Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft
File: UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft (raw, json)
Hash identifier: t+S49jTCCtC2jwJ5SRiV+rgDwHuQhuNJDQESlGAUorA=
Subject key identifier: 1B:AB:AA:F2:B9:CC:74:98:FA:2C:6B:72:67:A2:49:8B:02:28:07:F7
Authority key identifier: 50:09:7F:B5:8C:6F:6A:44:1D:8E:D7:50:00:77:3B:4D:09:85:67:46
Certificate issuer: /CN=50097fb58c6f6a441d8ed75000773b4d09856746
Certificate serial: 019A4E18FFC23DD1828ECD05025DFD860B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft
Manifest number: 0B2E
Signing time: Tue 04 Nov 2025 09:00:52 +0000
Manifest this update: Tue 04 Nov 2025 09:00:52 +0000
Manifest next update: Wed 05 Nov 2025 09:00:52 +0000
Files and hashes: 1: UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl (hash: kk2/x+Q7Y+Izbgu3vQmxvT5btBRTc1poyRYdOPz0pKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:ff:c2:3d:d1:82:8e:cd:05:02:5d:fd:86:0b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50097fb58c6f6a441d8ed75000773b4d09856746
Validity
Not Before: Nov 4 09:00:52 2025 GMT
Not After : Nov 5 09:00:52 2025 GMT
Subject: CN=1babaaf2b9cc7498fa2c6b7267a2498b022807f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ce:25:89:5d:08:00:2d:73:d3:ad:a6:46:ee:
e8:db:07:05:f4:4c:91:25:e0:cd:51:4e:46:f3:61:
91:64:5e:e7:73:31:ab:94:5e:26:ef:91:e9:e5:d6:
11:c3:3e:67:fe:93:23:0b:5a:fc:df:91:44:eb:a2:
0d:48:9f:1e:65:d3:b0:f0:00:58:7e:21:e6:70:7f:
3b:5b:6a:f2:8d:c3:34:1a:f5:48:68:e7:0c:f9:62:
d0:1b:70:e5:36:1d:7b:7a:d2:46:06:76:7e:9f:e4:
e0:fc:76:69:a1:81:8a:95:fd:dc:66:b5:c0:30:56:
c0:ed:e5:07:9b:00:3a:8e:52:8e:12:14:60:01:b0:
4d:f9:a0:f1:24:39:5e:2d:b1:f8:bc:34:66:c2:a5:
e4:e2:13:fb:0a:81:99:fc:ad:99:1c:bb:2c:bc:9e:
fa:e1:e8:c8:ab:e1:28:46:83:e7:6d:19:dc:fd:69:
2f:81:ab:ee:8c:95:15:b0:ef:f4:9b:0b:a8:9d:d6:
6c:8a:d9:f9:61:25:3e:04:33:07:2a:90:75:d3:46:
d7:8b:f6:46:90:7c:d0:0d:49:01:3f:34:31:08:4e:
d7:77:e2:8f:d9:53:b3:04:03:11:0d:9b:9d:45:6b:
80:d9:be:fd:76:d0:22:a8:78:16:8e:6b:9f:0f:3c:
e9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AB:AA:F2:B9:CC:74:98:FA:2C:6B:72:67:A2:49:8B:02:28:07:F7
X509v3 Authority Key Identifier:
keyid:50:09:7F:B5:8C:6F:6A:44:1D:8E:D7:50:00:77:3B:4D:09:85:67:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e1:6c:46:01:3a:63:88:16:8a:71:c7:e2:22:c9:74:6b:1e:
09:60:8f:75:3f:87:5a:7c:26:42:93:1f:56:6b:be:f8:93:30:
24:26:c3:7c:62:9a:ce:12:ff:49:19:05:7f:4a:7f:c2:c7:a1:
a5:4d:a4:4c:c3:69:92:71:58:80:43:9b:9e:8d:86:66:fd:66:
a4:ce:74:46:ad:a7:52:19:f0:0c:3a:45:b2:68:3f:18:f8:ea:
b5:b1:72:48:37:b7:14:89:5b:30:03:57:68:66:c4:da:ea:52:
ba:71:92:64:c5:46:78:43:b9:9f:d5:12:b2:a5:6b:5a:d8:35:
99:65:ae:c3:f4:52:bd:9a:90:3a:7b:b1:54:2b:4d:20:3d:9d:
33:25:5a:0a:55:df:f5:e6:f2:b5:4d:20:6c:ac:5a:74:50:bb:
dc:6b:16:91:cf:29:5c:f6:16:8b:e4:9a:29:b5:87:ec:7f:d9:
e0:4e:eb:18:56:39:8c:eb:7e:a4:53:92:51:ce:6b:0d:b4:b9:
0d:f7:76:74:b4:36:0d:a3:3a:5c:ee:0f:4b:3e:b7:c2:c0:85:
ff:1a:fd:58:a7:fb:b9:74:d0:ef:0a:3a:d4:9b:1c:4e:4a:76:
b6:1c:05:b6:5a:be:b1:4b:05:f2:e2:61:e4:d4:58:87:5d:3a:
b7:15:c3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:17 2025 by rpki-client