Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.mft
File: uIog4vueEVBGObZ8_sCv6z8wZpA.mft (raw, json)
Hash identifier: b7NHbSsu4Ta3bBoCfWcVKKHQ1A1EDkVq6RgRy3iNJVk=
Subject key identifier: 2D:14:20:5F:F9:0D:A7:9B:C4:3E:35:48:8B:82:C9:3F:09:5F:5C:2E
Authority key identifier: B8:8A:20:E2:FB:9E:11:50:46:39:B6:7C:FE:C0:AF:EB:3F:30:66:90
Certificate issuer: /CN=b88a20e2fb9e11504639b67cfec0afeb3f306690
Certificate serial: 019A50E39335F95F051993DB42F5BC78A00B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uIog4vueEVBGObZ8_sCv6z8wZpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 22:01:22 +0000
Manifest this update: Tue 04 Nov 2025 22:01:22 +0000
Manifest next update: Wed 05 Nov 2025 22:01:22 +0000
Files and hashes: 1: uIog4vueEVBGObZ8_sCv6z8wZpA.crl (hash: OK/NpN5IBm3LKrV7Vo0fyBLwHRv2JORTnBl3A+NwPLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uIog4vueEVBGObZ8_sCv6z8wZpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:93:35:f9:5f:05:19:93:db:42:f5:bc:78:a0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b88a20e2fb9e11504639b67cfec0afeb3f306690
Validity
Not Before: Nov 4 22:01:22 2025 GMT
Not After : Nov 5 22:01:22 2025 GMT
Subject: CN=2d14205ff90da79bc43e35488b82c93f095f5c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f0:8b:9c:bb:75:16:be:03:95:9e:ed:41:f0:
b8:b1:b0:bf:40:c6:9d:80:64:8f:20:3c:83:7f:f1:
40:e0:ca:3d:0c:ca:13:15:46:b0:10:38:0a:62:c7:
39:d5:a7:64:33:b9:90:0f:91:26:b1:5f:2f:7c:ef:
0a:d0:ae:e1:0b:fa:19:8c:15:37:48:4e:48:b3:0d:
89:86:d7:cd:32:bf:fd:02:e4:1d:4d:d3:b3:99:7d:
16:1b:2c:ee:98:fe:14:92:4f:d6:f2:8c:b9:56:2d:
7f:2d:78:a1:eb:28:7b:bc:40:80:6a:b6:02:a5:94:
e1:f4:f8:5e:55:63:5c:31:64:ee:bf:f1:d2:92:98:
19:e1:7f:bf:c6:60:24:cf:80:6e:c9:65:3a:c5:d9:
65:39:d4:4b:c8:97:13:3a:c8:5a:00:64:a1:2e:0e:
99:44:88:5e:84:d9:d0:c4:91:59:e7:9e:17:6a:5c:
36:af:21:a8:be:8b:26:6d:bc:9c:08:a4:e7:1f:f3:
dc:f9:b2:55:52:81:00:9d:10:9c:b3:e6:03:2a:7c:
2c:a9:2b:27:f9:18:60:4d:58:34:7f:6a:b2:13:01:
44:f2:4c:c1:a7:ff:41:46:6b:0b:b3:1e:24:ca:9f:
ef:99:37:19:25:ec:5d:62:d5:3c:75:bd:79:44:5a:
54:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:14:20:5F:F9:0D:A7:9B:C4:3E:35:48:8B:82:C9:3F:09:5F:5C:2E
X509v3 Authority Key Identifier:
keyid:B8:8A:20:E2:FB:9E:11:50:46:39:B6:7C:FE:C0:AF:EB:3F:30:66:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uIog4vueEVBGObZ8_sCv6z8wZpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:c0:dd:87:d8:00:9e:f8:87:05:7a:cb:21:b1:08:9f:8a:6e:
e4:c6:d3:c4:01:36:eb:ad:c1:92:d3:b4:30:a8:e3:fc:a3:bc:
64:43:45:79:24:61:47:29:a5:74:3a:8e:5e:c4:e0:0e:5b:b1:
a4:4c:bb:0b:fe:b8:fb:6f:cd:20:14:d4:ad:ed:13:a8:68:b9:
58:e9:c9:13:ce:e4:82:a8:87:bd:59:c3:46:4c:96:74:77:e6:
1a:80:2f:1c:94:bc:d0:36:6f:1f:78:92:c7:98:4b:2a:bb:58:
ef:08:46:f2:56:d7:2c:80:fa:ff:47:78:f4:a3:7a:c8:88:73:
fd:ee:7c:84:d9:ed:70:65:bf:20:2f:f8:8b:4f:5b:c1:ec:e6:
ad:4e:41:6a:08:f6:87:5e:cf:a7:29:a4:ed:85:48:89:01:69:
d2:a4:4f:33:3d:94:19:23:39:45:ed:5b:80:8e:14:7f:a9:1d:
9c:9c:bd:c0:42:fb:7d:57:f2:cb:e9:5d:d1:40:17:91:88:aa:
8a:94:78:38:99:92:11:1f:de:06:9c:e9:3f:13:6f:d6:de:67:
32:a6:5d:11:ff:6e:91:98:66:d1:82:9b:ef:30:36:c7:5d:7b:
4f:3b:ca:6b:94:77:a0:a5:32:5f:28:f1:ce:ef:98:f3:82:92:
33:da:11:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:21:18 2025 by rpki-client