Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.mft
File: uq9sCLyjCMHHiw7tjvMLSgRoEY4.mft (raw, json)
Hash identifier: eg12uTGZbh3+Gq6kwzIhplRfUQhttP7lojrdI/7ySVw=
Subject key identifier: A1:48:8A:33:45:35:9A:92:68:81:9C:3B:DC:06:7D:3E:94:06:42:31
Authority key identifier: BA:AF:6C:08:BC:A3:08:C1:C7:8B:0E:ED:8E:F3:0B:4A:04:68:11:8E
Certificate issuer: /CN=baaf6c08bca308c1c78b0eed8ef30b4a0468118e
Certificate serial: 019A4E18E60F1F13350437DEBE9B323A2A19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uq9sCLyjCMHHiw7tjvMLSgRoEY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.mft
Manifest number: 068E
Signing time: Tue 04 Nov 2025 09:00:45 +0000
Manifest this update: Tue 04 Nov 2025 09:00:45 +0000
Manifest next update: Wed 05 Nov 2025 09:00:45 +0000
Files and hashes: 1: uq9sCLyjCMHHiw7tjvMLSgRoEY4.crl (hash: 1c9D9W1ewIhKvV2p1TXhlZuncMjTj77QU9XQa59JFPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uq9sCLyjCMHHiw7tjvMLSgRoEY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:e6:0f:1f:13:35:04:37:de:be:9b:32:3a:2a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaf6c08bca308c1c78b0eed8ef30b4a0468118e
Validity
Not Before: Nov 4 09:00:45 2025 GMT
Not After : Nov 5 09:00:45 2025 GMT
Subject: CN=a1488a3345359a9268819c3bdc067d3e94064231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:17:fd:d9:86:74:4c:c8:f8:05:86:6e:00:14:
77:3e:49:4f:5c:11:99:17:a8:c2:4e:b2:d0:89:a4:
70:95:53:0f:02:ef:59:72:70:fb:f8:69:13:5e:a2:
5d:23:bc:d6:ca:40:4a:9b:e6:5f:64:77:31:de:65:
86:9a:ad:86:c3:a0:5c:36:3e:3a:aa:e0:32:75:37:
2d:33:90:0e:f7:72:1d:02:8d:7f:e3:f4:5d:a2:84:
88:ed:4d:39:20:00:6e:f0:08:fb:44:b9:46:9d:fa:
83:c5:07:31:ac:a4:f0:7f:f4:51:ac:81:a2:d7:bc:
cf:64:96:1a:2b:19:e7:0f:54:b8:49:e8:6b:e6:98:
02:50:49:00:39:f5:8c:99:80:c6:46:06:ec:80:bf:
61:1b:0d:71:cf:60:4f:66:0a:fb:74:8a:a5:6f:92:
b3:37:42:35:07:93:98:4e:68:25:9a:f3:2c:98:e5:
81:47:3b:a7:71:55:94:76:68:6d:68:ca:7e:0c:f1:
dc:b9:75:cc:58:ab:53:7d:d8:36:97:76:06:14:fd:
40:40:44:c0:f0:a2:a7:70:90:42:25:9d:00:b7:0f:
26:36:b2:f1:87:19:eb:f6:ab:23:a1:6e:e0:c3:12:
72:79:98:cb:dc:a2:8d:b0:e2:9b:30:f1:dc:22:14:
fd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:48:8A:33:45:35:9A:92:68:81:9C:3B:DC:06:7D:3E:94:06:42:31
X509v3 Authority Key Identifier:
keyid:BA:AF:6C:08:BC:A3:08:C1:C7:8B:0E:ED:8E:F3:0B:4A:04:68:11:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uq9sCLyjCMHHiw7tjvMLSgRoEY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b5:1f:91:8b:e7:7f:5c:b3:d8:6b:83:72:d5:7e:22:86:7e:
47:8d:84:37:5e:1f:b5:50:10:4c:61:7a:f9:78:54:ac:75:f7:
a0:ca:be:82:6b:18:ca:13:c8:17:ab:8b:bf:e1:e9:28:9a:f8:
c0:58:15:ec:1f:66:fd:4c:fc:6b:5c:af:96:37:3d:47:64:8f:
ef:a9:e5:cb:8f:c5:38:54:10:aa:a4:e4:22:6f:b1:2f:c5:5c:
ba:5c:85:4b:e0:3d:7a:d3:64:11:4e:ef:b8:65:e6:88:c2:ba:
7d:17:12:9b:aa:50:af:31:fb:24:73:d9:9a:c4:5b:cd:54:20:
a8:2b:c1:b6:51:23:cb:62:7b:4b:7b:fe:f7:6d:22:7a:5a:9e:
12:d7:a4:6c:25:fa:ee:57:df:78:f4:bc:79:c0:66:b0:06:9f:
db:88:4d:7a:f4:b8:22:8a:e6:7d:33:26:1c:24:0b:a1:a3:9d:
c5:15:f4:88:f7:5f:80:6c:23:ec:b9:41:2c:0c:37:d9:04:f8:
25:d6:37:a7:35:bf:33:41:6d:1b:fa:d0:ca:d0:2f:a9:60:3f:
28:a0:42:6a:96:2e:b5:29:24:a2:d3:c5:7c:98:33:78:71:d1:
a0:20:5a:08:2a:ff:2d:09:22:a2:99:13:7d:76:42:36:55:79:
e4:96:97:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:47 2025 by rpki-client