Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
File: UrDyNFHcBfp-z50etB3T0TdWRTs.mft (raw, json)
Hash identifier: j09cobboIDn7b9ia4AZGC4qcOamZFVu2mYLsNJc0oAM=
Subject key identifier: 04:C6:1A:6F:56:BA:0F:07:A8:73:F4:C8:12:9B:A3:5E:CD:FA:CF:66
Authority key identifier: 52:B0:F2:34:51:DC:05:FA:7E:CF:9D:1E:B4:1D:D3:D1:37:56:45:3B
Certificate issuer: /CN=52b0f23451dc05fa7ecf9d1eb41dd3d13756453b
Certificate serial: 019A4D7452AA99C4DF906910F952925AD6D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 06:01:00 +0000
Manifest this update: Tue 04 Nov 2025 06:01:00 +0000
Manifest next update: Wed 05 Nov 2025 06:01:00 +0000
Files and hashes: 1: UrDyNFHcBfp-z50etB3T0TdWRTs.crl (hash: i7JmSrfidNE1fcT5gXKWtjUo16Z3X2fohcyQxK/BItQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:52:aa:99:c4:df:90:69:10:f9:52:92:5a:d6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b0f23451dc05fa7ecf9d1eb41dd3d13756453b
Validity
Not Before: Nov 4 06:01:00 2025 GMT
Not After : Nov 5 06:01:00 2025 GMT
Subject: CN=04c61a6f56ba0f07a873f4c8129ba35ecdfacf66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:90:e8:f1:ac:88:1a:24:45:a8:2c:aa:99:a4:
50:01:67:d6:0f:e1:6c:6f:69:e5:52:ec:14:ad:b9:
a0:56:0d:01:11:1a:35:c8:eb:58:a4:30:8d:c5:bc:
d7:80:a1:02:5a:c1:ca:10:24:be:e9:97:5e:03:79:
64:bd:24:8c:53:67:5c:b3:d5:52:90:e5:8f:c6:ca:
42:ca:26:a4:ae:b5:49:00:25:d1:68:21:75:dc:97:
97:e5:ed:5c:3c:d9:a5:45:07:e2:0a:0b:48:88:ad:
7b:16:45:c1:10:fc:91:d3:c1:a1:e2:2f:63:eb:dc:
ce:b4:0d:ed:7b:d5:18:04:8d:2b:2a:47:66:4c:e6:
1e:3f:bd:74:59:7a:e0:47:c8:99:ff:4a:dd:fc:85:
4d:2f:80:55:2d:c6:6c:be:d1:10:85:f5:69:c3:ed:
66:07:5e:05:7c:cc:a9:bb:e3:24:a7:42:2c:2d:84:
99:6d:d8:13:73:a0:f8:5a:1d:bb:2e:34:c2:e4:eb:
f8:af:8b:68:0a:37:49:1a:93:8d:1f:81:d5:3c:91:
a2:90:e4:fc:67:29:6c:a2:d7:28:65:bb:66:e2:93:
76:50:61:05:bc:b0:54:ac:80:cf:b5:4e:a3:bd:16:
76:0c:22:47:1c:bb:30:d3:b1:e8:0a:b4:c9:cb:c1:
2b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C6:1A:6F:56:BA:0F:07:A8:73:F4:C8:12:9B:A3:5E:CD:FA:CF:66
X509v3 Authority Key Identifier:
keyid:52:B0:F2:34:51:DC:05:FA:7E:CF:9D:1E:B4:1D:D3:D1:37:56:45:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:39:32:dc:94:f2:b7:a1:08:b8:b1:27:c8:1d:66:64:2a:d9:
3f:00:ca:fb:20:ec:03:44:25:50:7d:d4:e1:b0:0e:74:aa:a2:
07:4c:ff:b1:56:11:09:c7:23:4f:88:3b:0b:9d:16:f3:f3:ea:
73:15:86:b6:00:41:be:79:40:9c:cb:51:08:1d:47:e0:d5:89:
86:17:86:be:89:d2:22:e2:06:ba:08:b2:d7:af:b6:fb:f4:28:
b9:b4:59:8a:fb:7c:1f:b3:48:03:ce:d6:24:32:27:e3:95:d3:
0d:2e:f3:c2:40:e2:ca:b7:f0:b3:08:9a:ea:2a:53:ee:89:fe:
56:bb:10:eb:26:d1:70:c8:46:be:1e:fe:b2:8b:35:f9:cf:f0:
5f:d4:7c:2c:44:89:4e:28:ce:4b:2b:e1:df:b3:67:0f:90:e2:
1f:b5:d8:4d:01:31:8a:a1:2f:55:08:31:6f:c0:0c:79:6d:9f:
bf:b5:dc:7b:17:0d:cc:97:2d:01:6e:40:98:f4:5b:08:ac:fe:
39:08:da:08:45:e3:96:62:ae:c3:1d:83:fe:0f:aa:1e:2a:82:
0d:ef:ce:41:fa:4a:fc:80:28:9f:1f:79:b3:17:43:2d:50:e3:
66:fa:b1:ef:f8:28:13:a5:33:e1:d3:2e:76:f1:20:5e:38:11:
d5:15:9b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:01 2025 by rpki-client