Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
File: Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft (raw, json)
Hash identifier: dghmfTjUe4KD7uLEHP9DuuTp+wyLO2cFPBRy/sIY58g=
Subject key identifier: 26:4B:E9:57:69:21:87:0F:41:C3:85:65:BC:92:87:DB:86:0F:76:F9
Authority key identifier: 51:FE:4D:48:AA:01:3D:40:E0:6C:31:2F:F7:10:48:9B:20:DF:E0:7F
Certificate issuer: /CN=51fe4d48aa013d40e06c312ff710489b20dfe07f
Certificate serial: 019A50E3BD3A7F95951088CABB87C82A44FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
Manifest number: 0DF3
Signing time: Tue 04 Nov 2025 22:01:33 +0000
Manifest this update: Tue 04 Nov 2025 22:01:33 +0000
Manifest next update: Wed 05 Nov 2025 22:01:33 +0000
Files and hashes: 1: Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl (hash: qzqScxZpQYCldDYBNei7wQgUiRP2J6Gw7eI42CF9iqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:bd:3a:7f:95:95:10:88:ca:bb:87:c8:2a:44:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51fe4d48aa013d40e06c312ff710489b20dfe07f
Validity
Not Before: Nov 4 22:01:33 2025 GMT
Not After : Nov 5 22:01:33 2025 GMT
Subject: CN=264be9576921870f41c38565bc9287db860f76f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:52:4c:b3:3a:61:1a:4b:c3:fa:eb:6d:b3:71:
01:ca:31:5c:37:b8:67:df:b1:90:d7:16:01:9a:ee:
e4:f1:08:a2:80:f7:a6:6c:b7:a2:53:15:7d:a4:e6:
35:22:83:1a:b3:0d:c2:39:ca:57:3c:ef:61:38:68:
ac:a8:ca:a4:49:9c:60:73:22:64:bd:2a:69:d8:93:
04:60:5c:78:9a:fe:f2:9c:3a:2f:7d:d3:68:cd:e5:
6e:f5:dd:af:82:71:80:59:91:46:88:65:7a:6c:19:
ac:b7:7c:77:4c:dd:fc:db:cc:1d:21:62:9d:4d:b1:
aa:79:39:a9:c9:6b:a1:e8:4d:12:ce:88:ec:95:b0:
06:3d:9b:0f:17:72:9e:fb:c9:f3:cc:57:9c:e4:c8:
e0:fb:06:19:09:79:16:d1:2d:68:07:8c:56:aa:5a:
71:aa:f8:91:bc:74:25:de:66:03:34:15:05:f6:20:
27:7a:7c:d3:2f:44:c3:71:22:b1:27:cd:6e:b0:63:
a9:8e:39:f0:56:d2:83:c8:6e:c7:89:91:26:93:dc:
42:7b:5a:a9:ec:98:26:50:cd:e8:16:fe:00:14:03:
bb:b7:e0:1c:ca:5b:0d:29:15:6d:37:aa:4b:52:a4:
2a:9a:61:f0:f6:dc:80:58:f1:86:24:c0:72:d5:19:
30:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4B:E9:57:69:21:87:0F:41:C3:85:65:BC:92:87:DB:86:0F:76:F9
X509v3 Authority Key Identifier:
keyid:51:FE:4D:48:AA:01:3D:40:E0:6C:31:2F:F7:10:48:9B:20:DF:E0:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:6b:69:94:1c:36:b9:03:de:77:e0:cc:21:f1:06:b0:71:82:
14:ed:60:63:bc:09:d3:d8:bb:cf:dd:12:63:ac:67:6b:ee:10:
fd:5b:ed:1b:8c:d8:bf:ee:1f:51:54:20:2e:43:d5:01:0a:eb:
e9:07:45:a3:60:77:d4:c9:eb:74:64:b5:73:24:7d:2c:5e:62:
a2:c0:62:c3:85:7c:8f:83:d6:a3:42:64:d8:70:6c:0d:9d:31:
37:8b:34:00:c7:a0:47:67:9a:ef:1e:fb:59:d0:56:40:27:15:
fb:93:d4:38:9d:b5:2b:d4:62:52:77:27:05:5b:7d:43:ad:34:
9e:b4:1a:f2:51:af:bd:fc:5b:4c:42:a3:a9:f5:4e:d2:9e:a1:
18:fd:65:b4:2c:f0:4f:d3:1e:02:c2:2b:50:86:f5:b4:ab:69:
60:d7:03:b1:1c:4b:9a:59:b2:f0:25:5e:0e:af:3a:42:78:7b:
46:54:c5:f7:f5:79:94:64:40:a5:b0:e7:86:b1:cb:66:d2:bc:
f7:46:a1:da:c4:c2:9f:f3:87:4f:50:37:44:97:89:29:ad:ba:
7b:4e:39:b4:1b:b7:5e:cd:3c:7c:4e:b8:33:b5:80:96:7b:c9:
3c:4d:e6:73:6c:f2:3c:11:09:63:f5:91:47:5c:da:91:9b:90:
f1:74:b4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:22:39 2025 by rpki-client