Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft
File: uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft (raw, json)
Hash identifier: lLZHIt9LAUz0Nje32ANh4j8uVexeRL3ipRYlv0s8CPE=
Subject key identifier: B0:D1:8F:56:12:65:BF:84:17:1A:F4:81:9A:41:54:73:0B:DF:90:35
Authority key identifier: B9:6A:ED:42:6F:B1:A0:63:25:A2:63:79:21:A4:B5:AB:98:A1:A5:94
Certificate issuer: /CN=b96aed426fb1a06325a2637921a4b5ab98a1a594
Certificate serial: 019A4D738A2C345BC19AC5F7DF71447EBECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uWrtQm-xoGMlomN5IaS1q5ihpZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft
Manifest number: 0DD4
Signing time: Tue 04 Nov 2025 06:00:08 +0000
Manifest this update: Tue 04 Nov 2025 06:00:08 +0000
Manifest next update: Wed 05 Nov 2025 06:00:08 +0000
Files and hashes: 1: uWrtQm-xoGMlomN5IaS1q5ihpZQ.crl (hash: vr1z4ifjWQPWBXt2dvCnlEAVocWy31lP+duNzZgZmgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uWrtQm-xoGMlomN5IaS1q5ihpZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:8a:2c:34:5b:c1:9a:c5:f7:df:71:44:7e:be:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b96aed426fb1a06325a2637921a4b5ab98a1a594
Validity
Not Before: Nov 4 06:00:08 2025 GMT
Not After : Nov 5 06:00:08 2025 GMT
Subject: CN=b0d18f561265bf84171af4819a4154730bdf9035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e6:65:a5:6d:3c:70:22:1f:cc:5b:e2:17:26:
41:cb:e7:da:73:fa:27:ca:40:d4:fe:21:da:92:60:
2f:d8:df:61:fd:95:42:e4:a0:70:e3:ba:04:43:5c:
89:16:4c:59:2c:f3:5f:48:f5:d6:b0:95:b3:0a:79:
a8:0e:d8:bf:28:37:8b:77:1f:65:b1:94:5c:c5:e8:
32:84:4d:c7:e3:f8:14:ec:b1:f3:f0:e8:eb:c5:e4:
c7:57:39:cb:8b:3f:bd:2c:04:9c:3e:3e:68:db:57:
f2:62:b8:a6:b1:1b:5f:3f:e0:5d:a7:78:b7:d2:4a:
58:f9:3b:5e:91:26:93:13:42:6f:9f:26:fa:a2:13:
40:19:d3:2d:5b:7f:0f:42:28:32:e2:2d:85:5b:98:
88:35:6a:5b:b0:44:11:89:87:be:6d:27:d0:61:84:
f3:bb:42:34:2f:71:3a:25:5a:ea:68:f8:9c:80:24:
ad:bb:02:7c:81:fc:6e:c0:2d:3c:fb:50:55:95:47:
22:5b:b5:fc:f7:cb:a3:37:ef:9f:c9:be:60:46:98:
f8:e4:2f:c5:6b:07:9a:16:14:0d:ed:8c:3b:37:a0:
12:a6:48:3c:e6:49:ef:0c:25:8e:d7:e6:ba:32:8b:
94:41:ff:0e:84:ff:1b:85:29:74:b4:78:a4:79:5f:
5e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D1:8F:56:12:65:BF:84:17:1A:F4:81:9A:41:54:73:0B:DF:90:35
X509v3 Authority Key Identifier:
keyid:B9:6A:ED:42:6F:B1:A0:63:25:A2:63:79:21:A4:B5:AB:98:A1:A5:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWrtQm-xoGMlomN5IaS1q5ihpZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:28:f0:d0:14:e4:1e:96:a2:40:24:7a:36:d4:19:e5:9d:f0:
5f:13:1a:fb:4c:a0:17:d9:6d:f5:7e:e2:e9:1d:c4:aa:42:1b:
5e:0b:91:09:05:19:05:56:68:24:04:e4:7d:30:e5:14:79:4f:
b1:68:e1:06:a7:b8:4b:57:28:b2:d9:77:f8:4b:b8:3c:ea:df:
23:00:20:8a:df:0a:ca:94:0b:0b:4a:fb:d0:3a:fe:20:b7:72:
5b:3f:4f:36:f8:6d:5a:3a:e5:99:36:52:5b:8c:7a:e4:b6:90:
c4:ab:ac:fc:2d:8b:59:e3:ac:05:ef:4f:1c:ed:46:71:36:80:
08:fb:d7:50:d4:45:1f:c5:35:5e:9d:f7:6b:73:f3:80:33:a0:
90:d9:43:57:23:ec:93:55:94:25:c9:d6:2b:f2:46:a3:bb:1b:
79:fe:67:16:19:84:09:dd:55:84:e0:4f:75:a1:83:b8:a8:71:
62:a5:8b:af:0d:54:88:05:ab:6a:7e:ea:01:26:27:47:4b:00:
0f:c1:05:66:9c:4f:2f:ea:e3:3f:e0:66:fe:5b:9b:44:54:11:
99:7e:da:a9:94:1c:5a:c4:65:cf:b9:ab:cb:d2:f6:15:89:65:
86:7b:cb:10:9f:54:fe:e0:8f:67:17:0a:93:bc:87:bb:13:d9:
f9:87:99:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:00:55 2025 by rpki-client