Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c9619d-1b3b-49db-89c2-a70bc30a33c3/1/RE_UFLu7UMn_tejPBmVPeftYdsw.mft
File: RE_UFLu7UMn_tejPBmVPeftYdsw.mft (raw, json)
Hash identifier: KGCpg1SDgKCtdzQnGawn5HOZNGoREV/Ohso/7zffk3k=
Subject key identifier: 42:28:9B:78:A0:6D:5D:A8:AD:F1:8C:23:B4:B5:71:73:E4:D8:26:94
Authority key identifier: 44:4F:D4:14:BB:BB:50:C9:FF:B5:E8:CF:06:65:4F:79:FB:58:76:CC
Certificate issuer: /CN=444fd414bbbb50c9ffb5e8cf06654f79fb5876cc
Certificate serial: 0199FCC63746C27F857DB40AA0D907351B1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RE_UFLu7UMn_tejPBmVPeftYdsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c9619d-1b3b-49db-89c2-a70bc30a33c3/1/RE_UFLu7UMn_tejPBmVPeftYdsw.mft
Manifest number: 03C8
Signing time: Sun 19 Oct 2025 14:01:12 +0000
Manifest this update: Sun 19 Oct 2025 14:01:12 +0000
Manifest next update: Mon 20 Oct 2025 14:01:12 +0000
Files and hashes: 1: RE_UFLu7UMn_tejPBmVPeftYdsw.crl (hash: WmlsoH03jS5edH13zJjL8j/9tWvfNEP+n+bBZatnX3k=)
2: epx5ZtV1DmNUOssTw71RpRlPSQg.roa (hash: Mn6EWImg2YFEUwlk4S0gZpe8CjG2vGuON1o03HQf5Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c9619d-1b3b-49db-89c2-a70bc30a33c3/1/RE_UFLu7UMn_tejPBmVPeftYdsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/c9619d-1b3b-49db-89c2-a70bc30a33c3/1/RE_UFLu7UMn_tejPBmVPeftYdsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RE_UFLu7UMn_tejPBmVPeftYdsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:37:46:c2:7f:85:7d:b4:0a:a0:d9:07:35:1b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=444fd414bbbb50c9ffb5e8cf06654f79fb5876cc
Validity
Not Before: Oct 19 14:01:12 2025 GMT
Not After : Oct 20 14:01:12 2025 GMT
Subject: CN=42289b78a06d5da8adf18c23b4b57173e4d82694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e0:a4:c3:ff:8e:16:c0:4c:f1:71:ab:c8:15:
0c:9d:c0:4f:f7:b8:9c:81:31:86:36:9f:7a:ba:b8:
13:c3:9a:ff:7d:0a:14:5f:b6:79:f9:37:aa:00:cb:
e8:a4:16:85:21:ee:1e:f8:21:72:47:4a:c2:1e:d0:
ab:46:ad:d3:4a:a3:62:cb:96:d2:21:7f:3e:37:83:
d3:b1:64:7e:eb:b2:97:28:83:bc:83:52:a1:e6:3d:
c7:21:84:fa:02:4c:ee:e9:44:1f:47:98:8c:8d:65:
dd:e2:1a:e5:c7:1b:52:ab:20:14:3a:48:83:62:7f:
6b:54:33:d3:90:dc:25:32:83:38:c6:60:e7:4f:63:
58:86:1c:07:6a:01:78:1e:56:18:bd:1f:3c:ee:e0:
e3:a6:21:ba:00:10:b3:46:0a:52:b2:f1:2b:54:f9:
86:d9:f5:7a:6b:10:3a:82:08:a9:8c:e9:e7:98:e8:
49:4f:5e:95:b2:8d:f0:04:17:c2:b2:ee:3e:6b:44:
c5:67:66:5a:7f:60:52:79:e0:02:ca:db:b2:9f:1d:
33:49:bd:55:cf:a9:1a:0d:cc:43:28:da:8f:68:38:
bb:d1:fe:e1:a0:de:39:7f:17:90:41:20:98:43:45:
51:6d:3f:66:a7:57:1c:c7:70:89:45:1c:ff:c5:25:
69:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:28:9B:78:A0:6D:5D:A8:AD:F1:8C:23:B4:B5:71:73:E4:D8:26:94
X509v3 Authority Key Identifier:
keyid:44:4F:D4:14:BB:BB:50:C9:FF:B5:E8:CF:06:65:4F:79:FB:58:76:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RE_UFLu7UMn_tejPBmVPeftYdsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c9619d-1b3b-49db-89c2-a70bc30a33c3/1/RE_UFLu7UMn_tejPBmVPeftYdsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c9619d-1b3b-49db-89c2-a70bc30a33c3/1/RE_UFLu7UMn_tejPBmVPeftYdsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b9:25:d6:e1:ad:c0:ad:b7:26:de:51:4f:7b:a7:af:65:a5:
b1:b2:49:26:d0:6f:35:73:16:70:e8:fe:66:55:2c:b7:61:45:
33:06:09:e1:4f:16:4d:02:d5:29:d0:e7:f0:3c:08:05:e1:2e:
e5:50:74:d1:8c:95:45:f5:d2:76:a6:ee:64:c7:e1:2e:b0:ff:
c7:92:14:7f:d3:91:20:13:44:64:3e:f8:f4:f5:a6:19:7d:d8:
da:11:da:a7:e6:87:93:4a:ed:73:00:c4:9e:fa:b1:98:bf:f1:
c0:60:eb:5d:b4:8a:9e:9e:3f:fe:fc:fc:6f:57:d4:b8:2f:a7:
16:57:4d:56:cc:59:19:cb:ce:53:3b:ba:38:92:c2:55:19:bd:
20:5f:90:bb:d1:2d:bd:95:24:69:77:72:a0:a3:55:65:fb:cf:
d7:cb:bc:c5:6c:46:02:37:04:09:a1:a2:e5:2d:19:d8:5c:41:
a3:7a:fe:19:4f:ef:b6:fd:41:b7:3b:b2:0a:2a:3c:7c:46:e6:
47:86:d5:47:2b:f1:77:26:c9:1a:28:3f:c2:f1:b7:13:b1:a9:
05:d5:a4:7b:3c:9e:22:00:8b:d7:ce:c4:18:d0:1b:13:0e:1d:
74:99:b7:9b:07:86:5d:d9:0b:23:cf:03:e7:15:7d:4c:dc:ab:
55:04:f9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:46:21 2025 by rpki-client