Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft
File: UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft (raw, json)
Hash identifier: Jk2mmdxowlbttbb28r2WcMAeJc7phipxN7KSaWcTHpA=
Subject key identifier: 7F:B5:55:D2:B0:77:15:89:6F:7B:0E:7A:D5:FC:7D:A6:22:3E:40:E3
Authority key identifier: 51:E5:91:E5:49:03:D2:F9:EA:84:0A:14:69:55:BA:34:59:E3:3E:A1
Certificate issuer: /CN=51e591e54903d2f9ea840a146955ba3459e33ea1
Certificate serial: 0199FDDA35B2BE5E4016500A77C8706B5527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeWR5UkD0vnqhAoUaVW6NFnjPqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft
Manifest number: 1375
Signing time: Sun 19 Oct 2025 19:02:40 +0000
Manifest this update: Sun 19 Oct 2025 19:02:40 +0000
Manifest next update: Mon 20 Oct 2025 19:02:40 +0000
Files and hashes: 1: UeWR5UkD0vnqhAoUaVW6NFnjPqE.crl (hash: q5+RLIZBtPLGDcDtdS/HFj9sM0G22fckyqhz9J+ij+Q=)
2: mh18CeMUKX0D009-9mGv8SAvgKs.roa (hash: zVhE4BkupXg5srZAaYXqVFIMgkPQ0zgGIp7W/596OI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeWR5UkD0vnqhAoUaVW6NFnjPqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:35:b2:be:5e:40:16:50:0a:77:c8:70:6b:55:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e591e54903d2f9ea840a146955ba3459e33ea1
Validity
Not Before: Oct 19 19:02:40 2025 GMT
Not After : Oct 20 19:02:40 2025 GMT
Subject: CN=7fb555d2b07715896f7b0e7ad5fc7da6223e40e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f6:01:f6:be:db:e9:36:d1:cc:81:40:9e:32:
68:18:74:56:84:7d:c5:6c:cf:5e:82:79:df:73:be:
75:49:90:a7:ef:c2:80:9b:38:66:95:9c:56:2a:7f:
a7:0f:b0:19:91:31:af:b2:dc:aa:8d:55:18:c2:bf:
5a:1e:96:33:9a:d7:c1:dd:c3:03:f2:1e:17:6f:36:
1b:46:95:23:0f:23:23:51:1b:a9:eb:23:ae:d8:e6:
fc:07:dd:15:f1:87:a3:6c:6a:50:f0:9d:65:b4:0c:
28:14:73:0c:f9:22:a9:87:a8:eb:4f:c9:9b:43:f4:
4e:37:c6:61:fb:52:ee:91:e5:1d:db:64:39:92:59:
0e:49:9a:5c:49:77:a5:f1:a9:24:81:2e:c2:c9:a7:
bd:12:ef:79:91:0d:fc:78:96:36:ad:7a:59:7a:22:
16:27:67:38:f0:54:26:b1:50:a7:bf:ae:c4:1c:07:
0d:81:46:79:48:ff:1a:78:ef:32:97:02:80:f3:6f:
c5:fc:32:c0:f5:a1:12:49:00:2f:29:02:b1:d8:6c:
66:ef:45:f1:32:48:b5:17:98:83:c6:3c:4f:15:8c:
7b:8e:62:35:dc:a6:07:cd:a9:b8:2a:76:da:2a:88:
15:ce:e0:70:c1:35:00:27:dd:5c:2d:07:fb:21:23:
a7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B5:55:D2:B0:77:15:89:6F:7B:0E:7A:D5:FC:7D:A6:22:3E:40:E3
X509v3 Authority Key Identifier:
keyid:51:E5:91:E5:49:03:D2:F9:EA:84:0A:14:69:55:BA:34:59:E3:3E:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeWR5UkD0vnqhAoUaVW6NFnjPqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:75:0d:8a:b7:ad:8e:68:bf:a4:f1:f4:71:17:01:ef:55:d3:
0b:05:d3:6f:96:19:fd:40:49:ac:e9:c5:70:7e:7c:e7:4a:5e:
ed:1e:dc:ef:19:0f:1d:05:89:37:1c:49:3d:c7:9e:cd:7d:78:
84:0d:91:12:69:a3:e5:3f:b7:f2:6e:e5:69:a7:58:d7:90:8f:
0c:3e:fc:fc:14:e4:56:9a:59:56:66:93:27:fd:8a:5d:cc:ac:
98:70:9a:d4:41:b5:9d:65:0c:09:99:26:f3:fc:cd:a4:8f:18:
e4:79:35:f2:b9:55:76:5c:d0:d0:7e:3a:ff:96:6b:b6:63:1e:
3b:ef:9b:f0:cd:99:48:5f:14:bb:a3:43:27:7e:d4:a8:d8:05:
76:fb:8a:b9:b9:ba:95:27:46:f9:a0:c9:50:e8:0d:00:a0:0f:
78:54:f7:6a:b8:b6:89:e9:a7:fb:a1:fd:1e:31:e7:32:f8:16:
5b:23:4f:91:64:81:45:c1:ec:22:98:f5:db:30:fe:bd:29:3e:
99:8f:85:3b:dd:e2:6d:8a:6f:91:4b:23:e9:7e:2f:fd:dd:f5:
36:aa:da:7c:62:d0:ef:fd:64:af:05:44:9c:b6:b6:7b:3a:7b:
a2:b0:9a:f6:4f:18:ea:0e:e8:e0:0e:0d:15:c1:6d:af:0a:39:
65:4c:58:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92jWyvl5AFlAKd8hwa1UnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZTU5MWU1NDkwM2QyZjllYTg0MGExNDY5NTViYTM0NTll
MzNlYTEwHhcNMjUxMDE5MTkwMjQwWhcNMjUxMDIwMTkwMjQwWjAzMTEwLwYDVQQD
Eyg3ZmI1NTVkMmIwNzcxNTg5NmY3YjBlN2FkNWZjN2RhNjIyM2U0MGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfYB9r7b6TbRzIFAnjJoGHRWhH3F
bM9egnnfc751SZCn78KAmzhmlZxWKn+nD7AZkTGvstyqjVUYwr9aHpYzmtfB3cMD
8h4XbzYbRpUjDyMjURup6yOu2Ob8B90V8YejbGpQ8J1ltAwoFHMM+SKph6jrT8mb
Q/RON8Zh+1LukeUd22Q5klkOSZpcSXel8akkgS7Cyae9Eu95kQ38eJY2rXpZeiIW
J2c48FQmsVCnv67EHAcNgUZ5SP8aeO8ylwKA82/F/DLA9aESSQAvKQKx2Gxm70Xx
Mki1F5iDxjxPFYx7jmI13KYHzam4KnbaKogVzuBwwTUAJ91cLQf7ISOnGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+1VdKwdxWJb3sOetX8faYiPkDjMB8GA1UdIwQY
MBaAFFHlkeVJA9L56oQKFGlVujRZ4z6hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWVXUjVVa0Qwdm5xaEFvVWFWVzZORm5qUHFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi83MWE3NDgtYjJiYy00NzI4LTllZjAt
YTY5Y2Q5ZDE1ZTMxLzEvVWVXUjVVa0Qwdm5xaEFvVWFWVzZORm5qUHFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi83MWE3NDgtYjJiYy00NzI4LTllZjAtYTY5Y2Q5ZDE1ZTMx
LzEvVWVXUjVVa0Qwdm5xaEFvVWFWVzZORm5qUHFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWnUNiret
jmi/pPH0cRcB71XTCwXTb5YZ/UBJrOnFcH5850pe7R7c7xkPHQWJNxxJPceezX14
hA2REmmj5T+38m7laadY15CPDD78/BTkVppZVmaTJ/2KXcysmHCa1EG1nWUMCZkm
8/zNpI8Y5Hk18rlVdlzQ0H46/5ZrtmMeO++b8M2ZSF8Uu6NDJ37UqNgFdvuKubm6
lSdG+aDJUOgNAKAPeFT3ari2iemn+6H9HjHnMvgWWyNPkWSBRcHsIpj12zD+vSk+
mY+FO93ibYpvkUsj6X4v/d31NqrafGLQ7/1krwVEnLa2ezp7orCa9k8Y6g7o4A4N
FcFtrwo5ZUxYoQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:32:23 2025 by rpki-client