Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft
File: ujWrXugfdPzKSgwT6XLsHP6WeTs.mft (raw, json)
Hash identifier: ZTPOo2qInOu4uzO/lMXsS9Bbt+YBpjbLQoGXfedru28=
Subject key identifier: A3:4A:63:9A:3E:BE:00:45:B5:4A:EB:33:3F:09:6D:EC:3C:2B:67:91
Authority key identifier: BA:35:AB:5E:E8:1F:74:FC:CA:4A:0C:13:E9:72:EC:1C:FE:96:79:3B
Certificate issuer: /CN=ba35ab5ee81f74fcca4a0c13e972ec1cfe96793b
Certificate serial: 019A50E3E2ECD9815772C8A9523B69847786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujWrXugfdPzKSgwT6XLsHP6WeTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft
Manifest number: 09E5
Signing time: Tue 04 Nov 2025 22:01:43 +0000
Manifest this update: Tue 04 Nov 2025 22:01:43 +0000
Manifest next update: Wed 05 Nov 2025 22:01:43 +0000
Files and hashes: 1: ujWrXugfdPzKSgwT6XLsHP6WeTs.crl (hash: JzJuh4R0ASAogTVDrQPulvzZDZaLIkaGj2cS8tp8w0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ujWrXugfdPzKSgwT6XLsHP6WeTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:e2:ec:d9:81:57:72:c8:a9:52:3b:69:84:77:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba35ab5ee81f74fcca4a0c13e972ec1cfe96793b
Validity
Not Before: Nov 4 22:01:43 2025 GMT
Not After : Nov 5 22:01:43 2025 GMT
Subject: CN=a34a639a3ebe0045b54aeb333f096dec3c2b6791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:17:53:a5:e1:3a:07:ee:46:3c:50:15:76:ef:
b6:b3:a7:19:bd:17:a4:19:3d:90:2b:d2:12:d7:38:
09:68:4c:75:29:52:45:a2:ad:08:ac:36:da:c5:f8:
44:6a:c0:04:3e:18:f1:80:7b:51:dc:07:6e:4b:19:
58:a4:4a:61:2e:d0:e8:c5:de:d0:d1:e1:f5:5d:5a:
72:99:6e:64:bf:33:b2:05:97:3d:9a:ac:12:f4:7b:
60:6d:0d:2f:25:4f:6b:d0:b1:a0:55:11:fa:2f:b8:
b1:59:ba:e5:ea:3d:17:1b:62:74:1a:34:71:db:7b:
3d:98:db:3f:ec:52:90:e9:42:93:90:db:44:f4:03:
10:02:78:a8:6e:d7:ba:c0:3d:05:aa:59:84:05:c6:
04:15:c8:cb:78:72:8a:2b:74:e9:da:01:cd:5d:3c:
be:bc:1b:1b:03:9d:4f:9c:2b:e2:e9:d9:1f:51:6d:
d9:28:7f:60:70:3f:ec:b5:89:38:91:b1:5e:17:d9:
6c:34:ab:ad:b4:b2:11:87:be:3a:2a:31:96:dd:5f:
43:56:da:98:fa:56:f8:75:97:83:0b:d8:9c:7a:f4:
92:fa:26:89:8d:19:82:da:65:e9:8a:27:ed:47:a8:
e8:f5:17:b2:aa:d6:b0:f8:35:9e:20:68:75:40:2b:
a2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4A:63:9A:3E:BE:00:45:B5:4A:EB:33:3F:09:6D:EC:3C:2B:67:91
X509v3 Authority Key Identifier:
keyid:BA:35:AB:5E:E8:1F:74:FC:CA:4A:0C:13:E9:72:EC:1C:FE:96:79:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujWrXugfdPzKSgwT6XLsHP6WeTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a0:6b:1f:11:eb:b1:fe:08:ae:29:35:a8:10:3b:03:5b:17:
0e:b6:8a:37:0f:cf:ce:3c:61:ca:45:c8:ad:53:b8:32:2b:36:
be:df:99:13:7a:4d:bd:86:97:84:84:c7:24:16:c0:c2:29:a9:
88:0e:71:bb:48:09:f6:a2:cb:8d:0a:e4:23:19:44:78:dc:25:
5e:dc:07:81:de:43:64:bf:81:48:5d:5a:f9:c8:0b:b5:23:34:
09:77:21:91:e3:17:b2:e8:b2:2d:c9:c8:12:e0:a3:06:f6:0d:
7d:5f:31:a4:36:39:76:5c:8f:c0:9d:bf:c3:65:b0:1f:f0:2c:
34:bc:ed:8a:d8:ee:fb:8f:36:fe:04:56:88:0c:19:a8:f7:86:
8c:c7:58:76:e7:dd:c4:8f:bc:56:05:fe:2a:04:0c:4e:81:5b:
5a:01:df:92:73:0e:fd:37:cc:d4:02:a3:cd:bc:28:8e:c0:54:
0a:0d:05:e3:96:4d:d8:59:7a:0a:2c:03:2f:d9:18:00:58:4e:
50:e7:c8:f2:99:57:0b:4f:e3:17:f3:41:11:73:a7:1d:51:a2:
67:39:55:2b:0a:dc:bc:47:4b:12:8c:4f:10:b5:6b:99:6a:c4:
49:64:33:67:fc:98:84:16:aa:02:65:9b:76:38:7a:f2:78:fd:
3b:c3:31:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:06:12 2025 by rpki-client