Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.mft
File: uglQnQRuXLar5boZqxurpUPTffg.mft (raw, json)
Hash identifier: m1S+KrN7/zxVXPqdPixf+cGuoLWWMEGyvZZBmEwfC78=
Subject key identifier: A6:AA:43:B2:0E:78:88:4A:CF:E1:50:08:53:D9:49:E4:89:51:DA:0C
Authority key identifier: BA:09:50:9D:04:6E:5C:B6:AB:E5:BA:19:AB:1B:AB:A5:43:D3:7D:F8
Certificate issuer: /CN=ba09509d046e5cb6abe5ba19ab1baba543d37df8
Certificate serial: 019A4EF423DE43BA0FA6F7BB5C23D7C4BCBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uglQnQRuXLar5boZqxurpUPTffg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.mft
Manifest number: 0A92
Signing time: Tue 04 Nov 2025 13:00:14 +0000
Manifest this update: Tue 04 Nov 2025 13:00:14 +0000
Manifest next update: Wed 05 Nov 2025 13:00:14 +0000
Files and hashes: 1: uglQnQRuXLar5boZqxurpUPTffg.crl (hash: 9oVFmtSTeKe/kJxl8+RsOxDInumzwnAZBgwimAewRes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uglQnQRuXLar5boZqxurpUPTffg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:23:de:43:ba:0f:a6:f7:bb:5c:23:d7:c4:bc:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba09509d046e5cb6abe5ba19ab1baba543d37df8
Validity
Not Before: Nov 4 13:00:14 2025 GMT
Not After : Nov 5 13:00:14 2025 GMT
Subject: CN=a6aa43b20e78884acfe1500853d949e48951da0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a5:cb:5e:21:89:79:a3:ce:a4:13:c6:07:99:
ab:49:c3:2b:32:7b:36:b6:bf:10:c2:63:de:6b:ea:
61:34:d9:d2:64:ef:48:ba:c4:0b:48:7c:ce:52:68:
83:95:7b:ff:18:e9:97:76:6d:fa:6b:df:7f:1a:68:
bd:82:f3:75:5c:2d:89:10:c2:ec:35:c5:6f:24:58:
4d:13:c8:9a:7d:a3:3b:dd:ce:37:85:ad:7e:9c:c2:
ab:8e:dc:58:05:bd:1a:64:04:5c:0b:13:f3:36:60:
59:21:47:78:2f:ab:5a:55:c9:d3:5c:15:02:72:3e:
07:d2:e1:62:0a:38:a8:60:56:ba:a5:eb:3e:bc:89:
d3:0a:30:2b:40:da:d8:71:70:f0:2f:e8:39:5f:c5:
c7:d5:d8:dc:19:ed:17:ce:00:5d:e1:9c:33:70:e4:
ea:9f:6b:58:1d:75:4e:a9:eb:e2:66:1d:7d:82:a0:
88:db:5c:03:e5:0a:f8:e5:68:43:a9:7f:d0:a2:6f:
8a:81:32:20:3e:0d:8c:b3:2c:dd:70:b3:8d:55:23:
b7:ab:af:9b:d8:21:7b:e0:1c:1b:f2:7e:21:37:0a:
3e:fd:1b:0d:2f:96:f0:ad:ab:75:e2:12:e4:6a:d3:
99:02:0b:f8:e3:99:5b:1a:61:16:c1:65:65:59:a0:
d1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AA:43:B2:0E:78:88:4A:CF:E1:50:08:53:D9:49:E4:89:51:DA:0C
X509v3 Authority Key Identifier:
keyid:BA:09:50:9D:04:6E:5C:B6:AB:E5:BA:19:AB:1B:AB:A5:43:D3:7D:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uglQnQRuXLar5boZqxurpUPTffg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:30:d1:9e:7a:7f:8b:38:9b:85:42:32:65:e1:5e:e1:28:b0:
1b:17:3a:02:ea:be:96:fc:a2:13:02:e2:a4:fb:1e:42:a0:1d:
e2:9d:7f:4a:34:c1:7c:0a:93:96:05:29:a0:de:c8:e4:ea:22:
4b:5a:e9:16:6a:98:29:04:ab:99:80:1e:5b:d7:22:95:40:8e:
b5:7a:7a:7a:67:8c:05:b7:54:ff:3a:c3:45:6a:4d:ac:90:23:
24:6e:e2:45:c3:b9:9c:cd:cd:1a:2e:25:08:3a:96:30:94:a6:
fb:78:3d:29:c1:7a:dd:63:3e:75:64:ed:0e:60:66:9f:d3:9a:
77:c6:8c:83:02:97:1f:f0:cf:3c:b2:a1:86:8c:db:2d:f5:dd:
7e:ec:05:bf:60:9f:5b:f8:56:d0:ce:15:93:ec:98:f0:d3:12:
d3:56:92:32:60:23:97:2f:00:f1:58:72:73:26:11:e9:59:dc:
b9:25:fc:db:d3:06:f6:bb:ee:4c:25:f5:d2:d7:9b:d7:d9:7c:
0b:4f:db:8e:12:11:86:4d:de:27:86:13:7e:7a:5d:c7:f6:fd:
96:d6:7c:cf:29:b5:a7:ac:72:1c:e2:e4:4b:1e:81:9c:fa:bf:
4c:80:c2:1d:13:76:c3:12:5d:72:2d:28:5a:47:ac:32:54:35:
18:76:32:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:00 2025 by rpki-client