Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft
File: uFK2pNRayK4a7VTG9ayO1v88Hdc.mft (raw, json)
Hash identifier: a60DHM8Sv0qGdo1IW4nFJY8mzsyexmIrZBu6Vtl2rAI=
Subject key identifier: 0A:8C:B8:17:05:07:49:96:2E:0B:75:20:3C:18:2A:46:8A:7A:53:71
Authority key identifier: B8:52:B6:A4:D4:5A:C8:AE:1A:ED:54:C6:F5:AC:8E:D6:FF:3C:1D:D7
Certificate issuer: /CN=b852b6a4d45ac8ae1aed54c6f5ac8ed6ff3c1dd7
Certificate serial: 019A4EF49A51EC3E4BCAE3BDE2080C482E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFK2pNRayK4a7VTG9ayO1v88Hdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft
Manifest number: 0CA1
Signing time: Tue 04 Nov 2025 13:00:44 +0000
Manifest this update: Tue 04 Nov 2025 13:00:44 +0000
Manifest next update: Wed 05 Nov 2025 13:00:44 +0000
Files and hashes: 1: uFK2pNRayK4a7VTG9ayO1v88Hdc.crl (hash: Z0KhynLtci/foirnLi26RXWZJ35ikdjasTnDnTk0r6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFK2pNRayK4a7VTG9ayO1v88Hdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:9a:51:ec:3e:4b:ca:e3:bd:e2:08:0c:48:2e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b852b6a4d45ac8ae1aed54c6f5ac8ed6ff3c1dd7
Validity
Not Before: Nov 4 13:00:44 2025 GMT
Not After : Nov 5 13:00:44 2025 GMT
Subject: CN=0a8cb817050749962e0b75203c182a468a7a5371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:50:02:08:2a:ed:7b:c6:38:aa:c9:72:1f:d7:
76:45:23:69:6d:9d:6a:b4:47:af:70:67:14:68:f2:
11:d3:32:99:d4:ce:4f:83:cc:b1:db:e4:62:fc:ae:
c5:17:f6:ec:19:2c:16:3f:6d:d5:6e:de:3b:a0:52:
51:b9:cf:26:2e:18:99:a2:97:5a:48:5a:ef:c2:76:
19:c6:63:5c:a9:70:5d:71:7f:2e:48:04:a3:cb:09:
3c:ea:ab:e7:f5:48:cf:22:09:50:5b:0f:4d:f2:08:
ae:b5:22:9e:11:b2:24:a2:8e:47:5f:50:6c:45:b9:
85:b4:a9:99:fe:50:10:58:ac:ee:05:23:d9:6d:5a:
8f:a6:31:76:8d:07:31:ec:e6:e1:d6:54:36:e1:a8:
8d:b8:db:94:88:a0:c8:30:b5:68:ff:ac:52:ee:01:
d2:32:79:c0:45:bd:6c:d3:7b:6a:41:80:4a:37:cf:
29:66:c2:71:37:48:c8:5d:d3:bc:52:66:fe:4f:a0:
3b:a6:84:32:3f:c9:d1:92:48:93:c9:37:a4:92:88:
86:5c:21:98:87:50:0c:68:72:56:ad:39:a3:19:3e:
ca:c3:60:af:43:e1:12:d9:f6:c3:fc:19:c3:f9:1a:
25:c9:90:5a:7c:64:a1:d3:7d:59:10:8f:56:b8:54:
b0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8C:B8:17:05:07:49:96:2E:0B:75:20:3C:18:2A:46:8A:7A:53:71
X509v3 Authority Key Identifier:
keyid:B8:52:B6:A4:D4:5A:C8:AE:1A:ED:54:C6:F5:AC:8E:D6:FF:3C:1D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFK2pNRayK4a7VTG9ayO1v88Hdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:31:c3:07:87:86:7a:ef:d8:d0:0b:9c:f4:2e:fb:7d:1f:c1:
46:4c:5b:bd:c1:e7:72:eb:ab:ca:12:ba:2c:6f:30:2e:1b:82:
62:55:08:28:00:fb:79:f6:86:0a:94:74:66:65:e6:50:aa:1c:
16:1e:a4:5f:43:61:1f:00:57:01:64:87:86:0f:83:1e:93:cf:
2b:30:64:08:93:82:b6:35:0b:9f:21:db:59:5b:8d:08:ea:70:
58:ba:ab:24:6f:87:ad:b1:36:6c:8d:29:22:ae:93:ff:a1:b9:
98:d1:f9:6b:e6:f3:1d:34:0b:54:48:5f:58:b3:f5:2c:73:6c:
72:b0:18:d5:a0:26:3f:2c:a7:12:5e:46:4b:ac:33:a3:e2:fd:
be:5a:de:7f:53:cd:21:fe:aa:9f:b2:12:6b:99:c0:36:e8:49:
84:0a:d1:66:4b:e5:2d:c0:ab:b1:50:fc:d1:09:16:12:eb:aa:
ee:1f:a5:5d:d3:61:10:aa:2f:c2:dd:e1:dd:74:c8:71:c1:a0:
4b:9c:04:fb:88:d1:3b:16:6b:d5:c6:04:6e:be:b2:e8:63:fc:
e7:27:0f:e4:da:1e:6f:fc:e7:81:dd:6f:5f:83:c7:6d:70:44:
62:5e:cc:80:e0:0f:a9:e4:30:a9:a8:39:9d:9d:5d:dc:3a:0a:
21:01:32:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:32:53 2025 by rpki-client