Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
File: UnksdxTtV0Vtc1XkoEubqL7VfkI.mft (raw, json)
Hash identifier: 9Vf+66VFODRRHpm5QIqrk95+pMI9u+ije5TLmIk/z0M=
Subject key identifier: 9B:6A:16:F2:E7:DA:2D:48:26:4E:92:AB:9E:9B:9B:8F:CB:86:11:54
Authority key identifier: 52:79:2C:77:14:ED:57:45:6D:73:55:E4:A0:4B:9B:A8:BE:D5:7E:42
Certificate issuer: /CN=52792c7714ed57456d7355e4a04b9ba8bed57e42
Certificate serial: 019A51514DCBD5E423DDAA9AF107284D490D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
Manifest number: 07BC
Signing time: Wed 05 Nov 2025 00:01:13 +0000
Manifest this update: Wed 05 Nov 2025 00:01:13 +0000
Manifest next update: Thu 06 Nov 2025 00:01:13 +0000
Files and hashes: 1: UnksdxTtV0Vtc1XkoEubqL7VfkI.crl (hash: iXzpCv7uzzJEecP3xgmBpLIA3/idJKJ1fvzrL91k9eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:4d:cb:d5:e4:23:dd:aa:9a:f1:07:28:4d:49:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52792c7714ed57456d7355e4a04b9ba8bed57e42
Validity
Not Before: Nov 5 00:01:13 2025 GMT
Not After : Nov 6 00:01:13 2025 GMT
Subject: CN=9b6a16f2e7da2d48264e92ab9e9b9b8fcb861154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a0:4b:b5:a3:36:c2:07:17:49:59:69:69:f4:
3c:ce:c2:8a:b5:9f:02:3b:c4:86:bc:16:ca:55:1b:
83:e6:ea:a3:2d:e6:de:b0:ee:57:e6:04:31:45:0b:
5d:2d:43:86:07:09:1d:46:9f:2c:04:a4:27:b4:47:
df:02:67:1f:01:fc:b9:d6:2d:47:c7:63:7b:48:95:
73:8a:57:80:95:d8:48:e5:a2:8c:1f:86:9a:b7:c0:
d5:c1:f1:0a:73:70:ab:5b:6b:c9:60:ec:85:be:7e:
ff:97:73:4c:7a:f3:8f:d7:3f:b0:0b:df:3b:ea:cc:
d9:57:1a:2d:06:76:19:30:f3:aa:f1:32:87:bf:a2:
bc:75:17:5e:39:77:33:39:bd:ee:64:5d:a6:65:4a:
35:65:88:23:ef:b3:d5:98:87:ff:f0:79:26:96:8f:
9c:ca:c6:4f:7b:e6:08:58:ca:db:02:e7:05:02:ea:
d3:c1:1d:ab:2c:e8:b1:af:fe:66:bc:2f:4c:98:f1:
a7:9c:98:d9:e8:f6:9c:a7:49:1f:86:9e:e8:dd:cb:
d3:8a:64:66:94:cd:f6:ff:e0:2b:d8:ac:5a:2b:1d:
0b:4b:39:60:4e:d8:7e:3e:48:f0:06:6e:a2:71:d8:
b1:b5:43:ff:da:d6:06:95:e7:1f:2f:f0:50:15:9c:
55:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6A:16:F2:E7:DA:2D:48:26:4E:92:AB:9E:9B:9B:8F:CB:86:11:54
X509v3 Authority Key Identifier:
keyid:52:79:2C:77:14:ED:57:45:6D:73:55:E4:A0:4B:9B:A8:BE:D5:7E:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:9c:58:d5:5d:df:75:c5:c3:b8:65:d9:8a:3f:6c:0f:9a:95:
50:86:10:a2:5f:20:e7:96:32:15:81:12:c1:3c:2b:98:d0:a3:
76:27:8b:a1:bd:97:c2:33:af:10:a8:da:e4:e3:08:4b:d1:52:
5e:dd:8e:98:1c:19:03:f7:bf:1f:9b:04:4d:ef:75:27:1c:55:
ed:a9:1f:ed:77:bf:af:02:45:fa:1f:07:1e:f2:ec:05:8e:6d:
13:1e:7c:ac:ed:82:68:28:e6:43:b2:50:3f:2b:43:6b:dd:21:
3a:af:8f:8e:4c:a9:11:ff:e4:18:b8:72:68:ef:6d:f3:71:36:
6c:8b:a6:da:d3:1e:32:f0:ce:5d:2b:4d:97:af:cb:74:21:c4:
1c:13:48:73:d6:7b:14:16:93:74:93:9d:dd:05:34:b0:9d:27:
c7:48:26:ef:ca:80:37:5f:cc:f5:00:5d:c5:79:0f:71:2a:24:
8b:0c:85:3c:28:3f:f0:73:c1:29:3d:f5:1a:e0:99:1d:99:85:
31:bd:b2:5c:e5:d6:34:e4:79:bc:03:70:81:01:89:ce:f6:7f:
c3:94:a2:7e:3f:26:15:81:6e:94:68:ca:59:e2:2c:0f:5b:94:
75:8b:52:fd:3f:88:34:9d:9b:ef:fe:87:bd:fa:53:05:c4:b5:
77:8d:99:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:28:49 2025 by rpki-client