Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft
File: UnFDjiPOkl5mwlmYEiG1toOi8I8.mft (raw, json)
Hash identifier: F3KWxXUe3Po4OsmA1H2mygHGGc37kKZhRMvJu7wg8yk=
Subject key identifier: 57:7A:1F:4D:58:03:A3:79:8D:DD:E8:9B:2F:79:A9:50:D7:E4:68:98
Authority key identifier: 52:71:43:8E:23:CE:92:5E:66:C2:59:98:12:21:B5:B6:83:A2:F0:8F
Certificate issuer: /CN=5271438e23ce925e66c259981221b5b683a2f08f
Certificate serial: 019A50E41BA41C2919BC1FC4783BC5524B58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnFDjiPOkl5mwlmYEiG1toOi8I8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft
Manifest number: 0C72
Signing time: Tue 04 Nov 2025 22:01:57 +0000
Manifest this update: Tue 04 Nov 2025 22:01:57 +0000
Manifest next update: Wed 05 Nov 2025 22:01:57 +0000
Files and hashes: 1: UnFDjiPOkl5mwlmYEiG1toOi8I8.crl (hash: +xkM3SEQuriRbSZ8REs+NWborpEDKtwqQf4qwwoHbfE=)
2: b23Ppzc40t1gh2jcC0tEEtTjq-Y.roa (hash: PLO31FJDvhLM1rCGRuVKcX7pZ7U9Xsy2KrFDiy0XrKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UnFDjiPOkl5mwlmYEiG1toOi8I8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:1b:a4:1c:29:19:bc:1f:c4:78:3b:c5:52:4b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5271438e23ce925e66c259981221b5b683a2f08f
Validity
Not Before: Nov 4 22:01:57 2025 GMT
Not After : Nov 5 22:01:57 2025 GMT
Subject: CN=577a1f4d5803a3798ddde89b2f79a950d7e46898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b5:62:2e:91:55:37:80:32:58:8d:6d:23:85:
02:88:0f:b5:5a:a6:eb:64:64:60:94:15:56:2b:70:
ad:5d:36:f7:50:98:76:03:e4:31:b0:03:ab:97:63:
77:6b:60:54:49:c1:9a:73:2b:56:75:7b:82:04:10:
59:a3:1a:6b:a4:10:88:80:f8:6b:81:93:ec:0d:03:
a9:9f:e2:54:cf:39:9b:38:28:4c:91:fb:f1:57:23:
44:77:ba:2c:5e:98:9a:d7:e7:01:10:cf:2d:5e:ab:
9a:14:9d:4a:19:78:e1:7e:06:c5:32:6c:81:d1:40:
be:f4:ea:3a:28:c8:e2:76:48:1c:cc:4a:ac:31:58:
25:91:e6:3e:ed:6b:62:67:2b:3c:ec:b6:e1:4d:f5:
7a:88:6e:41:17:b1:b3:43:82:4b:b4:f1:85:80:c3:
f1:3d:80:dd:0e:5f:e0:fb:08:56:de:bc:0f:30:f7:
f7:85:25:6c:05:c8:77:11:6e:1d:51:d9:ed:0b:d9:
50:35:80:12:17:75:42:48:13:9e:b5:5a:78:4c:6b:
cf:c4:bf:aa:29:01:7a:e1:a0:53:c5:be:04:f2:ff:
29:7c:fb:48:92:bb:80:29:38:4e:36:2a:6a:9a:39:
1f:2a:e3:aa:a1:68:e8:77:ba:34:2d:08:e5:25:55:
a8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7A:1F:4D:58:03:A3:79:8D:DD:E8:9B:2F:79:A9:50:D7:E4:68:98
X509v3 Authority Key Identifier:
keyid:52:71:43:8E:23:CE:92:5E:66:C2:59:98:12:21:B5:B6:83:A2:F0:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnFDjiPOkl5mwlmYEiG1toOi8I8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:19:e8:ff:65:53:96:7d:26:64:66:4c:c6:a9:01:f5:b5:a7:
11:20:a5:98:c3:9d:71:60:69:16:df:f2:a3:68:39:cc:66:a6:
3a:93:d9:1f:34:2d:f1:6a:ac:71:55:87:f3:44:04:4b:98:2d:
7d:dd:78:1a:b2:9e:dc:57:06:13:8e:b3:1c:39:96:0b:bc:cb:
c3:4e:4a:8c:d2:b3:ef:f2:b9:e9:c1:3f:c8:82:08:03:6a:67:
c5:41:bd:49:c1:b0:5b:e7:1f:b3:c5:c5:70:f9:7d:a8:51:15:
02:e4:d7:25:09:5c:5c:af:fe:a4:8b:d0:c3:f9:06:f3:5e:0d:
d5:0c:b7:df:01:99:2f:f9:74:a0:b0:68:07:ba:53:c0:32:07:
1b:7d:41:49:f1:83:45:27:7f:47:02:ee:dd:8f:45:73:a2:6a:
88:5d:1f:f3:3e:30:3b:84:1a:b5:b5:11:f8:27:c4:f3:fd:72:
c7:28:cd:30:8a:64:e4:46:1c:1c:e1:24:d6:96:6c:58:bd:ce:
4b:74:23:74:0a:20:42:c2:24:03:78:e1:85:85:6a:ab:3e:5c:
62:ae:60:9a:fe:65:3f:f3:2c:f0:3b:79:2c:ca:0f:a9:38:ef:
65:ab:63:ee:29:56:7c:6f:3a:b0:65:c6:5c:68:da:88:f8:46:
e0:5a:85:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:32 2025 by rpki-client