:00:04:47:09:1d:0d:d6:c3:0c:52:3d:
c0:d1:51:4f:dd:5d:a3:65:fb:4b:6c:a9:a8:ef:38:38:13:02:
17:32:01:f2:5c:a4:09:eb:ee:13:cb:7f:17:06:2e:13:f4:c8:
cd:bc:16:b6:33:35:07:dd:25:33:f2:71:69:92:43:ab:65:21:
7b:6d:ec:81:40:3b:f3:60:c6:bc:ff:b6:e7:d6:31:5f:d4:4b:
e5:a0:9f:d7:b4:95:06:96:45:c7:c1:4b:a5:9c:0b:cc:69:ef:
c3:6c:77:c3:0c:59:c5:ec:07:8b:73:59:6c:13:68:88:19:0a:
69:14:fe:4d:33:b2:d9:38:77:2a:a3:61:f8:11:4b:89:77:c7:
69:ca:6d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:32:51 2025 by rpki-client