Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft
File: Uuopd4vrKAAYKU4jlcv6AELI94o.mft (raw, json)
Hash identifier: hrmuUfyrCdiDVd3F9kUPIQmdExyKsi1yiAP4WxM6qiU=
Subject key identifier: F7:D2:DF:BB:52:2C:8D:85:4D:42:AE:C7:37:8F:D4:A0:F3:4D:F4:EB
Authority key identifier: 52:EA:29:77:8B:EB:28:00:18:29:4E:23:95:CB:FA:00:42:C8:F7:8A
Certificate issuer: /CN=52ea29778beb280018294e2395cbfa0042c8f78a
Certificate serial: 019A50E3BA06B35113AE65D6DA4442D0FD74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uuopd4vrKAAYKU4jlcv6AELI94o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft
Manifest number: 0936
Signing time: Tue 04 Nov 2025 22:01:32 +0000
Manifest this update: Tue 04 Nov 2025 22:01:32 +0000
Manifest next update: Wed 05 Nov 2025 22:01:32 +0000
Files and hashes: 1: Uuopd4vrKAAYKU4jlcv6AELI94o.crl (hash: 4NEC8k1e6x92TXxVbiw+tUhGAHKwLaJGGbELJEsjFD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uuopd4vrKAAYKU4jlcv6AELI94o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:ba:06:b3:51:13:ae:65:d6:da:44:42:d0:fd:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ea29778beb280018294e2395cbfa0042c8f78a
Validity
Not Before: Nov 4 22:01:32 2025 GMT
Not After : Nov 5 22:01:32 2025 GMT
Subject: CN=f7d2dfbb522c8d854d42aec7378fd4a0f34df4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2a:a0:0a:c5:a1:5c:08:6f:52:d5:47:ba:ba:
eb:0e:f9:5a:ef:a0:b1:e8:58:13:02:fb:10:dc:78:
2e:12:fb:66:85:dc:45:7f:db:1f:aa:7d:aa:c2:0f:
81:4b:77:28:d6:d3:2c:94:61:dd:aa:c5:25:17:4d:
55:2b:8f:11:2a:e3:10:a6:7f:16:83:48:26:fd:b7:
a1:1f:76:8d:b2:06:97:e7:01:26:88:f5:6b:04:d2:
78:0e:b4:12:94:36:61:36:5e:36:b2:e2:04:69:a7:
7d:2e:2c:7b:c3:44:0a:f9:60:4d:20:c2:e4:5b:d1:
21:fb:bd:57:11:5c:3d:c7:52:da:1a:f8:20:11:77:
fa:74:b9:86:7e:d9:7c:af:de:55:56:95:dc:a5:e4:
57:cb:b2:28:8a:b7:89:f4:71:31:b1:b2:46:ef:fe:
e7:86:c0:a4:e8:ec:17:2d:4b:1a:89:5a:97:e6:99:
f5:77:d5:7a:29:be:46:a5:53:39:79:80:01:7a:ca:
76:69:70:68:d4:8c:17:9b:6f:80:cc:0f:fc:b9:64:
5c:be:54:3c:38:89:47:0f:aa:74:79:c4:25:05:c1:
77:f3:dd:be:a6:c6:11:24:f7:a6:cd:2d:03:d6:51:
86:43:70:30:ab:cf:5a:66:1a:5f:75:10:19:1f:16:
c0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D2:DF:BB:52:2C:8D:85:4D:42:AE:C7:37:8F:D4:A0:F3:4D:F4:EB
X509v3 Authority Key Identifier:
keyid:52:EA:29:77:8B:EB:28:00:18:29:4E:23:95:CB:FA:00:42:C8:F7:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uuopd4vrKAAYKU4jlcv6AELI94o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:fa:eb:43:ef:0c:26:66:93:81:23:4e:72:fa:7d:6b:67:71:
70:13:e4:6c:2b:c0:47:ef:01:34:be:e5:66:36:76:67:fc:68:
75:11:0c:04:e4:2d:38:e9:18:7f:72:2e:df:5f:38:bc:d9:7d:
fc:c7:b7:71:aa:77:65:2b:6d:31:0e:28:7a:c3:ff:f7:f6:fa:
39:c8:03:93:d9:86:9d:40:03:93:9a:04:15:36:f0:63:1a:41:
e5:78:31:e8:de:ad:0f:b6:51:ab:f4:84:20:38:28:30:90:2f:
18:53:3e:69:23:99:36:a8:14:f1:62:49:eb:2f:d3:67:0d:86:
47:c9:5e:3e:c7:05:1c:96:2e:fc:99:2e:2e:81:8d:e1:dd:00:
86:a3:f4:6c:be:11:b8:bf:a4:cd:83:2a:1a:20:71:50:aa:b7:
72:8f:75:39:06:6f:af:cf:bf:ec:f8:fc:b6:dc:4e:20:74:c3:
11:54:2d:5e:c0:c9:a0:5d:c2:9a:d1:99:18:5d:5a:6d:78:fc:
69:13:94:f3:9b:29:7f:d9:f9:75:57:de:71:0d:e1:70:8f:bc:
03:cb:8e:66:1f:0b:c9:0d:c8:65:4f:ca:01:ed:66:1e:40:e5:
a0:20:cf:2e:ba:16:63:ba:92:b5:3e:b4:58:5c:d4:c2:94:a6:
98:75:74:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:54:20 2025 by rpki-client