Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft
File: rUskfyJRG39TOwAtmfvsK1WbbC8.mft (raw, json)
Hash identifier: k5L9R6a1TzofAPbF7l623apVfSj+WHbOzrldURz0wU4=
Subject key identifier: AA:69:C5:E9:1C:56:20:6B:4D:85:79:92:F3:81:07:6F:38:CC:57:95
Authority key identifier: AD:4B:24:7F:22:51:1B:7F:53:3B:00:2D:99:FB:EC:2B:55:9B:6C:2F
Certificate issuer: /CN=ad4b247f22511b7f533b002d99fbec2b559b6c2f
Certificate serial: 019A4E86CDCEAFCB09CE2CED0EB4FA6BA5CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUskfyJRG39TOwAtmfvsK1WbbC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft
Manifest number: 0596
Signing time: Tue 04 Nov 2025 11:00:48 +0000
Manifest this update: Tue 04 Nov 2025 11:00:48 +0000
Manifest next update: Wed 05 Nov 2025 11:00:48 +0000
Files and hashes: 1: rUskfyJRG39TOwAtmfvsK1WbbC8.crl (hash: JBNkXC1oN28ww5u4CAQ/deS6Z87No8pYF1MDs6dvohc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUskfyJRG39TOwAtmfvsK1WbbC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:cd:ce:af:cb:09:ce:2c:ed:0e:b4:fa:6b:a5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4b247f22511b7f533b002d99fbec2b559b6c2f
Validity
Not Before: Nov 4 11:00:48 2025 GMT
Not After : Nov 5 11:00:48 2025 GMT
Subject: CN=aa69c5e91c56206b4d857992f381076f38cc5795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:76:f6:4a:b5:36:e4:11:f4:2d:cd:a4:be:90:
dd:f6:9b:24:f9:90:02:5c:59:02:72:46:d4:ad:dc:
af:a7:77:24:4d:ea:8d:95:5e:24:bf:a6:f7:50:71:
e0:c2:5f:76:93:2b:e8:40:b9:05:fc:ce:25:07:d7:
cd:53:63:9a:bb:64:a5:65:61:62:2c:ad:d7:ce:d2:
d0:d2:69:78:cc:23:cb:2b:e6:44:09:c7:22:ad:97:
b0:87:2a:aa:5c:ae:b9:bf:e1:23:16:60:fe:5d:96:
ae:ca:79:ff:b3:cd:88:4f:41:e5:29:7a:b1:0c:38:
c5:43:31:0b:64:f9:33:8b:ac:c4:1d:6a:b0:75:63:
08:7d:23:a0:bf:30:34:0e:6d:0b:15:30:59:73:2b:
4d:d2:3f:94:e5:1f:85:d2:95:c8:7d:13:33:d2:e7:
61:13:11:59:6b:13:56:bb:20:fd:81:05:c2:5e:c8:
c9:af:a9:3d:a6:99:ba:92:b9:00:a7:9b:53:5a:d6:
49:86:67:ab:ff:8d:bc:32:37:7e:8d:c1:f2:05:3b:
4c:fd:4e:e9:03:40:e6:af:a7:fb:08:04:02:de:90:
80:23:b5:88:af:4c:29:a4:0b:86:8a:78:70:47:36:
cd:e2:ab:01:18:b1:cd:72:67:1e:19:b6:1a:c7:61:
b4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:69:C5:E9:1C:56:20:6B:4D:85:79:92:F3:81:07:6F:38:CC:57:95
X509v3 Authority Key Identifier:
keyid:AD:4B:24:7F:22:51:1B:7F:53:3B:00:2D:99:FB:EC:2B:55:9B:6C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUskfyJRG39TOwAtmfvsK1WbbC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:9c:d6:5c:54:54:ac:a7:d0:dc:61:e1:7b:8b:3c:01:7d:be:
78:c2:b9:b4:10:90:8f:9e:2f:12:5d:68:02:3f:1e:a3:4f:e8:
29:98:51:4e:73:19:09:89:6e:b3:76:79:d7:68:6f:26:4f:35:
33:57:b1:43:b7:ee:36:da:e0:c2:18:24:2d:2a:16:bb:13:c7:
0e:94:d9:ff:4f:52:ee:00:0b:38:63:d8:f9:6c:81:7e:93:73:
a4:50:25:eb:de:ad:2a:60:37:a3:99:1e:e0:1b:cd:b3:15:d5:
47:5a:5d:35:ad:c1:ae:45:72:da:57:da:d2:a4:f7:dd:61:0f:
6c:2e:97:0e:69:a3:bd:63:f1:17:15:88:0b:c5:04:34:a0:2f:
b5:ed:55:a5:1d:84:51:25:da:18:a4:c2:07:fe:3a:aa:94:f1:
92:74:a4:3f:0f:6b:13:03:50:f7:8b:61:6b:b3:32:7c:44:97:
e9:cc:3c:a3:75:11:d7:c1:27:8a:a1:eb:59:66:4e:a2:47:76:
22:8d:a3:a9:e1:ca:bd:b5:73:1f:c6:28:5d:77:01:d7:f3:f0:
92:06:06:d2:4a:e5:52:a2:1a:55:6b:5b:5a:93:d9:bd:77:ea:
51:a5:08:7a:db:62:c1:88:25:54:75:4f:1e:3d:5d:f6:14:92:
72:84:2c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:28 2025 by rpki-client