Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
File: UEUj-IEevlqjWYURpI87rwABqOg.mft (raw, json)
Hash identifier: UbVyf8J4orLxdDaIb8K46+F3xctGgLL0xYBvlL6xcOg=
Subject key identifier: AB:29:BE:E6:3D:63:B7:69:E9:C8:64:4B:31:DD:07:34:3F:26:F1:55
Authority key identifier: 50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8
Certificate issuer: /CN=504523f8811ebe5aa3598511a48f3baf0001a8e8
Certificate serial: 0199FBEC3A3AA8C24B7DAF33C0B5C1408AF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
Manifest number: 1181
Signing time: Sun 19 Oct 2025 10:03:06 +0000
Manifest this update: Sun 19 Oct 2025 10:03:06 +0000
Manifest next update: Mon 20 Oct 2025 10:03:06 +0000
Files and hashes: 1: UEUj-IEevlqjWYURpI87rwABqOg.crl (hash: Oowwz8QI82k7xuv8LW+CNhFs+o38kJp1VaIRfwO5VOc=)
2: ZZhPPwqLkt0i32K3myspkarpm7w.roa (hash: I/Su6LLFQ+Dm0Pej9IN4WakV0FZtHq7XZa94FgMwfR8=)
3: _U1q7kl-Gvc0JP4VZVgWjqcMCOs.roa (hash: 3X8IGbj3QMA8V3ptFiyp/tKTSPuKRQ3qYJfTsAQKmxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:3a:3a:a8:c2:4b:7d:af:33:c0:b5:c1:40:8a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=504523f8811ebe5aa3598511a48f3baf0001a8e8
Validity
Not Before: Oct 19 10:03:06 2025 GMT
Not After : Oct 20 10:03:06 2025 GMT
Subject: CN=ab29bee63d63b769e9c8644b31dd07343f26f155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9a:19:5c:ec:87:f8:25:ce:12:6a:c3:90:d0:
a2:40:62:45:83:ec:21:dd:d7:5e:b8:e4:b0:cf:16:
c1:27:b8:48:3a:ee:ad:65:1e:9f:48:2c:d1:cd:4b:
e8:ad:21:9a:2a:6f:a1:85:62:99:8d:8a:dd:f6:8f:
a3:4e:a8:11:2e:8a:4e:60:4f:ea:de:01:0b:3f:9a:
59:f8:5d:e6:82:7b:ae:2d:c1:a5:ea:ee:d2:ad:1a:
8b:b3:59:44:19:f1:db:63:66:0f:d3:c3:a7:e0:8c:
47:3c:9f:5e:61:58:a1:6c:a6:db:c6:82:1e:3f:ce:
0d:78:eb:d9:52:25:ad:c8:75:3f:1d:db:39:62:29:
b4:05:aa:6a:70:1b:75:6f:96:79:3c:9b:b1:30:42:
91:f1:dc:39:2c:4e:dd:f4:06:e4:d8:fe:a1:cc:92:
2d:d1:14:b7:30:2b:f3:e2:f9:8a:50:41:01:f1:b8:
e3:dd:92:62:4d:29:0d:91:3d:39:35:68:c1:8d:c3:
10:78:e0:b9:e3:b6:ea:68:c9:9b:81:8d:9a:50:8e:
e0:08:38:ec:06:58:48:08:1a:2f:63:ae:05:d6:33:
0e:61:92:46:ff:cb:d6:0e:e6:f5:f0:76:93:5c:4f:
35:9d:4b:7f:7a:ae:fb:06:b5:d2:91:23:c8:e3:71:
9c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:29:BE:E6:3D:63:B7:69:E9:C8:64:4B:31:DD:07:34:3F:26:F1:55
X509v3 Authority Key Identifier:
keyid:50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:0e:88:c1:f7:14:c2:2e:21:a3:4d:1e:f8:36:f1:cd:32:93:
6a:d9:48:63:84:47:ab:04:e3:bf:6b:7b:a2:f6:9e:47:ea:46:
72:3d:fd:57:f4:19:12:b3:ed:09:c9:b5:a1:6a:cd:79:a8:a7:
46:a6:66:c2:8c:2c:91:7d:45:d1:dc:f3:2c:0d:96:d1:f8:e4:
53:3f:39:57:0b:9f:87:46:35:fc:84:75:f5:37:32:8d:fd:36:
41:3c:6c:5b:90:36:5d:47:66:a9:44:b6:27:68:eb:2a:99:71:
dd:89:4f:39:c9:c6:a6:6c:67:d3:4b:4b:d9:dc:32:69:9f:5d:
eb:82:82:11:c9:f3:ef:8f:9d:53:5d:90:47:3c:12:3e:af:13:
9d:0d:ba:21:f6:2f:ee:99:00:3e:7c:90:1e:eb:53:06:aa:73:
26:5c:7f:f5:08:26:d0:29:0a:93:7f:50:dc:63:ac:34:7b:20:
83:5c:18:a3:41:4e:8f:4c:0d:32:64:56:9f:04:1a:19:df:ef:
11:f6:fe:ec:ef:93:71:e7:5a:a9:65:e7:45:ac:a0:16:63:a8:
d5:03:8b:9d:86:87:16:ec:12:d7:55:fb:67:33:e4:1d:2a:d1:
65:b6:3b:9d:b9:5b:04:d8:a6:a3:80:93:60:df:9c:fb:e8:d9:
e6:01:34:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:54 2025 by rpki-client