Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
File: UaLCwG3bhGaaiamfuHVglRNMh2Y.mft (raw, json)
Hash identifier: A+2WpENpjomY08SrSu2fkZm3Ofo0w/EVr3kzw7rhP/E=
Subject key identifier: 45:B1:FF:B9:66:4F:8E:EA:81:7F:1F:BD:3B:79:78:87:BB:19:22:0F
Authority key identifier: 51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66
Certificate issuer: /CN=51a2c2c06ddb84669a89a99fb8756095134c8766
Certificate serial: 0199FBB369F610E015372DF124474D20730A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
Manifest number: 0541
Signing time: Sun 19 Oct 2025 09:01:03 +0000
Manifest this update: Sun 19 Oct 2025 09:01:03 +0000
Manifest next update: Mon 20 Oct 2025 09:01:03 +0000
Files and hashes: 1: UaLCwG3bhGaaiamfuHVglRNMh2Y.crl (hash: hQ/KQdkP6yYeLD55xZJx5sEGKawAY8rJLFJ6ogPlxZM=)
2: mQRNvpgGDTxl1ClE8lP4fBCE_zY.roa (hash: Y4EjZw1j54zSv6D2ykaYLyeNan8XUPzgXS8YGYvdiOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:69:f6:10:e0:15:37:2d:f1:24:47:4d:20:73:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51a2c2c06ddb84669a89a99fb8756095134c8766
Validity
Not Before: Oct 19 09:01:03 2025 GMT
Not After : Oct 20 09:01:03 2025 GMT
Subject: CN=45b1ffb9664f8eea817f1fbd3b797887bb19220f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:40:b8:74:26:45:02:9c:03:08:51:38:95:52:
36:4e:2d:25:2a:fe:fa:85:06:70:3d:ce:5d:e9:d5:
c4:dc:72:49:d4:e1:a1:0a:4d:50:83:f9:0d:39:4d:
4c:87:b9:2b:60:20:19:0a:1e:1f:b3:54:eb:b4:46:
26:52:72:cf:6d:cc:24:4f:63:2f:9d:a5:57:11:20:
bc:34:7d:d5:bc:79:55:25:b7:d5:75:c2:ff:99:f6:
30:47:ff:bb:7e:e5:6c:a1:19:9b:9b:97:16:8a:41:
a0:16:50:6d:b1:51:dd:0c:19:e2:66:94:34:6f:00:
b7:87:2f:00:63:5f:c5:a3:46:f6:47:1f:66:d0:9f:
8a:9f:5e:2b:cc:c2:fa:60:1e:19:b7:3f:bd:6c:e2:
1b:35:69:89:18:12:b2:1b:69:14:0f:d6:64:d6:ff:
0a:f5:d3:f5:8a:bb:6e:3a:dc:bf:af:58:55:59:ab:
d9:fa:b5:b0:34:36:36:f8:cb:19:0f:8f:c1:26:98:
7a:84:44:f8:ea:09:52:6b:f1:5a:64:ac:de:c5:95:
57:a9:6d:53:a3:f7:fe:15:84:a8:6c:56:47:12:a4:
ed:dd:08:c1:a4:98:ea:b3:78:0f:a7:18:88:e8:e5:
c7:91:01:fe:d6:68:26:8a:e5:50:59:45:ad:97:92:
c5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B1:FF:B9:66:4F:8E:EA:81:7F:1F:BD:3B:79:78:87:BB:19:22:0F
X509v3 Authority Key Identifier:
keyid:51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:a9:ad:dc:f8:2f:f9:f4:69:91:04:e3:b0:27:fe:bc:27:df:
cf:05:c8:76:56:5a:e9:28:66:e2:b5:5c:67:ff:4e:81:3a:66:
08:0d:6c:59:df:5a:a3:38:ce:51:67:39:ee:97:fd:55:a7:c0:
b5:60:f9:5f:36:18:58:34:bc:3d:2c:76:9d:41:45:9b:b7:4a:
e8:95:00:45:d2:51:0a:a7:d9:fe:43:90:9b:cf:2b:3c:dd:f5:
93:bd:8d:ff:34:76:df:e6:9f:d0:d8:44:88:a8:2c:19:1c:9e:
30:04:17:93:c1:8c:04:a5:1a:45:89:00:21:45:af:c8:eb:06:
2a:2b:24:de:1d:79:a0:8c:4f:50:b6:15:93:8f:ed:5b:5d:91:
ef:a4:d9:17:d7:09:72:ff:78:be:b6:4c:45:01:86:a4:fb:3b:
c6:3a:c7:50:76:81:05:ba:77:af:f2:9f:dc:66:63:6a:67:ad:
60:d9:9a:c4:4a:f2:af:8a:fe:84:ad:05:43:79:fb:4e:49:01:
6a:4c:bb:c6:1c:0f:2d:5e:ba:ac:bf:9d:bb:94:05:6d:03:75:
1a:ac:90:8b:c3:d7:58:97:d9:c1:b7:91:9f:0a:0f:51:77:54:
da:15:c7:e9:87:3b:a1:87:88:5a:d7:b0:96:de:fd:35:29:a9:
93:45:3a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:19 2025 by rpki-client