Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
File: kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft (raw, json)
Hash identifier: r7lVvMD9QlYNUDIEdTo+qDuxyj0q4bzAmYMEX5CQa5E=
Subject key identifier: B7:B7:28:09:C9:1F:12:4C:69:89:7B:00:A4:4B:7F:F8:2B:6E:2B:8C
Authority key identifier: 91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63
Certificate issuer: /CN=9143c5f48c77a79c985f5e5362e082ad54e23063
Certificate serial: 019A4EF42EA0CA14603E2D9800786C1AA957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
Manifest number: 0DF2
Signing time: Tue 04 Nov 2025 13:00:16 +0000
Manifest this update: Tue 04 Nov 2025 13:00:16 +0000
Manifest next update: Wed 05 Nov 2025 13:00:16 +0000
Files and hashes: 1: kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl (hash: ockmuokQSe5VbT3bqRwdqKj4QGElkMbXBdZ/bYkIMNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:2e:a0:ca:14:60:3e:2d:98:00:78:6c:1a:a9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9143c5f48c77a79c985f5e5362e082ad54e23063
Validity
Not Before: Nov 4 13:00:16 2025 GMT
Not After : Nov 5 13:00:16 2025 GMT
Subject: CN=b7b72809c91f124c69897b00a44b7ff82b6e2b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a8:54:c2:c0:54:69:0e:19:e1:1d:49:3a:93:
6a:33:2c:60:02:3e:92:56:92:ac:26:6a:c7:31:36:
53:7d:6d:d5:be:d3:c3:48:07:60:09:40:ed:90:f6:
88:0c:4b:3d:66:42:04:69:14:4d:4a:40:4b:2d:6b:
b4:1f:44:69:08:a4:0e:f7:ef:96:85:0e:4a:ed:09:
dc:5d:4e:d4:2b:a7:49:ed:02:fe:20:9f:44:d1:a2:
c6:60:fd:4a:4a:62:33:7c:92:72:ba:4b:a0:b0:ce:
08:0a:f1:44:60:d1:88:d3:02:18:5c:f8:71:f2:98:
23:a3:51:ff:3b:d7:15:7d:16:e0:23:a3:89:b9:c5:
fa:0f:47:b4:42:cb:d9:6c:1d:3f:c9:fc:43:a0:7c:
bc:cc:9b:02:ba:95:4e:5c:ba:4c:6d:2d:06:c7:c3:
e7:1c:55:cd:5a:e9:ad:89:68:e2:76:d6:29:f4:a1:
66:4b:1d:a2:3d:1f:12:7f:25:04:09:96:c9:3f:ae:
09:5f:3d:e2:b2:a9:8f:41:9f:f7:26:95:74:64:98:
1e:e9:a5:5e:8f:30:06:5a:d3:16:70:58:15:e5:aa:
1a:e0:7d:e6:f3:4f:ef:f1:61:e0:e5:3b:e0:ba:09:
18:c8:5e:15:ce:a9:c0:e2:2e:49:0f:fc:d0:05:8d:
8d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B7:28:09:C9:1F:12:4C:69:89:7B:00:A4:4B:7F:F8:2B:6E:2B:8C
X509v3 Authority Key Identifier:
keyid:91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:3d:21:fc:aa:11:51:a3:11:d8:75:f6:ee:ab:15:42:ae:e6:
87:76:cd:57:59:73:6f:3d:94:fe:3c:71:b3:3c:a5:22:4c:81:
3a:4e:25:b0:1e:ed:57:64:fc:9f:35:5d:e5:a0:32:03:85:1d:
bf:6c:c2:4d:67:29:32:ea:24:cc:fc:0f:d2:c1:1c:98:1f:bc:
32:ee:67:a5:5a:0a:60:f7:3e:d8:a3:ac:11:93:6f:4b:99:d9:
92:35:16:b0:9e:82:f9:b5:8a:d3:02:77:38:90:fd:df:f8:1c:
5e:f7:56:89:d2:8f:2a:8c:43:e0:be:33:58:91:c7:6f:26:56:
0e:e5:a7:04:91:7d:58:6e:15:86:fc:34:39:51:00:81:d4:7e:
50:04:db:3f:57:8c:cc:65:db:41:0a:82:e7:12:8e:cb:54:2d:
6e:9c:c2:d3:85:41:cd:ef:f5:f7:78:5a:c0:b1:2f:89:fa:5c:
8b:83:f7:11:fb:50:39:36:9b:db:06:9f:01:40:05:0f:44:fa:
bf:1d:04:e9:6d:c6:89:09:6a:ed:31:7b:ed:7c:3e:08:ce:31:
d1:82:96:bb:4c:a9:53:61:4c:33:af:6a:0d:b4:28:fa:c2:42:
f9:c7:11:6e:a6:ca:10:58:f0:e5:9a:34:89:59:bc:fc:8e:49:
4b:e1:37:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:14 2025 by rpki-client