Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
File: vUltYJRIpG2YZUJqjp7aWICI0Fc.mft (raw, json)
Hash identifier: nOMUYsvPhP6GY0n07EgjovwrLHcc+vvmnHsWFUyzU8U=
Subject key identifier: AE:F1:90:50:3E:76:28:32:94:0F:09:93:C8:CB:EC:F5:70:82:F6:AA
Authority key identifier: BD:49:6D:60:94:48:A4:6D:98:65:42:6A:8E:9E:DA:58:80:88:D0:57
Certificate issuer: /CN=bd496d609448a46d9865426a8e9eda588088d057
Certificate serial: 019A50E43ACEE4F0410C2C70104D7E892591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
Manifest number: 1342
Signing time: Tue 04 Nov 2025 22:02:05 +0000
Manifest this update: Tue 04 Nov 2025 22:02:05 +0000
Manifest next update: Wed 05 Nov 2025 22:02:05 +0000
Files and hashes: 1: vUltYJRIpG2YZUJqjp7aWICI0Fc.crl (hash: RXTl7oaP7FpTYUYvnnGDBSE+I7sowISsgglJgxFVxgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:3a:ce:e4:f0:41:0c:2c:70:10:4d:7e:89:25:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd496d609448a46d9865426a8e9eda588088d057
Validity
Not Before: Nov 4 22:02:05 2025 GMT
Not After : Nov 5 22:02:05 2025 GMT
Subject: CN=aef190503e762832940f0993c8cbecf57082f6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2b:1c:a5:ab:5e:39:83:59:d9:bc:8e:5b:da:
5b:5c:66:af:12:7d:cb:5f:f6:85:17:66:b2:20:6e:
09:b0:7d:6d:ca:68:a1:ee:33:b7:45:60:ad:0e:12:
ce:d8:44:e1:8f:f1:f5:45:35:4a:2b:af:27:38:c6:
12:26:0a:11:f8:22:23:3d:5b:6a:b1:62:e8:77:86:
1b:c1:a3:4c:a6:95:c4:dd:b9:e8:ed:7c:e8:e8:a6:
9e:fb:a5:68:dd:b2:f7:57:cb:45:39:b7:5d:1c:59:
d4:57:a8:9d:6c:5f:ca:45:e6:04:fe:f7:85:d8:1e:
ac:39:43:26:7e:9f:a7:fd:aa:41:d6:bc:a1:18:79:
66:0d:de:09:44:99:f1:7b:5a:02:25:86:0e:ce:f6:
15:7d:e3:e6:6c:0b:0a:2b:30:13:d7:cc:46:ec:4f:
77:44:16:f4:ee:57:f3:d9:ef:1e:dc:74:32:04:7d:
79:21:ad:f4:de:6d:2e:1b:3f:37:42:0d:fa:ca:5f:
6e:1a:2e:b4:ba:f9:e5:21:44:f0:c7:15:ac:33:f7:
d8:f9:43:fd:57:1a:ea:91:bd:df:74:95:ba:b8:fd:
62:99:c7:23:e8:ac:ea:ae:a8:a4:7a:10:66:a8:b5:
17:7e:1e:9b:8f:f2:81:ca:78:7e:1e:37:22:3f:50:
74:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F1:90:50:3E:76:28:32:94:0F:09:93:C8:CB:EC:F5:70:82:F6:AA
X509v3 Authority Key Identifier:
keyid:BD:49:6D:60:94:48:A4:6D:98:65:42:6A:8E:9E:DA:58:80:88:D0:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:4d:af:d4:ac:3c:f1:8d:50:1e:53:28:31:d6:35:fe:aa:61:
c6:c9:bf:4e:04:26:19:66:92:3c:45:e0:fa:2f:3a:60:88:a0:
86:1c:16:35:82:77:b9:a4:53:9c:f7:db:8b:ce:a8:8c:b5:0d:
02:28:af:ea:29:8f:62:f4:ca:96:d1:ae:68:dc:c8:49:80:74:
48:3e:10:b9:14:3d:bb:90:b0:48:9e:b5:a7:16:a3:3b:2d:b9:
5d:f6:d4:09:25:4b:c4:e7:43:af:9e:4c:24:5e:24:27:52:3d:
84:be:a9:85:f2:4c:1a:b3:e3:a6:de:57:c7:81:cb:1d:24:46:
eb:33:1a:14:21:b4:ee:4a:a5:00:77:70:ec:af:df:bd:c4:9e:
00:2d:87:f1:1d:e7:2f:1d:b7:27:f5:13:84:25:08:5d:4a:60:
83:b6:4f:30:17:e9:70:bf:5f:2a:66:22:70:3f:c2:b6:17:54:
d3:fb:ef:50:96:c2:f6:00:e0:01:e5:dc:d0:43:ac:97:03:54:
70:6b:9b:33:56:21:42:c1:6f:97:a1:07:04:2f:c0:63:71:7a:
01:59:02:f7:b3:42:aa:88:a1:bd:5b:6f:f6:4d:7e:40:65:b2:
16:7f:dd:8c:3f:90:4a:49:bd:14:b4:e3:c1:63:2d:d0:b3:c3:
1f:4f:24:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:44:20 2025 by rpki-client