Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.mft
File: URG_0pCvtSDrpBT3ijl1C36Z9MU.mft (raw, json)
Hash identifier: YWgLT6rFHgS4WQGEXkABA++aELirvfT9aH/iU2+Uk+g=
Subject key identifier: 03:59:16:9A:86:D3:07:9C:81:5B:17:AD:7C:7A:CB:C7:B8:90:37:AD
Authority key identifier: 51:11:BF:D2:90:AF:B5:20:EB:A4:14:F7:8A:39:75:0B:7E:99:F4:C5
Certificate issuer: /CN=5111bfd290afb520eba414f78a39750b7e99f4c5
Certificate serial: 019A4DE1585311C8958FB677A9780CE2D613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/URG_0pCvtSDrpBT3ijl1C36Z9MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.mft
Manifest number: 0419
Signing time: Tue 04 Nov 2025 08:00:04 +0000
Manifest this update: Tue 04 Nov 2025 08:00:04 +0000
Manifest next update: Wed 05 Nov 2025 08:00:04 +0000
Files and hashes: 1: URG_0pCvtSDrpBT3ijl1C36Z9MU.crl (hash: 6Fzdg1Kn9r02k3M0KxuwruiBkdzqfdJ5OAbNExB9zgs=)
2: zVUl367uAuWMVUPRoi840j0jiPg.roa (hash: qS11jDGkCNzMKbCIBI9UQyUrb/zBjJR7FmPuRC9w0J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.mft
rsync://rpki.ripe.net/repository/DEFAULT/URG_0pCvtSDrpBT3ijl1C36Z9MU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:58:53:11:c8:95:8f:b6:77:a9:78:0c:e2:d6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5111bfd290afb520eba414f78a39750b7e99f4c5
Validity
Not Before: Nov 4 08:00:04 2025 GMT
Not After : Nov 5 08:00:04 2025 GMT
Subject: CN=0359169a86d3079c815b17ad7c7acbc7b89037ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:63:ef:d2:03:c3:ec:3d:94:c6:26:7e:b6:03:
b3:0d:d4:39:9a:55:c3:c8:91:c1:de:08:bc:9f:7f:
cb:1c:99:01:d9:eb:2b:2e:67:f1:60:ce:5e:41:88:
ed:22:b3:17:69:ac:b8:f9:96:a2:49:b1:b2:8d:fc:
65:81:ef:36:94:73:51:94:2a:30:99:ed:45:65:df:
2e:f9:d8:63:d0:ee:f8:7d:10:cd:f5:b0:17:0c:af:
69:6e:65:ed:d6:cc:04:b6:c1:30:a7:2a:75:4c:00:
e1:6d:9d:d8:10:7b:11:91:5e:0d:ed:c4:dd:79:c5:
44:4b:b3:f5:45:3b:e3:7c:dd:3c:f7:3c:77:73:74:
63:ba:78:96:d9:30:2d:73:ce:22:84:42:1c:37:16:
d1:d8:d8:f6:da:ed:69:b5:50:9c:30:b1:a9:25:2f:
96:fb:1e:15:c8:a0:41:05:29:f5:a0:3b:e3:7f:04:
f3:59:e8:bf:53:c8:b6:fb:91:23:0a:dd:ce:b5:aa:
09:87:2a:14:12:47:64:c0:89:50:13:6b:04:ac:e0:
3c:cf:cc:e4:f5:ec:17:9f:91:49:8a:86:65:35:4d:
0f:09:65:b5:8b:f2:80:2a:b9:28:9e:62:17:49:dc:
5f:fe:7a:1d:95:8d:6c:8e:02:99:39:af:17:41:f3:
f1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:59:16:9A:86:D3:07:9C:81:5B:17:AD:7C:7A:CB:C7:B8:90:37:AD
X509v3 Authority Key Identifier:
keyid:51:11:BF:D2:90:AF:B5:20:EB:A4:14:F7:8A:39:75:0B:7E:99:F4:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/URG_0pCvtSDrpBT3ijl1C36Z9MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:15:d3:4c:aa:c9:7b:66:a5:20:f5:2f:aa:6e:d5:49:e0:08:
b9:e7:4a:21:ca:8c:07:a4:60:1a:1d:95:47:08:f2:3c:d8:67:
74:a9:c6:ce:ed:ae:b5:e6:ba:30:b0:02:f7:c7:fe:b9:36:d2:
a5:69:c4:6c:57:a8:7a:54:3c:ab:0f:21:ee:ab:06:00:2c:59:
f4:34:4d:d7:74:cb:26:d3:82:5d:1f:65:7b:b9:b1:d8:33:db:
77:08:dc:9b:d6:0c:ec:f9:f8:0c:35:4b:e1:3d:d1:d3:12:f1:
1f:69:51:bd:cc:43:6d:d7:13:a2:e7:b7:7c:c1:2a:04:ba:3c:
73:de:bb:b3:33:e9:f7:ea:ee:83:91:6e:31:f7:5a:ea:40:dd:
25:6f:ba:05:fc:cb:a1:28:d6:9d:35:0b:e3:c6:6d:18:43:ea:
a8:aa:9e:2a:fd:63:a0:d4:b0:ee:8c:21:95:a7:57:82:fc:f3:
1a:ab:e0:bd:e7:0f:8b:20:43:3a:f7:a2:dc:57:eb:7c:a0:97:
77:9f:17:bb:6f:47:b3:71:27:f9:5c:61:ba:3e:ba:4b:9a:70:
7e:df:77:7f:2b:8b:2f:20:38:c0:f9:64:81:82:37:9c:9c:83:
9a:1d:24:72:ac:db:98:e4:90:87:22:f7:bf:7d:26:6e:a7:01:
7a:31:73:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:17:40 2025 by rpki-client