Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
File: UlkVtMckB6-3lB5b4pSscTOxB7M.mft (raw, json)
Hash identifier: 9B44r5a1Yfb23B9Y8siCvr9yhKqf4S95zG6QR95AgxE=
Subject key identifier: C3:08:3C:2E:4E:83:63:68:65:38:9B:D9:54:CE:93:F2:71:E6:6C:39
Authority key identifier: 52:59:15:B4:C7:24:07:AF:B7:94:1E:5B:E2:94:AC:71:33:B1:07:B3
Certificate issuer: /CN=525915b4c72407afb7941e5be294ac7133b107b3
Certificate serial: 019A4D3CC08CA0857EF86C28D75EF8C3C918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
Manifest number: 13FD
Signing time: Tue 04 Nov 2025 05:00:18 +0000
Manifest this update: Tue 04 Nov 2025 05:00:18 +0000
Manifest next update: Wed 05 Nov 2025 05:00:18 +0000
Files and hashes: 1: UlkVtMckB6-3lB5b4pSscTOxB7M.crl (hash: jGp/SFDfNd45DYcZUMHD5u01tBLKEN1lPpdUvIyVTZM=)
2: ci7D-gavzkR5lRu-Y8rw6gTVt8k.roa (hash: e5+WwJtdUyHAODWheWNyNbbf9/GmybmxPgwjpdHpaL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:c0:8c:a0:85:7e:f8:6c:28:d7:5e:f8:c3:c9:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525915b4c72407afb7941e5be294ac7133b107b3
Validity
Not Before: Nov 4 05:00:18 2025 GMT
Not After : Nov 5 05:00:18 2025 GMT
Subject: CN=c3083c2e4e83636865389bd954ce93f271e66c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2d:3c:c5:a9:68:9a:4c:91:35:aa:eb:00:33:
b1:59:73:95:19:3d:00:4d:fb:82:c6:6e:ab:d9:72:
46:b3:6e:26:bd:b1:22:3d:82:d1:cd:ad:79:54:82:
3b:db:d1:fe:c6:d4:59:d4:1c:0c:3c:45:7b:94:89:
e9:0f:d7:a4:16:ea:65:2f:87:60:8c:d8:5e:ad:ac:
3f:6c:00:51:f9:b8:fc:19:48:43:55:db:62:82:bb:
27:b6:e9:40:85:03:6d:1f:6b:c0:27:9b:d8:da:e9:
00:f2:d1:af:70:cd:da:f5:86:40:09:06:03:48:12:
ac:e2:36:dc:03:6d:55:a0:13:9c:f5:7e:9b:e7:6e:
1c:58:7d:da:91:6d:39:91:4f:85:6d:49:8a:41:8b:
82:28:a0:07:69:2e:5a:10:ed:4f:77:93:75:88:20:
85:19:33:19:f0:69:76:d4:72:cb:3a:11:44:a9:1b:
aa:c9:f9:86:15:6f:5b:65:8a:2c:e9:8a:3c:1a:a8:
7a:b3:4c:23:07:a2:16:a3:24:c9:f9:33:63:45:93:
cf:72:c1:1a:3a:23:23:11:7c:8d:df:dc:b2:9f:f5:
c5:b3:d3:4d:8f:cf:83:c2:db:7d:ef:a2:07:7d:9a:
58:bf:01:2e:c7:b8:06:af:a1:65:be:14:01:f5:d2:
53:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:08:3C:2E:4E:83:63:68:65:38:9B:D9:54:CE:93:F2:71:E6:6C:39
X509v3 Authority Key Identifier:
keyid:52:59:15:B4:C7:24:07:AF:B7:94:1E:5B:E2:94:AC:71:33:B1:07:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:76:9f:d9:0e:11:49:8d:93:7f:d1:d9:a2:0f:d2:42:05:07:
58:66:7d:65:47:5d:2a:57:ce:7d:81:4f:80:64:47:ae:f9:95:
e3:1f:c9:38:c6:16:f1:11:f1:bd:26:63:e2:5d:50:ea:8e:65:
4b:91:b4:c9:42:9b:c1:36:3b:7d:08:b5:be:5a:ab:91:9b:f4:
7c:66:f7:a2:86:8e:8f:d2:ad:b7:c8:ad:66:a9:fc:10:08:23:
8a:6c:48:8a:69:6b:ca:29:ba:40:5e:3e:60:d6:a7:ad:63:8d:
5e:a6:0c:6d:e0:d7:27:9b:73:61:c7:23:bf:3f:3c:50:7e:7c:
1e:26:25:04:1b:ba:24:b6:f6:22:e1:67:c1:94:b6:b8:86:64:
99:11:01:75:84:42:f9:41:ae:d0:4b:29:4f:3a:f2:5b:84:c6:
83:8a:01:99:54:bd:bb:dd:3d:cd:0e:02:2b:db:3e:3d:50:28:
26:42:b9:c3:97:47:0c:ae:e5:98:bb:4f:c3:92:bf:e1:5f:ec:
97:31:c1:7a:8d:43:b5:6a:eb:af:89:b3:c3:97:c9:96:1f:5f:
56:97:4d:aa:13:6e:f8:77:48:b5:8b:0d:94:70:b6:62:4d:18:
1d:bd:bb:b1:80:6d:a2:84:0f:37:2b:7c:27:63:70:25:4c:87:
61:61:fe:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:52 2025 by rpki-client