Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
File: ujSP3hs60izyj-ZAMK4v5PIst_s.mft (raw, json)
Hash identifier: k0NU7NvRA446ub8slqnqLtDmFPmc/X8a3XYHZB8gWpM=
Subject key identifier: 3D:BC:57:53:76:80:4F:D6:0A:7A:E0:FC:D9:B4:7C:86:8D:A1:DA:44
Authority key identifier: BA:34:8F:DE:1B:3A:D2:2C:F2:8F:E6:40:30:AE:2F:E4:F2:2C:B7:FB
Certificate issuer: /CN=ba348fde1b3ad22cf28fe64030ae2fe4f22cb7fb
Certificate serial: 019A52D1B27CCE407FCB73F15FB7B33E47AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
Manifest number: 13EE
Signing time: Wed 05 Nov 2025 07:01:05 +0000
Manifest this update: Wed 05 Nov 2025 07:01:05 +0000
Manifest next update: Thu 06 Nov 2025 07:01:05 +0000
Files and hashes: 1: ujSP3hs60izyj-ZAMK4v5PIst_s.crl (hash: yQGceRO81h0VJHeDY2hTRJ8PopVWeT8mJ8/q5o9Uf54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:b2:7c:ce:40:7f:cb:73:f1:5f:b7:b3:3e:47:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba348fde1b3ad22cf28fe64030ae2fe4f22cb7fb
Validity
Not Before: Nov 5 07:01:05 2025 GMT
Not After : Nov 6 07:01:05 2025 GMT
Subject: CN=3dbc575376804fd60a7ae0fcd9b47c868da1da44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c2:a6:89:0b:2e:bb:6a:f0:f3:d2:9d:bf:8d:
14:36:9a:d7:f2:11:bd:e4:44:b6:d2:c5:d1:6f:73:
e5:e8:a7:69:d2:dc:48:c5:4d:bd:13:7d:50:3b:b2:
57:d9:a6:f5:93:28:c8:ec:4e:20:1d:02:a1:4a:aa:
49:2e:86:05:ad:1f:8a:e1:72:14:8f:0a:ce:bd:5a:
87:0d:16:43:29:23:76:32:7d:d4:a3:3f:c2:6a:02:
b5:36:8b:30:32:d0:40:8e:50:1b:c4:c2:f5:8b:ad:
05:1c:29:96:49:e5:60:c9:cc:ae:22:89:1c:2a:72:
cf:32:24:33:7d:d4:56:f5:58:25:c7:06:38:a5:12:
f4:75:e2:b1:03:8c:2d:f8:ba:7e:e1:8c:92:bf:5c:
80:13:38:1a:b3:39:93:16:c5:dc:cd:a4:24:91:f6:
63:28:15:c7:0d:30:63:20:b4:37:73:cd:83:24:4e:
16:52:56:9c:66:b5:cf:4f:68:5c:b0:d1:c6:dd:7a:
47:62:ae:64:6c:23:0b:a1:17:81:49:4a:81:f4:0a:
d9:cc:33:2d:25:72:e9:fe:de:02:e3:e4:8f:05:f2:
69:ab:2c:9b:5b:b5:81:b7:15:f2:d6:3e:b0:52:ce:
76:31:d0:5f:d9:68:14:4b:ab:af:7d:22:64:aa:a8:
ce:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:BC:57:53:76:80:4F:D6:0A:7A:E0:FC:D9:B4:7C:86:8D:A1:DA:44
X509v3 Authority Key Identifier:
keyid:BA:34:8F:DE:1B:3A:D2:2C:F2:8F:E6:40:30:AE:2F:E4:F2:2C:B7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b7:b0:16:c4:c0:57:d5:1a:a9:9c:0d:1a:ff:23:a3:0f:e4:
84:12:a2:81:54:dd:87:f3:65:10:a1:d6:06:0c:db:46:ba:f1:
a8:2c:34:a5:2a:ba:ee:29:e7:38:78:09:09:47:87:3e:9a:b2:
de:d6:ac:7d:ed:01:79:92:41:a9:41:6f:1b:f3:b5:58:f1:01:
95:8a:3c:6c:50:cc:d2:7e:73:0c:1e:56:38:01:a5:d1:84:30:
6b:f5:06:39:7b:1b:2a:b8:18:9f:a7:4e:db:c5:38:6d:73:fc:
8a:e1:f4:f8:74:e6:7b:35:aa:5a:b3:50:5e:72:fb:6d:19:6e:
c7:3b:de:d3:15:4d:44:54:24:10:dd:e0:9f:7a:7d:75:9a:37:
f8:42:3c:ed:0f:c4:b7:e3:8e:d3:ef:61:fb:51:86:44:29:4d:
c0:2e:d5:0d:e2:99:39:be:c2:63:03:c1:6c:0b:9d:fb:f9:80:
9f:4d:f5:48:f1:97:5d:a9:a9:14:09:d7:df:5e:78:34:b1:56:
80:e1:7f:5c:ff:69:a0:c5:a6:b2:8a:9b:f6:9f:ae:7d:04:76:
ea:c9:44:73:d2:7b:3a:bd:b1:ae:0a:91:09:64:8c:d4:99:2a:
1a:d0:02:e1:3b:30:90:1f:af:50:3a:ed:e1:c7:1d:77:c4:2a:
06:22:d7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:00:11 2025 by rpki-client