Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft
File: uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft (raw, json)
Hash identifier: AGCUmYShxKxkCB3LUTcnma7aPCKMoE/xcTAwdM/DrWM=
Subject key identifier: A6:9B:42:43:D8:BF:10:43:E4:C4:3A:14:2A:2E:8B:A1:9B:1B:02:56
Authority key identifier: B9:6A:ED:42:6F:B1:A0:63:25:A2:63:79:21:A4:B5:AB:98:A1:A5:94
Certificate issuer: /CN=b96aed426fb1a06325a2637921a4b5ab98a1a594
Certificate serial: 019A722610388CCCF35F6BFB85BDF74C719D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uWrtQm-xoGMlomN5IaS1q5ihpZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft
Manifest number: 0DE7
Signing time: Tue 11 Nov 2025 09:01:28 +0000
Manifest this update: Tue 11 Nov 2025 09:01:28 +0000
Manifest next update: Wed 12 Nov 2025 09:01:28 +0000
Files and hashes: 1: uWrtQm-xoGMlomN5IaS1q5ihpZQ.crl (hash: dW9z2qgWZ+oHAqL0avc8S6/EYJmkhj+smq43JgYw/B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uWrtQm-xoGMlomN5IaS1q5ihpZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:10:38:8c:cc:f3:5f:6b:fb:85:bd:f7:4c:71:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b96aed426fb1a06325a2637921a4b5ab98a1a594
Validity
Not Before: Nov 11 09:01:28 2025 GMT
Not After : Nov 12 09:01:28 2025 GMT
Subject: CN=a69b4243d8bf1043e4c43a142a2e8ba19b1b0256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7a:56:ab:2e:74:f3:6b:30:59:08:02:ef:dd:
0f:31:61:89:49:e1:b5:2c:d6:ee:b3:9c:c1:17:68:
75:5c:8b:85:05:89:4f:92:29:87:8e:6d:54:81:94:
fa:5f:42:89:e9:03:3e:1b:d8:9b:26:f7:37:14:1c:
15:63:0e:2a:4b:2d:78:81:99:0a:b3:34:e5:ce:f7:
03:16:cf:99:33:7b:35:c8:3d:53:52:f4:16:1c:ce:
a9:c8:15:e0:f1:6b:21:7b:8f:d6:38:43:4e:65:5c:
d0:99:64:29:9f:4f:e6:e7:da:b5:2b:b1:54:5a:a4:
e7:c8:74:96:59:80:f9:c7:a4:41:c8:5d:5a:64:d9:
2d:16:88:a7:c2:43:b2:38:57:21:50:38:6e:c4:03:
8f:a7:65:bf:16:87:8c:b7:1a:b7:7d:e7:b8:19:c5:
5d:c5:40:26:ad:38:da:4e:66:4c:59:14:bb:62:e1:
b6:76:62:2e:d1:ad:54:fd:a0:5f:59:39:e5:28:42:
14:6c:8d:24:af:0d:28:59:51:81:76:b7:3f:db:2f:
64:3b:e6:91:f0:76:92:ed:89:63:aa:c4:f2:4d:23:
c4:10:a1:2d:17:6c:6e:9a:f2:25:4f:d2:95:21:6e:
94:c9:75:65:53:64:7d:c1:51:44:45:08:0c:aa:bc:
36:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9B:42:43:D8:BF:10:43:E4:C4:3A:14:2A:2E:8B:A1:9B:1B:02:56
X509v3 Authority Key Identifier:
keyid:B9:6A:ED:42:6F:B1:A0:63:25:A2:63:79:21:A4:B5:AB:98:A1:A5:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWrtQm-xoGMlomN5IaS1q5ihpZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:cc:22:e3:9a:d4:1c:e9:c2:1c:17:f6:6a:33:cb:c4:e3:bb:
ea:75:c0:47:76:09:e8:90:be:5a:3c:fc:03:a4:1f:d5:5f:5d:
3f:be:d6:8e:a5:f1:f5:e4:a4:61:5f:6a:35:55:07:d7:db:65:
10:6a:91:2d:53:bf:1a:70:bb:3f:ec:d6:2b:ad:79:c9:38:4a:
f1:2d:54:b0:3d:19:67:37:e4:85:c7:a9:ce:36:c3:4c:c3:c3:
69:48:2e:5f:ad:21:10:52:96:05:48:77:30:18:0f:ab:4e:b1:
54:79:9e:cb:ad:d5:df:ef:0c:aa:90:1a:81:d0:60:cf:84:7f:
76:8d:51:f2:c2:1a:57:58:3c:f3:b3:31:b1:4e:16:75:bc:88:
80:5f:55:27:8f:4f:8d:ef:48:6a:e5:c7:10:df:2d:86:76:66:
fa:cf:a1:19:92:9b:26:2f:eb:54:8f:80:9a:5f:cf:74:7f:b1:
1c:f9:c1:19:d0:3b:32:e1:05:e1:bf:b0:1a:3e:dc:50:e3:96:
22:61:7c:eb:2e:e5:6a:6b:c0:1a:00:5d:c1:40:b7:04:c7:28:
ed:5a:6e:d4:e4:ad:66:42:5b:a5:40:ac:69:65:24:3b:89:d0:
4a:da:55:89:25:63:c2:c8:7d:4f:45:b2:42:23:52:cb:78:76:
77:43:e0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:38 2025 by rpki-client