Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
File: Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft (raw, json)
Hash identifier: zCRWitvZyFEnX6Dqa4KKsgBH6EjNxH+yek0zzATBs+g=
Subject key identifier: 86:78:05:21:2D:2E:63:6C:0D:09:58:FE:7E:3E:CD:0F:19:CF:E9:26
Authority key identifier: 51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
Certificate issuer: /CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Certificate serial: 019A0592C4070FE11B2D30B718203B0DFD69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
Manifest number: 1012
Signing time: Tue 21 Oct 2025 07:01:35 +0000
Manifest this update: Tue 21 Oct 2025 07:01:35 +0000
Manifest next update: Wed 22 Oct 2025 07:01:35 +0000
Files and hashes: 1: Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl (hash: Eo/xN2bSn2UP8LSOA3ePsum16MAlfTTOKVp+CcdxfL8=)
2: wcLPDXwZhknfwFVrmzWdaV09zJc.roa (hash: KCyUIbiI7WKGmxPwkUMQCU2Fnp9j24d2NyqBltI+vd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:92:c4:07:0f:e1:1b:2d:30:b7:18:20:3b:0d:fd:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Validity
Not Before: Oct 21 07:01:35 2025 GMT
Not After : Oct 22 07:01:35 2025 GMT
Subject: CN=867805212d2e636c0d0958fe7e3ecd0f19cfe926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:02:ae:e5:2c:d3:1d:a6:63:89:04:8c:07:16:
19:61:81:15:f6:0f:81:c6:ad:2a:6c:5d:75:0e:05:
1b:64:94:b2:87:85:68:ed:ec:ef:36:b8:09:99:30:
ff:c4:b7:8a:69:a6:b8:5c:75:6d:22:ec:01:39:ed:
fe:79:f2:02:61:9b:c5:8e:c9:b0:c4:6a:9b:e4:a9:
57:89:ce:04:e6:b9:9c:55:58:68:38:e0:35:f6:a8:
02:92:9a:3e:d5:47:5f:f0:88:15:14:0f:fd:22:1c:
f8:77:6b:cc:c5:02:f3:a6:79:54:9d:f9:a4:04:3b:
49:bf:82:fb:50:f9:57:1b:9f:15:4f:ff:4e:91:bc:
d3:91:ef:7a:8c:37:ba:8e:ac:65:09:19:87:4f:15:
86:f4:6a:1c:ca:66:fe:d9:e6:3b:bf:f5:bc:ff:13:
31:52:96:32:1b:7f:01:d2:43:53:9c:3f:09:90:6d:
20:2b:a3:10:71:a5:34:f6:51:35:f2:c2:b1:81:98:
a5:10:cd:a3:a0:a2:f7:6d:5d:9a:fc:85:66:be:f4:
ad:8a:b7:f4:59:4a:89:42:52:e4:59:b5:7e:3a:9d:
b8:a6:48:fd:28:ca:f4:e9:92:7d:12:72:f6:d3:98:
29:a9:a9:0f:f8:fd:d3:ac:ee:12:1d:10:d7:90:4b:
0e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:78:05:21:2D:2E:63:6C:0D:09:58:FE:7E:3E:CD:0F:19:CF:E9:26
X509v3 Authority Key Identifier:
keyid:51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:03:41:d9:93:1f:9d:1e:32:bd:64:08:af:bb:22:be:38:46:
3d:15:4c:1e:fb:d9:34:5f:81:7c:ca:cc:3f:71:6a:45:1b:7b:
c7:e3:e7:2a:6b:f0:af:16:bb:e5:35:e5:bb:b5:2c:8a:03:07:
07:f3:b0:93:7b:53:a8:97:4e:30:05:85:35:9c:13:69:6e:86:
e0:a3:55:ae:dc:a2:e4:9b:0e:56:82:2a:45:f7:32:a7:6b:b7:
36:61:07:b8:9b:24:82:f2:2b:0b:43:29:16:36:7c:b0:0e:0c:
c1:50:73:29:8e:e5:d4:74:d7:d6:7b:28:55:06:94:51:27:d5:
15:04:75:96:03:87:b7:6c:e2:0a:61:ca:d1:81:92:00:47:5f:
76:51:d9:82:f0:e2:f8:3a:e4:7f:7e:b2:55:79:f5:a1:9c:28:
55:a8:33:8d:12:e6:f2:ce:3c:46:90:7e:9d:63:cf:60:ca:2a:
0f:de:bd:de:c5:48:89:ec:ed:e3:cf:3d:ad:6e:57:5b:88:9e:
4b:2e:a3:96:3a:fd:69:d3:03:70:b4:82:38:51:d3:72:40:a2:
b7:e6:cc:15:40:10:96:cb:92:67:ee:17:37:93:b0:7b:7d:d3:
6d:88:00:a1:4c:43:01:40:ab:61:a6:0d:23:0d:ea:6e:ba:06:
96:70:d9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:00:00 2025 by rpki-client