Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
File: 1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft (raw, json)
Hash identifier: uWZUGfePKzfE7vQGZvy/SQwSuMUrkm9YMkAN89X1IUw=
Subject key identifier: C4:41:E3:B6:72:13:87:48:C2:99:1D:FF:E0:27:16:74:81:78:E4:CB
Authority key identifier: D5:46:8F:54:C0:D4:95:81:F6:9B:54:38:3D:55:73:FF:77:56:20:EC
Certificate issuer: /CN=d5468f54c0d49581f69b54383d5573ff775620ec
Certificate serial: 019A51BE685F418A7FFF5A7180E0E28DBE36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
Manifest number: 0AF7
Signing time: Wed 05 Nov 2025 02:00:24 +0000
Manifest this update: Wed 05 Nov 2025 02:00:24 +0000
Manifest next update: Thu 06 Nov 2025 02:00:24 +0000
Files and hashes: 1: 1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl (hash: 0mNfsNv4GIyPBIUYNJZK1lA70YmV2Ql5FG5CRreGrhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:68:5f:41:8a:7f:ff:5a:71:80:e0:e2:8d:be:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5468f54c0d49581f69b54383d5573ff775620ec
Validity
Not Before: Nov 5 02:00:24 2025 GMT
Not After : Nov 6 02:00:24 2025 GMT
Subject: CN=c441e3b672138748c2991dffe02716748178e4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c7:76:1e:ad:bb:a6:ce:90:7c:bb:30:32:0a:
7d:98:99:19:1f:2d:3d:67:c4:2d:e5:75:ff:74:6f:
61:90:64:30:b7:d9:8a:ef:86:4c:8f:89:52:e0:d7:
02:18:25:1b:f8:67:7c:08:d5:93:5d:2e:92:77:94:
63:0e:61:ec:85:25:3f:e2:b8:3f:da:bd:7e:ea:44:
45:f4:bf:c1:3a:42:89:66:f9:01:43:8f:5b:d6:a4:
3b:de:da:e3:bf:c2:b6:03:61:d6:e4:cb:35:7c:b2:
dd:e4:31:20:85:fc:36:60:c0:50:f3:fe:c5:10:f7:
c6:11:d3:76:4b:90:d2:d2:b1:8e:c8:ca:2c:da:16:
80:d0:01:f0:8b:1d:59:ba:d0:7a:56:1a:62:8b:91:
da:0a:0f:af:aa:35:66:6e:2b:87:0c:75:f2:a8:e8:
ce:79:6a:07:2a:7f:d9:49:84:b7:6e:a9:1b:b8:0b:
72:92:84:3d:94:8b:33:1a:28:98:54:f9:b5:cc:6e:
2c:fa:94:5a:0c:58:23:f6:f9:68:f3:6d:80:aa:5c:
1c:4b:11:a9:15:53:93:a4:3f:3b:7c:24:97:d2:0a:
36:4c:40:58:0d:b4:66:16:1c:78:8f:16:4a:e4:76:
6b:cc:2f:07:8b:06:d9:59:ec:43:6f:22:3a:d7:72:
d2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:41:E3:B6:72:13:87:48:C2:99:1D:FF:E0:27:16:74:81:78:E4:CB
X509v3 Authority Key Identifier:
keyid:D5:46:8F:54:C0:D4:95:81:F6:9B:54:38:3D:55:73:FF:77:56:20:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ad:3f:1d:9b:f3:02:07:bd:b9:7c:56:15:ec:24:c1:3b:84:
80:4e:8e:8a:9c:f4:5a:0a:b0:e2:a8:40:de:a3:49:e7:39:52:
68:f3:8b:35:1a:65:57:44:cb:f3:9b:7c:ba:1d:5e:aa:cb:cd:
d0:d9:c8:55:ea:c5:eb:9b:48:c6:d3:35:07:75:e3:a7:96:ba:
5b:21:16:6a:7b:f5:0f:22:ec:37:27:32:9e:64:e6:23:75:4f:
32:10:75:f0:3e:89:f2:4b:ac:79:55:b6:b3:35:ae:e8:23:59:
cc:21:ec:2f:4c:08:71:4b:7d:d1:2f:f6:20:07:64:82:e8:fe:
a8:9b:e9:50:06:80:60:33:34:80:a3:3d:19:ea:23:03:11:eb:
49:61:f3:c4:e2:4c:fb:c0:1a:29:5e:44:e1:59:e1:46:9f:e1:
4e:89:2d:02:8e:f2:eb:b4:f4:64:48:c2:36:63:4a:61:47:da:
e4:d0:95:53:f9:75:68:c0:14:8a:30:8a:7b:73:8f:6c:13:91:
b7:d3:fa:5d:f7:5c:10:a9:9b:a8:08:26:00:75:8f:9d:6f:30:
81:79:bd:ef:03:53:8b:ac:0a:e4:f4:3b:88:6c:67:dd:d1:f2:
e2:12:01:92:02:ea:01:3f:42:0f:a5:b4:a9:7c:d4:8b:44:95:
35:71:67:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:19:03 2025 by rpki-client