Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
File: ux1P6zEebC28c9UE_ISQzCFUY4k.mft (raw, json)
Hash identifier: e/pqSqqCQcP5abACT/U4nQIyP3kqvdW0kQYBM25PP8Q=
Subject key identifier: 3D:92:00:7E:AE:8B:65:86:7B:53:BF:A1:F5:6A:1A:4D:1B:79:E6:61
Authority key identifier: BB:1D:4F:EB:31:1E:6C:2D:BC:73:D5:04:FC:84:90:CC:21:54:63:89
Certificate issuer: /CN=bb1d4feb311e6c2dbc73d504fc8490cc21546389
Certificate serial: 019A4DE216B9CB0799A530332E6793D5B8BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
Manifest number: 044E
Signing time: Tue 04 Nov 2025 08:00:53 +0000
Manifest this update: Tue 04 Nov 2025 08:00:53 +0000
Manifest next update: Wed 05 Nov 2025 08:00:53 +0000
Files and hashes: 1: ux1P6zEebC28c9UE_ISQzCFUY4k.crl (hash: C6F99AAp2+9QmqSiyUMTtEGsrQv95UzueYTBivWSP+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:16:b9:cb:07:99:a5:30:33:2e:67:93:d5:b8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb1d4feb311e6c2dbc73d504fc8490cc21546389
Validity
Not Before: Nov 4 08:00:53 2025 GMT
Not After : Nov 5 08:00:53 2025 GMT
Subject: CN=3d92007eae8b65867b53bfa1f56a1a4d1b79e661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:ab:dc:97:19:05:dc:e7:0e:b7:a7:4e:10:4d:
9a:9e:37:70:22:4b:54:17:52:09:b9:d4:7d:1b:d6:
f5:f5:39:08:74:f8:1c:47:cf:64:8f:f0:d6:32:f1:
a5:e5:b0:38:ca:dc:ed:66:cc:78:bf:3b:5d:22:83:
a4:33:fb:f8:3e:49:fc:76:41:6e:aa:11:d5:86:e9:
ad:07:de:20:c4:bc:e7:c7:6e:b9:d6:9d:e0:bd:36:
47:82:49:25:a9:37:ad:1b:78:52:d2:82:44:9a:06:
4b:97:bc:fe:10:88:89:bf:e4:e3:6d:d8:ce:5a:48:
20:e3:ad:37:1e:3c:9c:01:a3:a4:f8:81:96:8d:af:
6b:7b:d0:49:39:1e:19:4d:cf:4e:52:94:c6:ef:02:
a3:0e:52:3f:60:97:22:4f:f0:9f:62:02:7f:c6:15:
7f:0b:50:21:74:15:82:83:44:4a:a0:19:af:2f:50:
11:76:b8:90:e1:9c:e3:80:28:cc:b7:42:fa:8c:91:
a8:7a:81:55:a9:b9:97:5d:4a:b1:d1:d6:ae:14:41:
15:4c:a7:14:9e:a5:0c:47:5e:30:a7:8b:02:55:71:
43:10:ce:1c:eb:ce:4c:5b:03:72:d2:9f:e4:0e:eb:
de:07:62:dd:df:8c:32:be:e5:69:46:7b:0f:f7:d8:
a3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:92:00:7E:AE:8B:65:86:7B:53:BF:A1:F5:6A:1A:4D:1B:79:E6:61
X509v3 Authority Key Identifier:
keyid:BB:1D:4F:EB:31:1E:6C:2D:BC:73:D5:04:FC:84:90:CC:21:54:63:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d9:89:f6:cc:05:b0:9d:24:72:d5:24:2a:64:00:d6:45:ba:
9f:25:79:b3:11:48:f2:48:1a:e3:39:fd:2b:55:eb:7a:9c:8c:
95:54:40:a0:0b:13:a4:65:db:d1:5b:c1:fc:a3:1b:b4:a4:c2:
bd:58:f1:96:21:a1:7e:c2:72:f0:8a:00:cf:3a:79:ec:a2:37:
07:12:db:dd:35:b7:7e:ec:76:9e:2e:fc:fb:d0:b5:06:60:ca:
e3:54:29:65:6c:0c:ec:78:c7:f7:dd:0d:07:95:59:c0:10:3e:
e7:2d:c8:ad:06:5d:38:a9:1e:62:6c:4a:35:de:60:7b:26:9b:
07:37:e4:45:e8:c1:c7:f6:e4:24:4d:fc:be:49:8c:77:4c:f8:
ee:0b:00:28:a2:4c:cd:27:f5:6e:98:f3:53:69:b5:fd:72:4b:
83:ab:5f:84:81:90:1f:02:f2:3e:06:31:c5:f7:54:7c:28:e0:
4f:89:1d:6c:aa:b8:a4:d3:45:43:a6:bf:a2:5d:99:16:38:d7:
78:48:a6:90:dc:9a:5e:3a:1e:ee:ac:f4:3f:5e:8e:8d:96:38:
44:a2:65:25:ff:ae:95:61:b9:f1:0e:e6:b2:80:78:4e:c8:b6:
b4:e0:0c:c9:fc:ad:b6:bf:f2:12:50:62:90:63:ec:08:10:d9:
dd:04:82:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:17 2025 by rpki-client