Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
File: 0_ULT8CViQuDHAPZliXA7lQZ01o.mft (raw, json)
Hash identifier: Y1HLERZTPNShvcrJQ2GfXUIDQCpDT0VEijlHY3vNhmA=
Subject key identifier: 8A:12:05:A9:CC:A1:02:F8:48:C2:76:28:15:18:87:EB:5A:CD:4E:36
Authority key identifier: D3:F5:0B:4F:C0:95:89:0B:83:1C:03:D9:96:25:C0:EE:54:19:D3:5A
Certificate issuer: /CN=d3f50b4fc095890b831c03d99625c0ee5419d35a
Certificate serial: 019A4FCFDDA3F620A00BA1D6A019E3BF495B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
Manifest number: 15BF
Signing time: Tue 04 Nov 2025 17:00:13 +0000
Manifest this update: Tue 04 Nov 2025 17:00:13 +0000
Manifest next update: Wed 05 Nov 2025 17:00:13 +0000
Files and hashes: 1: 0_ULT8CViQuDHAPZliXA7lQZ01o.crl (hash: x2nIW78ffQT9gWQGMoEtjIOtukUmCTSgdi0z+Ki8eg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:dd:a3:f6:20:a0:0b:a1:d6:a0:19:e3:bf:49:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3f50b4fc095890b831c03d99625c0ee5419d35a
Validity
Not Before: Nov 4 17:00:13 2025 GMT
Not After : Nov 5 17:00:13 2025 GMT
Subject: CN=8a1205a9cca102f848c27628151887eb5acd4e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:71:4b:9b:47:6e:c6:36:2f:cb:b5:98:2b:05:
1c:00:49:c1:76:21:b2:56:c3:31:49:37:cd:83:f2:
93:05:1e:2b:cf:a7:46:f4:f7:3d:59:88:e8:fc:e8:
b9:d0:82:22:04:8a:79:7d:59:3b:a4:59:49:4d:0f:
ee:f3:8f:10:a3:4f:64:d7:ac:22:18:23:b1:fe:63:
1c:a9:b6:7f:ac:92:b9:a0:35:9a:3a:31:3f:fd:d0:
52:11:1b:da:15:80:ee:2c:82:63:25:d6:72:6e:e4:
70:fa:b2:29:74:dc:07:ea:23:67:61:c6:af:5d:b5:
b3:ee:e3:d6:39:a0:88:f1:16:40:35:7e:5b:37:a7:
72:53:97:dd:2c:96:b9:fa:8d:bd:c0:74:88:8e:d8:
6b:e4:77:2d:91:e5:08:2d:f9:e9:04:54:a9:38:e5:
59:a3:70:7b:61:42:4a:a2:ba:ba:90:5c:50:20:c6:
03:eb:5a:84:46:4c:94:6a:e3:b7:33:75:f2:24:92:
04:bb:9f:83:a3:58:d1:af:6a:32:e8:98:70:39:36:
7b:b3:2e:43:24:2e:b1:c8:80:9f:6f:39:a7:74:0e:
df:38:8c:d3:b7:ae:a6:8e:83:27:27:34:09:2c:17:
b3:b0:cb:44:07:7e:6a:ee:5a:bc:3d:d2:67:3f:83:
ab:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:12:05:A9:CC:A1:02:F8:48:C2:76:28:15:18:87:EB:5A:CD:4E:36
X509v3 Authority Key Identifier:
keyid:D3:F5:0B:4F:C0:95:89:0B:83:1C:03:D9:96:25:C0:EE:54:19:D3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ed:72:4d:b1:c6:bd:6a:ff:cf:ee:4a:67:80:b1:c0:22:83:
19:15:53:9f:e4:ce:7f:6b:e3:9a:01:4b:3f:78:e3:bf:66:2e:
65:a5:f1:9f:63:49:c9:5f:03:21:21:44:3b:5c:d9:86:da:8a:
0d:1d:43:9e:56:8f:d7:2f:ba:03:09:11:b1:92:c8:54:df:b3:
5e:c9:19:0f:38:30:9c:f9:0e:4b:b2:20:41:78:0e:81:54:84:
5a:ea:8c:bc:aa:ca:3d:5b:ab:bf:d4:af:3c:6e:4c:27:61:9f:
a0:03:70:c0:6f:f4:ca:8a:90:77:26:01:98:1f:16:04:82:f5:
5b:14:07:ff:1b:9e:25:46:09:ae:f2:4b:73:c7:a8:7a:ce:1b:
61:05:37:4e:ef:53:66:e6:e5:99:29:20:86:67:e1:5a:2b:46:
57:f2:df:1f:b4:aa:7e:12:2a:09:be:5d:4d:e2:36:bb:a4:e5:
f9:f1:ea:8b:fe:41:38:95:1f:c6:4f:d8:6d:3d:03:90:c4:49:
67:9f:7f:e9:9d:bb:88:74:13:7b:7b:0c:c3:18:51:cd:54:6d:
b7:2a:79:6c:70:db:69:48:c5:0b:f3:ed:cd:ef:03:52:ed:3f:
1f:e3:16:3c:55:ec:f0:34:fa:23:8a:0e:4c:34:66:d0:ba:b1:
20:87:1c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:43 2025 by rpki-client