Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/62578b-610b-4758-bbb5-4c9165c7d5e4/1/UyClURbR4jWcx9PivGStEZ4RdbE.mft
File: UyClURbR4jWcx9PivGStEZ4RdbE.mft (raw, json)
Hash identifier: E/TLpayH7sfbQ1dwqSBtecEOl7gMB/YHMesNPJlxTpA=
Subject key identifier: 88:CF:D5:DB:20:4A:D9:77:79:9A:5F:EC:D3:FB:DC:59:94:41:B6:54
Authority key identifier: 53:20:A5:51:16:D1:E2:35:9C:C7:D3:E2:BC:64:AD:11:9E:11:75:B1
Certificate issuer: /CN=5320a55116d1e2359cc7d3e2bc64ad119e1175b1
Certificate serial: 019A72CA3302518CAE3AD6B4B292A6C02580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UyClURbR4jWcx9PivGStEZ4RdbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/62578b-610b-4758-bbb5-4c9165c7d5e4/1/UyClURbR4jWcx9PivGStEZ4RdbE.mft
Manifest number: 0669
Signing time: Tue 11 Nov 2025 12:00:45 +0000
Manifest this update: Tue 11 Nov 2025 12:00:45 +0000
Manifest next update: Wed 12 Nov 2025 12:00:45 +0000
Files and hashes: 1: UyClURbR4jWcx9PivGStEZ4RdbE.crl (hash: 8vj0m/GFGISKM7AQBBYHboJocwPoMJy8tVR3OcB31tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/62578b-610b-4758-bbb5-4c9165c7d5e4/1/UyClURbR4jWcx9PivGStEZ4RdbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/62578b-610b-4758-bbb5-4c9165c7d5e4/1/UyClURbR4jWcx9PivGStEZ4RdbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UyClURbR4jWcx9PivGStEZ4RdbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:33:02:51:8c:ae:3a:d6:b4:b2:92:a6:c0:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5320a55116d1e2359cc7d3e2bc64ad119e1175b1
Validity
Not Before: Nov 11 12:00:45 2025 GMT
Not After : Nov 12 12:00:45 2025 GMT
Subject: CN=88cfd5db204ad977799a5fecd3fbdc599441b654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b4:a6:04:38:1f:f2:70:68:60:a4:b7:57:d8:
42:7c:58:06:eb:a8:fd:5e:5a:f6:78:41:74:fa:70:
c7:ca:ad:a4:2c:c6:ed:be:9b:39:b2:b8:fa:ed:f6:
60:af:fe:fc:e4:83:fc:60:d8:d2:13:5b:51:f2:23:
52:17:b7:66:76:b4:21:b9:af:1e:39:d3:ac:56:9f:
91:6b:e7:a5:83:48:0a:bb:cd:7b:b6:25:51:0c:26:
21:6b:f8:9a:4b:df:18:29:45:aa:2e:95:35:f0:3c:
04:fd:af:72:67:02:22:ca:d1:24:5c:49:2c:87:bd:
1f:c6:c0:94:ac:6b:e4:b1:c6:e6:33:8b:96:dc:d2:
43:c4:44:b2:17:ac:67:e2:b9:19:08:13:f6:be:1c:
77:db:89:0f:a5:db:2f:f9:56:55:23:67:01:ff:0f:
c3:39:19:21:39:a0:35:43:92:95:8f:ad:e0:5f:67:
eb:66:96:af:9a:0b:03:36:e6:62:b0:6e:11:d0:a0:
64:56:98:8b:57:7d:82:21:72:10:76:59:7d:66:6d:
1d:e2:0a:be:5d:0f:34:ae:89:c0:1a:f8:02:e0:2e:
81:23:82:c2:32:bf:b3:0e:6b:e0:dd:34:86:4c:46:
a0:e9:1d:1b:fd:c2:1a:7d:44:4b:77:7a:32:36:dd:
9f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CF:D5:DB:20:4A:D9:77:79:9A:5F:EC:D3:FB:DC:59:94:41:B6:54
X509v3 Authority Key Identifier:
keyid:53:20:A5:51:16:D1:E2:35:9C:C7:D3:E2:BC:64:AD:11:9E:11:75:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyClURbR4jWcx9PivGStEZ4RdbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/62578b-610b-4758-bbb5-4c9165c7d5e4/1/UyClURbR4jWcx9PivGStEZ4RdbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/62578b-610b-4758-bbb5-4c9165c7d5e4/1/UyClURbR4jWcx9PivGStEZ4RdbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:87:c8:8c:dc:be:22:2b:8d:14:65:89:23:34:a3:22:d7:b2:
48:32:c7:39:02:0c:64:e0:5e:41:7b:d8:34:3b:94:37:e7:8f:
4d:6a:03:db:94:29:ad:12:a1:f5:7e:f8:6e:d5:f6:6e:c8:ab:
37:e2:72:e7:76:ea:6c:0a:da:a2:e1:14:98:d8:43:fc:37:41:
72:9b:5d:fb:c6:ce:03:d9:54:39:d4:65:78:b9:e0:b0:85:d0:
61:6c:d7:89:7a:c5:0f:92:b4:61:0f:3c:76:98:3d:c0:30:29:
44:86:12:24:8c:c6:b0:ae:69:88:c5:6c:7f:2e:1d:e7:99:03:
5f:e7:9c:b9:22:dc:3c:c3:66:f7:92:92:ef:7c:53:8e:19:64:
9b:31:19:5e:27:71:4d:f1:93:a8:65:62:62:eb:17:03:9b:dd:
ff:4b:6c:9b:2d:a8:cf:95:6a:6e:15:1d:cb:3f:bd:d5:e4:7a:
56:fa:8a:ac:6e:47:51:4a:f2:e2:41:ae:78:04:90:04:8e:c1:
14:cc:6a:72:e5:66:9c:29:7e:92:d6:cd:18:23:37:aa:10:e3:
14:1c:1f:4d:3f:45:37:e9:bd:18:5c:cb:13:2d:b5:2b:1e:cf:
01:47:99:36:95:65:78:6f:aa:ea:34:2b:39:83:74:56:1b:79:
82:c4:8c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:57 2025 by rpki-client