Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
File: uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft (raw, json)
Hash identifier: uXlZOrMmH3ZEnolvjyjoN4zYFNwykQOBqmk9MUKMbEE=
Subject key identifier: F0:1F:10:03:A0:CB:C9:DF:FB:40:81:65:13:70:CA:55:01:BB:A6:78
Authority key identifier: B8:4B:63:05:86:58:A5:9E:CB:BF:44:39:5B:F1:6F:78:0D:C9:29:CC
Certificate issuer: /CN=b84b63058658a59ecbbf44395bf16f780dc929cc
Certificate serial: 019A4D73B4FD12E797B489145FEE6E9A404C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 06:00:19 +0000
Manifest this update: Tue 04 Nov 2025 06:00:19 +0000
Manifest next update: Wed 05 Nov 2025 06:00:19 +0000
Files and hashes: 1: uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl (hash: detNlTSsHIy4rwVCadb8UFvQw2tCUqd+5Sp7fBtSOU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:b4:fd:12:e7:97:b4:89:14:5f:ee:6e:9a:40:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b84b63058658a59ecbbf44395bf16f780dc929cc
Validity
Not Before: Nov 4 06:00:19 2025 GMT
Not After : Nov 5 06:00:19 2025 GMT
Subject: CN=f01f1003a0cbc9dffb4081651370ca5501bba678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7f:83:c0:93:59:46:49:64:f4:94:9b:ba:e2:
53:29:a1:b4:ef:25:c0:e8:d7:95:e9:a4:cd:df:2e:
41:26:e0:2f:46:2e:66:25:20:98:3a:1a:d8:1d:74:
9b:91:9d:ae:e2:3f:f8:91:14:d0:ac:ac:73:6a:de:
cf:fc:2d:04:0f:19:38:bc:6b:fa:f0:af:74:7f:82:
74:bc:8b:39:cb:89:e7:65:23:8b:34:96:f9:15:cf:
ac:1d:9b:ca:55:1f:d4:a8:01:e5:bb:5d:ca:fb:1b:
93:2f:e6:e8:a6:ea:48:12:eb:d0:43:38:d7:22:e6:
c2:cc:d6:82:6e:ca:ff:f3:53:7b:38:9b:e3:4d:37:
6b:77:e0:0f:9d:cb:8c:6b:2b:9a:a0:4d:a5:72:a0:
30:30:33:6c:53:bc:1c:b6:e8:d5:fe:dc:48:b7:c4:
2b:e9:c1:1a:8a:73:fa:5a:5a:30:ea:6f:bc:b4:b0:
e6:0e:7f:55:c1:43:fd:4b:7e:30:fa:a1:60:89:13:
20:f2:e9:7f:ec:64:50:a1:62:2d:82:28:95:63:5d:
87:e2:3e:53:31:94:14:2c:e2:2a:7f:ad:12:c6:8c:
17:bd:6d:d1:fd:49:6b:6d:1c:93:66:99:39:7d:80:
3a:4d:e9:7e:61:e7:47:bb:23:7d:fc:ba:86:11:c3:
83:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1F:10:03:A0:CB:C9:DF:FB:40:81:65:13:70:CA:55:01:BB:A6:78
X509v3 Authority Key Identifier:
keyid:B8:4B:63:05:86:58:A5:9E:CB:BF:44:39:5B:F1:6F:78:0D:C9:29:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:55:2c:35:84:e4:0b:38:ec:5f:41:14:92:0c:ad:fe:9b:67:
05:d1:fc:bb:40:72:d1:8c:be:91:9a:75:13:df:3e:e1:65:f4:
fa:fa:ea:ab:3d:4b:aa:95:6c:55:53:35:5a:00:09:8f:97:07:
e4:8c:0d:60:18:bb:a4:c7:1a:2c:91:81:09:b1:08:18:2f:2c:
ed:14:85:1e:d2:eb:f8:58:3a:25:47:2f:ec:08:36:ff:9a:4c:
04:19:71:b7:cf:a1:e2:4f:71:72:95:ed:a1:35:1b:e1:26:b8:
27:21:70:5a:ca:84:43:71:ff:fd:8a:72:7f:2f:13:90:6a:b5:
72:3a:71:bd:db:14:be:91:1f:50:30:18:df:a6:93:28:ce:d5:
15:5b:41:11:02:cc:87:27:84:80:af:e0:a8:35:9a:8d:39:3d:
98:c7:4c:a4:eb:40:fe:ed:c5:3e:8b:9c:4f:ed:f5:48:ab:6d:
68:8f:ef:58:0d:f4:e7:df:a3:b8:a4:52:b4:b2:1e:18:43:82:
f1:48:ca:eb:19:e1:24:be:96:6f:d6:d3:c1:7c:c2:95:ca:4c:
86:9e:c4:df:56:b4:bb:f1:b4:25:d0:31:72:0c:51:1f:7e:1b:
92:ac:fd:31:8a:78:ec:36:68:67:ff:0a:6a:b3:ec:c8:dc:a4:
8b:4a:18:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:24 2025 by rpki-client