Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/16453d-28d0-46dd-8577-bdd57751c673/1/UNorr8N6OYjdKUyROuUiDgONuWQ.mft
File: UNorr8N6OYjdKUyROuUiDgONuWQ.mft (raw, json)
Hash identifier: IWyfwNJY0poLc3nLNABPtO0twHukYGhlI6Kp8K6dmSY=
Subject key identifier: E8:46:38:82:4E:85:B9:CE:7A:A8:C0:A2:37:3A:4F:3E:F0:DF:C8:15
Authority key identifier: 50:DA:2B:AF:C3:7A:39:88:DD:29:4C:91:3A:E5:22:0E:03:8D:B9:64
Certificate issuer: /CN=50da2bafc37a3988dd294c913ae5220e038db964
Certificate serial: 019A4E4F5D407FE355671C8D0CFD388516A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNorr8N6OYjdKUyROuUiDgONuWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/16453d-28d0-46dd-8577-bdd57751c673/1/UNorr8N6OYjdKUyROuUiDgONuWQ.mft
Manifest number: 1659
Signing time: Tue 04 Nov 2025 10:00:15 +0000
Manifest this update: Tue 04 Nov 2025 10:00:15 +0000
Manifest next update: Wed 05 Nov 2025 10:00:15 +0000
Files and hashes: 1: UNorr8N6OYjdKUyROuUiDgONuWQ.crl (hash: x/LOCQND2Gxc53jeIq6/+isVRoOGxXF+QfWwhqrSvuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/16453d-28d0-46dd-8577-bdd57751c673/1/UNorr8N6OYjdKUyROuUiDgONuWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/16453d-28d0-46dd-8577-bdd57751c673/1/UNorr8N6OYjdKUyROuUiDgONuWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNorr8N6OYjdKUyROuUiDgONuWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:5d:40:7f:e3:55:67:1c:8d:0c:fd:38:85:16:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50da2bafc37a3988dd294c913ae5220e038db964
Validity
Not Before: Nov 4 10:00:15 2025 GMT
Not After : Nov 5 10:00:15 2025 GMT
Subject: CN=e84638824e85b9ce7aa8c0a2373a4f3ef0dfc815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4c:70:c4:5c:b5:d2:31:44:f1:12:74:7c:21:
c1:71:6f:8d:72:29:18:16:55:c4:c0:e1:e4:fa:f4:
bd:6d:da:f0:4e:56:c9:ed:3b:8f:2e:fd:f0:c6:bc:
a8:72:d9:58:e3:74:c8:5d:8b:11:10:a4:33:f5:40:
29:78:ba:55:33:52:e7:d0:f0:5e:a9:ff:0b:1f:19:
37:a8:e0:36:e1:67:83:7f:18:bf:82:87:b0:06:21:
03:e6:54:e4:62:ee:30:0e:31:c4:32:d5:7e:c3:b0:
ad:66:a5:fc:01:8a:03:eb:61:e9:6f:a1:86:19:a5:
73:17:64:77:ca:5d:5b:fd:28:b5:20:5d:ea:56:f4:
5d:a0:aa:ce:04:a8:45:53:ec:9c:1c:4d:1d:b1:a3:
b0:65:b5:e6:a4:ea:34:90:71:26:ea:c8:0a:5d:91:
4e:58:de:34:e4:e9:43:75:4b:28:93:a6:a3:82:0c:
19:03:77:fa:7a:c1:68:ed:64:74:7c:ff:8e:b0:28:
b7:9f:24:02:8e:3f:70:9a:17:c4:3f:64:b3:62:85:
e2:eb:bf:e2:31:9f:b9:74:76:6c:ba:66:8c:67:52:
c1:6a:df:62:5a:cf:68:c9:86:4c:8a:19:1e:c1:b0:
47:72:40:a1:be:64:c2:eb:53:52:8e:01:7b:b7:42:
cd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:46:38:82:4E:85:B9:CE:7A:A8:C0:A2:37:3A:4F:3E:F0:DF:C8:15
X509v3 Authority Key Identifier:
keyid:50:DA:2B:AF:C3:7A:39:88:DD:29:4C:91:3A:E5:22:0E:03:8D:B9:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNorr8N6OYjdKUyROuUiDgONuWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/16453d-28d0-46dd-8577-bdd57751c673/1/UNorr8N6OYjdKUyROuUiDgONuWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/16453d-28d0-46dd-8577-bdd57751c673/1/UNorr8N6OYjdKUyROuUiDgONuWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:31:5e:76:0d:8a:17:0e:85:a6:96:b9:e9:b9:82:1f:e2:95:
52:44:7c:27:82:02:e1:32:36:70:e7:60:c1:a6:68:01:33:af:
3d:9f:cc:96:84:0d:bb:d3:5f:12:b8:43:86:c0:af:37:6b:cd:
68:35:b7:9d:bb:86:aa:f4:ab:80:c0:01:bf:db:9f:57:18:b4:
a9:21:b8:0f:a2:34:9a:3e:b4:88:84:d4:dc:df:77:af:34:e5:
5a:06:d4:34:3e:ce:74:e5:ea:a5:b2:24:e0:e1:0a:a0:2b:79:
8e:5e:a4:d5:b7:9b:c9:cf:45:b0:b7:49:b1:71:a3:19:47:99:
d7:7f:0f:bb:7b:b0:a9:36:47:74:94:ba:2f:b5:30:4b:42:d9:
87:43:ba:a9:58:e8:52:c8:93:5f:09:6f:fe:c1:28:7f:71:9f:
3d:90:b6:e1:3b:13:21:6a:52:69:b5:6f:d8:50:0c:3e:d8:52:
25:14:46:c4:7b:6a:26:21:8a:97:47:cc:a4:5c:af:16:72:9a:
32:99:ef:7b:18:7c:b6:df:ba:12:f5:05:9f:ea:81:30:0b:5d:
93:d0:40:64:65:c9:98:b4:02:72:65:23:5c:99:89:69:02:74:
d2:85:de:db:0c:82:d0:55:67:2d:73:b1:32:cf:e7:a3:dd:5e:
01:0d:06:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:54 2025 by rpki-client