Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
File: UuQA66N5CiRc2rS05nu01gu-e0A.mft (raw, json)
Hash identifier: p+sGMmcUZ3MUax106jtvme/GuYIM2l/M4So7s/pLCfg=
Subject key identifier: 51:B1:09:A5:E3:6C:F2:6F:5B:C7:51:A7:80:21:D6:59:B2:03:29:B2
Authority key identifier: 52:E4:00:EB:A3:79:0A:24:5C:DA:B4:B4:E6:7B:B4:D6:0B:BE:7B:40
Certificate issuer: /CN=52e400eba3790a245cdab4b4e67bb4d60bbe7b40
Certificate serial: 0199FB7C9EFC392CB5BEF6604DEF124B8F19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuQA66N5CiRc2rS05nu01gu-e0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
Manifest number: 0F37
Signing time: Sun 19 Oct 2025 08:01:12 +0000
Manifest this update: Sun 19 Oct 2025 08:01:12 +0000
Manifest next update: Mon 20 Oct 2025 08:01:12 +0000
Files and hashes: 1: UuQA66N5CiRc2rS05nu01gu-e0A.crl (hash: DAUA+rJQYAtwzIPNCSa2umXXvVSWRAc1WtcgJ95NWlw=)
2: rtVpNZa3L_NWvprN4f-UPAZwfTo.roa (hash: 2HzqWuMhkSfDBFXNVGHFl9K4DvsafbSLLfoHlblLKUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/UuQA66N5CiRc2rS05nu01gu-e0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:9e:fc:39:2c:b5:be:f6:60:4d:ef:12:4b:8f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e400eba3790a245cdab4b4e67bb4d60bbe7b40
Validity
Not Before: Oct 19 08:01:12 2025 GMT
Not After : Oct 20 08:01:12 2025 GMT
Subject: CN=51b109a5e36cf26f5bc751a78021d659b20329b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:73:7f:de:48:89:dc:af:d2:7e:90:2e:36:07:
b6:db:6b:b6:41:08:eb:44:06:bd:6b:be:39:ec:17:
8a:07:86:f4:d8:a0:5f:66:b7:87:33:75:cd:f8:48:
7c:63:81:36:52:3a:19:39:2b:8d:79:86:0d:24:ff:
3a:81:32:8b:9f:13:80:d2:1a:18:d3:4b:01:8e:d7:
70:1a:cc:ff:bf:50:58:33:3c:1e:aa:aa:fc:c5:95:
84:a7:a0:fe:dd:73:a8:f2:7b:03:2e:9f:fe:06:a8:
c5:d9:06:31:bd:fe:23:c5:f9:e3:c5:f2:f0:d5:fc:
a2:c8:ac:6c:31:77:bd:87:3c:69:e7:e9:87:ac:76:
b8:9e:31:0e:00:73:2f:60:c3:12:81:1b:14:26:37:
bb:02:3a:b3:51:d3:f5:58:1f:6e:03:39:f2:89:54:
15:1f:9d:33:17:30:e7:d2:25:23:df:41:11:77:8c:
ac:99:c6:2c:03:43:86:ac:a5:f9:c4:c0:af:77:33:
83:66:ca:79:fe:78:64:55:f9:7b:55:83:3c:6f:be:
aa:a0:15:3c:90:f9:fb:94:d7:cf:eb:7c:97:3d:40:
50:5e:cf:43:3d:a0:c2:d6:24:d3:85:54:ff:14:d6:
51:e0:42:64:f6:04:07:32:fe:b7:cb:87:b8:f2:cf:
47:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B1:09:A5:E3:6C:F2:6F:5B:C7:51:A7:80:21:D6:59:B2:03:29:B2
X509v3 Authority Key Identifier:
keyid:52:E4:00:EB:A3:79:0A:24:5C:DA:B4:B4:E6:7B:B4:D6:0B:BE:7B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuQA66N5CiRc2rS05nu01gu-e0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c1:44:e4:ed:b8:ec:94:da:ab:78:a5:18:1b:a6:82:a5:3b:
69:79:a2:59:6d:7e:84:74:36:62:36:75:0d:8b:ac:8b:aa:64:
e5:bf:f3:4b:ee:66:81:b3:25:51:91:22:b2:11:86:5f:ff:38:
d6:a4:15:cf:cc:51:9a:2d:79:f3:8b:a1:77:b2:1f:7f:76:56:
b5:83:c5:ca:95:f5:31:f5:c7:4b:63:af:2a:1b:65:06:dc:6e:
c6:24:d3:73:3f:25:71:00:0d:e2:39:c5:d9:76:5b:6c:7f:4d:
60:6b:cb:f8:84:c7:70:46:ee:7b:cb:e5:30:ae:82:3c:73:e8:
8c:d9:ab:2d:cd:0f:21:2c:06:00:5c:3c:a4:31:81:5a:16:5f:
aa:84:3e:b0:c7:af:23:7e:76:6a:d3:42:60:01:84:4c:37:a4:
ad:b2:b2:cf:eb:0c:b2:d9:84:68:e1:0c:9e:fc:6b:d7:89:5a:
b9:4d:cc:ca:1d:da:fb:fd:dd:5a:17:97:a6:db:9e:9e:5d:8b:
3e:62:fd:e4:2f:9b:4f:1f:b2:cb:e9:a7:56:f9:8a:84:e3:b1:
8f:c3:76:93:6f:5e:fa:88:9c:f9:34:d0:1a:7a:88:53:bf:0e:
1d:24:bc:2a:1c:f5:e5:0c:1d:0c:de:cd:62:1a:62:23:26:9e:
c8:67:bb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:07 2025 by rpki-client