Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
File: 1-uafCinvjYwi2dbs3jowfYlNXBk.mft (raw, json)
Hash identifier: g2j2ycrSN51SKPzLjr5ohS+ySSgpxJRzOYSvl/13W8w=
Subject key identifier: 1F:13:46:42:A8:B6:E9:0D:FE:F9:F2:06:93:A2:D4:6A:0E:60:1F:66
Authority key identifier: FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19
Certificate issuer: /CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19
Certificate serial: 019A50075A04800642E07F952F8E718BCBBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
Manifest number: 07BC
Signing time: Tue 04 Nov 2025 18:00:50 +0000
Manifest this update: Tue 04 Nov 2025 18:00:50 +0000
Manifest next update: Wed 05 Nov 2025 18:00:50 +0000
Files and hashes: 1: 1-uafCinvjYwi2dbs3jowfYlNXBk.crl (hash: jUwig+mLpUhLl6IJtZTXteF/XRsG2sHoz+XRXK1bOao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:5a:04:80:06:42:e0:7f:95:2f:8e:71:8b:cb:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19
Validity
Not Before: Nov 4 18:00:50 2025 GMT
Not After : Nov 5 18:00:50 2025 GMT
Subject: CN=1f134642a8b6e90dfef9f20693a2d46a0e601f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4a:7e:4e:18:49:37:e4:1d:f3:17:42:85:34:
fd:5c:3d:63:65:b7:c9:05:e4:a8:39:d3:ea:c3:17:
35:62:90:3b:56:cb:b0:d8:fb:7d:99:e2:4f:e5:37:
4b:84:c2:36:7e:2b:aa:2c:8b:eb:6a:7b:f0:03:d8:
a6:b5:15:e9:49:9a:82:9e:9e:08:7d:d5:de:f1:14:
29:83:f3:8b:62:01:3d:6f:56:df:89:14:29:1e:38:
79:11:01:3e:e1:c6:80:f3:70:18:8e:80:15:72:48:
50:6c:de:a8:2d:40:c4:49:95:16:af:14:32:ed:2b:
7f:fa:ea:ea:cd:70:84:a6:28:05:7c:11:e6:a5:a1:
a4:7b:43:41:af:74:59:0b:b0:71:5b:ab:70:6e:e2:
1c:47:c6:26:b2:ce:fd:9b:2b:da:d8:83:41:a6:e3:
c5:80:7c:80:d6:4d:f1:c1:ff:3f:96:6f:de:e7:25:
0e:7d:e5:49:0b:c9:f6:26:b0:b9:d6:cd:f8:60:4b:
ba:2b:9c:4c:e1:bc:02:df:1e:0f:4a:2a:dc:32:2f:
5b:cb:dd:91:8b:95:a2:99:75:8a:c9:6b:20:87:65:
87:7e:a6:69:3b:ca:e0:ea:05:db:4b:ca:65:7c:65:
33:1f:bb:e2:d6:81:70:5f:79:f8:d5:88:58:19:a2:
4f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:13:46:42:A8:B6:E9:0D:FE:F9:F2:06:93:A2:D4:6A:0E:60:1F:66
X509v3 Authority Key Identifier:
keyid:FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c5:1d:24:f5:2b:8c:ad:ad:5b:a4:d0:60:cf:b9:d0:18:b6:
b4:9f:85:55:b9:7d:17:87:1b:44:16:cd:39:ef:07:2e:d1:51:
5b:4f:79:03:6b:d7:25:50:8d:3c:5c:fc:97:3c:53:76:85:f1:
40:88:db:5c:33:0e:38:91:7f:a9:12:90:e2:4d:78:60:d3:00:
d9:71:88:ed:a5:7f:67:f8:4e:20:a8:15:97:d4:f2:aa:0b:84:
03:b6:4f:ff:10:93:8b:00:69:fe:ba:62:bd:38:d3:b5:44:d6:
60:b3:63:89:82:08:c1:32:7b:16:dc:8b:22:8d:3d:57:74:fa:
92:95:56:93:71:58:2f:ce:10:2e:4c:b1:92:f5:7f:37:54:ea:
7d:27:eb:7c:1a:5b:22:b1:ff:d6:bc:fa:bd:26:ec:07:55:c8:
d9:b0:d2:e0:5f:4a:7b:cd:f1:a3:77:7e:21:7d:e4:59:fe:ca:
19:d2:b4:18:fd:1a:2f:77:2f:09:f9:8e:00:97:98:55:cf:64:
09:85:43:fa:65:27:5a:bb:0c:2c:fe:1f:ed:61:2a:0a:65:0c:
4a:c5:d9:aa:0d:f1:ff:ae:30:b2:e0:cf:8c:26:fc:cc:2f:e9:
4c:07:7c:c3:46:90:d7:50:c3:34:20:9a:73:81:67:6f:f1:b5:
16:f7:60:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:30:57 2025 by rpki-client