Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.mft
File: UIJpb7xB2QYWimDOCUlJAiz2Keg.mft (raw, json)
Hash identifier: OE61Uddmwf9mw7oDMILTqQVXwaJN+YcKD502Bt8fjX4=
Subject key identifier: 2D:E7:0D:75:46:E8:FC:7A:7E:63:64:9B:3D:9A:03:A4:0B:E5:B5:95
Authority key identifier: 50:82:69:6F:BC:41:D9:06:16:8A:60:CE:09:49:49:02:2C:F6:29:E8
Certificate issuer: /CN=5082696fbc41d906168a60ce094949022cf629e8
Certificate serial: 019A4C9805320F39F4FDA84C3866B923F2D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UIJpb7xB2QYWimDOCUlJAiz2Keg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.mft
Manifest number: 0493
Signing time: Tue 04 Nov 2025 02:00:22 +0000
Manifest this update: Tue 04 Nov 2025 02:00:22 +0000
Manifest next update: Wed 05 Nov 2025 02:00:22 +0000
Files and hashes: 1: UIJpb7xB2QYWimDOCUlJAiz2Keg.crl (hash: wSwqTu8gELoQ08RNaGvRTaAitoosbo3rpSmrF84lajg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UIJpb7xB2QYWimDOCUlJAiz2Keg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:05:32:0f:39:f4:fd:a8:4c:38:66:b9:23:f2:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5082696fbc41d906168a60ce094949022cf629e8
Validity
Not Before: Nov 4 02:00:22 2025 GMT
Not After : Nov 5 02:00:22 2025 GMT
Subject: CN=2de70d7546e8fc7a7e63649b3d9a03a40be5b595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3b:ff:78:d8:61:c9:86:0d:85:32:a2:a0:67:
e8:d5:20:88:09:d3:ac:4c:fb:32:49:24:cd:54:53:
6f:78:3b:f5:a9:4f:95:08:2b:9a:cb:55:63:f5:b3:
3d:7e:dd:84:57:b4:47:f7:0a:22:85:f6:dd:fb:b8:
6f:1a:a9:51:12:5e:00:08:50:72:18:21:43:d7:cd:
6d:8a:e2:c1:2d:84:00:1b:44:8d:b7:aa:7f:a7:ba:
0e:6d:f7:b0:60:87:38:aa:cc:fa:fe:c0:db:3e:05:
71:e9:53:09:89:3e:a1:1f:0e:c3:12:70:21:ec:ad:
b8:24:50:bc:c1:e0:39:67:91:d5:d2:e6:f3:aa:f6:
94:00:9e:a3:f6:7c:72:6f:97:e1:44:75:49:6c:35:
4c:9e:bd:8d:ce:a1:d8:1e:1f:9d:cd:54:97:b5:a5:
3f:13:f1:30:db:5b:85:24:a8:91:e2:5d:d0:74:8b:
be:be:9c:25:02:38:a8:68:f7:c4:5e:45:06:82:1e:
52:15:53:95:43:42:8d:0d:85:b4:bf:7e:0e:f3:71:
a0:e9:8a:5d:99:b3:ca:79:e9:ac:55:a9:02:2a:10:
58:19:d3:d5:8e:fc:1f:21:1c:7d:99:69:a9:9f:b7:
23:3f:96:52:70:08:ea:40:73:65:4e:fe:d5:48:4c:
24:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E7:0D:75:46:E8:FC:7A:7E:63:64:9B:3D:9A:03:A4:0B:E5:B5:95
X509v3 Authority Key Identifier:
keyid:50:82:69:6F:BC:41:D9:06:16:8A:60:CE:09:49:49:02:2C:F6:29:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UIJpb7xB2QYWimDOCUlJAiz2Keg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:41:67:f1:c8:a8:9a:24:06:ad:9f:57:bd:2c:4b:92:6f:39:
07:53:65:72:b4:69:2f:33:e1:9e:25:79:67:42:ba:77:cb:45:
96:0e:88:39:9c:53:da:8f:d8:6c:26:e0:0b:cf:d4:0f:87:07:
f9:30:dd:0f:79:bf:06:dc:da:5c:6d:78:02:7b:52:63:0c:0e:
03:a5:af:02:10:c6:74:88:a6:46:4f:2c:e7:21:32:19:0d:9c:
44:ba:ba:4f:84:6c:00:52:6f:5f:a0:f8:ff:6a:3b:e1:a9:cd:
e5:03:94:7e:10:78:4a:5a:cd:4b:3d:3f:91:dd:dd:07:94:78:
8c:c3:3a:b7:55:b4:65:64:c8:c7:51:d9:e6:a6:bc:81:23:21:
0f:41:52:da:e8:ac:6d:03:8c:50:7d:13:82:d6:a2:22:6c:61:
ae:51:8e:59:fd:88:9c:c6:81:d9:75:5d:c9:fd:8b:e2:2f:6c:
b5:ab:ac:c6:2b:e1:d4:b8:c2:63:e8:35:86:fa:80:b4:de:89:
f8:a3:cd:52:d9:7e:15:b5:01:64:5f:26:3b:11:b4:cb:89:64:
ff:52:66:84:6f:fe:61:86:ce:a2:10:07:51:c0:bf:52:60:52:
15:c8:07:9e:ce:11:a4:77:06:31:c0:96:02:33:4a:65:b8:0b:
f6:7d:9c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:26 2025 by rpki-client