Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7e7154-c3aa-45b6-8fb0-191d534c97b9/1/uI_4bEcX4ONm8pDNDWKK_Eajjw0.mft
File: uI_4bEcX4ONm8pDNDWKK_Eajjw0.mft (raw, json)
Hash identifier: pEwWP6477IBDnTgGxKHb7+FfQZ4j8VPxSaHl6phzQHs=
Subject key identifier: 91:FF:3A:4B:D1:B7:98:D9:27:07:00:66:90:B2:7B:AA:A0:F0:5F:D1
Authority key identifier: B8:8F:F8:6C:47:17:E0:E3:66:F2:90:CD:0D:62:8A:FC:46:A3:8F:0D
Certificate issuer: /CN=b88ff86c4717e0e366f290cd0d628afc46a38f0d
Certificate serial: 019A4EF46F0A36DBEB8D4C6AAFB7BB1D7CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uI_4bEcX4ONm8pDNDWKK_Eajjw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7e7154-c3aa-45b6-8fb0-191d534c97b9/1/uI_4bEcX4ONm8pDNDWKK_Eajjw0.mft
Manifest number: 1073
Signing time: Tue 04 Nov 2025 13:00:33 +0000
Manifest this update: Tue 04 Nov 2025 13:00:33 +0000
Manifest next update: Wed 05 Nov 2025 13:00:33 +0000
Files and hashes: 1: uI_4bEcX4ONm8pDNDWKK_Eajjw0.crl (hash: n+OTVqjRbdNzPTQ0uTvAGpwIwxrEjIfgAYfTnkFpKoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7e7154-c3aa-45b6-8fb0-191d534c97b9/1/uI_4bEcX4ONm8pDNDWKK_Eajjw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7e7154-c3aa-45b6-8fb0-191d534c97b9/1/uI_4bEcX4ONm8pDNDWKK_Eajjw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uI_4bEcX4ONm8pDNDWKK_Eajjw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:6f:0a:36:db:eb:8d:4c:6a:af:b7:bb:1d:7c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b88ff86c4717e0e366f290cd0d628afc46a38f0d
Validity
Not Before: Nov 4 13:00:33 2025 GMT
Not After : Nov 5 13:00:33 2025 GMT
Subject: CN=91ff3a4bd1b798d92707006690b27baaa0f05fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3d:19:3b:94:ce:91:f8:23:d7:a7:1e:34:d7:
60:9b:71:e8:b0:19:6d:c1:57:f5:e7:de:6c:07:74:
08:f5:0d:ef:4d:84:ba:7a:ec:aa:10:a0:b0:18:9b:
b3:5d:b3:06:51:9b:68:75:ea:68:57:2e:ed:bd:46:
b0:22:9f:29:95:f3:75:99:ca:52:29:a8:5c:25:55:
fb:7b:41:15:0f:42:14:ca:12:0f:e1:93:3b:a1:f0:
bf:ac:df:57:7c:bc:2f:41:3e:56:8c:ee:42:0d:9e:
e8:1e:57:7e:76:37:a5:ed:86:d6:17:71:4a:51:98:
26:b4:62:65:35:2b:f1:95:d0:25:4b:70:f1:cd:a1:
08:6a:f3:e7:9b:9b:a4:a5:b1:f3:9d:3f:7d:41:e9:
17:6d:e0:35:2e:df:ca:aa:ba:4a:2c:ca:04:64:58:
3a:07:35:fa:d1:07:62:e1:42:ee:75:79:fb:17:ff:
4d:16:a0:ca:e4:f7:4e:28:92:59:7e:8c:5d:54:5c:
a8:7e:c0:a4:38:a4:50:02:56:bb:d3:a8:31:10:c3:
02:ce:b4:d6:d8:b5:0f:0d:89:d0:9e:d9:d8:27:a5:
7b:68:3c:fb:40:f3:6a:ec:b7:55:87:09:87:86:c0:
a1:9d:2f:5f:c8:02:83:fe:18:c7:9b:68:6b:b0:be:
fb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:FF:3A:4B:D1:B7:98:D9:27:07:00:66:90:B2:7B:AA:A0:F0:5F:D1
X509v3 Authority Key Identifier:
keyid:B8:8F:F8:6C:47:17:E0:E3:66:F2:90:CD:0D:62:8A:FC:46:A3:8F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uI_4bEcX4ONm8pDNDWKK_Eajjw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7e7154-c3aa-45b6-8fb0-191d534c97b9/1/uI_4bEcX4ONm8pDNDWKK_Eajjw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7e7154-c3aa-45b6-8fb0-191d534c97b9/1/uI_4bEcX4ONm8pDNDWKK_Eajjw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:81:ab:7b:73:0c:1e:c5:3b:d4:f8:93:60:bc:7c:65:0d:11:
3b:e9:b8:6f:02:c7:82:1f:27:7d:eb:3f:e4:9f:b5:d8:b2:8e:
8a:5a:ed:ab:d5:d3:16:92:a2:81:e2:5f:33:7e:3d:59:ff:2f:
e7:14:3c:f9:d0:16:0c:93:55:46:b3:7c:66:33:7c:91:3b:e7:
93:62:3b:a0:a5:0a:99:b0:54:8b:0c:c4:f9:6a:ff:1e:46:06:
4d:ea:8e:90:00:c9:6b:36:b2:35:0e:2f:ba:f6:18:bf:84:1a:
71:82:c8:12:b6:e2:20:00:da:9c:bc:0a:aa:ba:7d:a4:0e:7d:
08:f1:b3:9d:c5:b0:c3:cc:49:66:89:57:5d:89:f7:86:a1:2b:
b7:ad:8f:62:8a:31:e3:03:62:03:fb:68:13:59:42:51:bc:aa:
95:82:32:c3:70:43:b3:c3:b0:c7:5b:d5:dd:e0:ab:00:b6:31:
d1:9d:5e:a6:00:3d:a7:90:a1:67:98:88:73:c9:94:e8:1a:fe:
96:cf:3f:27:d5:dc:5e:78:99:b2:28:08:15:cc:c0:5e:4d:dd:
2d:8e:dc:53:93:8a:f8:5b:d0:03:c5:8b:34:0a:09:2e:19:84:
02:3e:cf:c4:2d:1e:b2:86:8f:a7:80:af:fd:9e:5e:23:a7:37:
73:f1:b9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:38:03 2025 by rpki-client