Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft
File: ur8nIaXXgzW3uX22OuxDXJyji8c.mft (raw, json)
Hash identifier: l1fo4eDNN/VasURipRepQqSecmxVybaNT53EOWxLPck=
Subject key identifier: 36:1B:FF:86:74:D6:C5:94:A3:BD:10:F9:74:E6:15:A4:A2:0F:7A:10
Authority key identifier: BA:BF:27:21:A5:D7:83:35:B7:B9:7D:B6:3A:EC:43:5C:9C:A3:8B:C7
Certificate issuer: /CN=babf2721a5d78335b7b97db63aec435c9ca38bc7
Certificate serial: 019A73A62CB60DC0C091F37ACFEF3609F3DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ur8nIaXXgzW3uX22OuxDXJyji8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft
Manifest number: 091A
Signing time: Tue 11 Nov 2025 16:01:01 +0000
Manifest this update: Tue 11 Nov 2025 16:01:01 +0000
Manifest next update: Wed 12 Nov 2025 16:01:01 +0000
Files and hashes: 1: ur8nIaXXgzW3uX22OuxDXJyji8c.crl (hash: tXJQqjOijfI7DwIAjFuaAB5ZxgzUR+ViFeo1tsASdzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ur8nIaXXgzW3uX22OuxDXJyji8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:2c:b6:0d:c0:c0:91:f3:7a:cf:ef:36:09:f3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=babf2721a5d78335b7b97db63aec435c9ca38bc7
Validity
Not Before: Nov 11 16:01:01 2025 GMT
Not After : Nov 12 16:01:01 2025 GMT
Subject: CN=361bff8674d6c594a3bd10f974e615a4a20f7a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2f:56:17:1d:a9:5f:ce:34:19:fd:ba:9f:62:
47:2c:04:57:04:31:88:21:b2:79:20:05:ab:da:90:
3a:8a:bc:50:f4:9a:8f:12:d9:f7:11:66:9f:ec:9d:
dd:83:5a:c0:c0:15:4f:fd:b8:4b:a3:05:6a:3d:3c:
57:19:2f:ed:aa:4c:28:1e:5f:ce:c4:ae:8e:c7:d0:
10:08:3a:b6:31:52:08:68:23:16:33:4c:23:de:58:
63:08:01:ef:b8:61:78:48:f0:93:dc:76:ec:c2:dd:
03:df:a9:a0:e7:d5:52:da:93:27:53:c0:79:6f:68:
c0:88:90:37:27:32:b5:6d:21:15:f4:36:4a:e0:88:
f1:01:32:a9:28:2d:5c:c2:6d:c9:82:52:6c:56:00:
06:2b:39:50:54:55:07:55:a4:1a:67:68:80:e8:80:
d8:1b:21:96:24:22:4d:85:7e:ad:65:1e:88:4e:ff:
1e:f1:df:d9:0c:a7:b0:81:25:35:5d:4f:9e:42:b2:
20:ed:38:f9:ef:74:c9:3d:fb:e0:58:8f:83:a2:25:
75:b2:96:7d:c1:b9:40:fa:b6:3e:c9:a4:af:37:b3:
93:0c:9f:98:34:62:e0:05:01:79:9e:94:9d:2b:55:
a3:c1:e2:4d:c5:e7:00:1a:2c:af:c1:8e:c3:36:19:
13:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1B:FF:86:74:D6:C5:94:A3:BD:10:F9:74:E6:15:A4:A2:0F:7A:10
X509v3 Authority Key Identifier:
keyid:BA:BF:27:21:A5:D7:83:35:B7:B9:7D:B6:3A:EC:43:5C:9C:A3:8B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ur8nIaXXgzW3uX22OuxDXJyji8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:6a:c8:2a:2c:ca:c0:84:13:5d:4d:7f:86:d1:6c:88:e6:6e:
ac:57:57:48:8c:19:e4:47:c1:6f:86:f8:a5:ee:70:10:a4:70:
db:b7:4c:72:2a:ce:2a:a3:02:b6:dc:c0:18:8d:59:a9:2b:a2:
dd:40:4d:4b:12:68:7b:b3:2c:e6:a2:d8:5c:b6:33:31:d1:52:
a9:79:77:9e:4a:cc:f1:38:94:16:47:8f:50:5e:e6:84:65:d1:
12:c2:f2:d3:c3:8d:d5:03:bb:ca:24:62:77:c1:28:f1:93:be:
e5:6f:87:30:ef:ef:ad:54:19:39:05:14:a9:98:b1:50:cd:be:
3f:57:b0:db:85:12:d6:59:87:d6:7c:9a:fc:b6:47:2e:68:d1:
73:3a:62:55:f6:18:d8:0e:fd:3b:ec:a1:3c:60:5f:ac:2f:69:
50:35:10:af:a5:5c:ed:3e:10:75:f2:6b:1c:7a:7f:28:89:81:
2a:85:ab:56:3d:af:41:56:f8:e3:55:47:dd:8d:b9:0f:88:5d:
07:cd:70:dc:19:da:f6:69:d8:4f:8c:f4:67:ed:91:cd:51:92:
7a:a1:f8:6b:12:07:84:7f:55:a5:c6:7c:cc:8c:50:c1:a7:f5:
c0:28:74:77:74:81:87:0a:85:56:32:2c:b2:e5:54:ec:45:82:
91:22:17:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:44:50 2025 by rpki-client