Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.mft
File: uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.mft (raw, json)
Hash identifier: diJ1e9ZUW/3r9v3OKu/2hGfmD0qr8Msqansl+IklBHQ=
Subject key identifier: E1:A2:F2:1B:69:3E:F5:6E:47:CA:FD:40:B2:B6:61:14:8E:4E:3C:E2
Authority key identifier: B9:43:D7:E4:4D:37:AC:59:10:02:63:19:F1:0C:DD:73:96:7D:97:CA
Certificate issuer: /CN=b943d7e44d37ac5910026319f10cdd73967d97ca
Certificate serial: 019A71B943F215E32A5DA99A13BBFD000C85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.mft
Manifest number: 1704
Signing time: Tue 11 Nov 2025 07:02:38 +0000
Manifest this update: Tue 11 Nov 2025 07:02:38 +0000
Manifest next update: Wed 12 Nov 2025 07:02:38 +0000
Files and hashes: 1: uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.crl (hash: mjikEe823BrJkuUkn2fn2d/njdhaGb7BRkTT6m3dov0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:43:f2:15:e3:2a:5d:a9:9a:13:bb:fd:00:0c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b943d7e44d37ac5910026319f10cdd73967d97ca
Validity
Not Before: Nov 11 07:02:38 2025 GMT
Not After : Nov 12 07:02:38 2025 GMT
Subject: CN=e1a2f21b693ef56e47cafd40b2b661148e4e3ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:23:9d:db:21:8e:3b:43:6f:40:af:1e:87:84:
33:c3:2b:c3:63:87:98:ab:41:99:f9:bf:04:75:e5:
68:96:56:e7:3f:e6:ca:8c:46:24:1b:e9:7a:f5:f0:
f4:19:f4:8d:fe:bf:c5:07:50:3a:65:9d:0d:43:7f:
aa:80:a1:e1:4b:98:69:f8:ba:54:4b:ef:77:33:f2:
ba:89:11:38:3e:61:10:fd:08:67:5b:d8:ee:11:1d:
2b:ef:cb:55:84:86:8b:91:ad:07:c9:e2:62:f4:9b:
58:3b:0c:8d:ca:ff:bb:0d:c8:45:37:2b:94:c7:45:
24:4b:e4:e7:2f:e0:3a:f8:b0:7d:af:8f:be:2a:c8:
d9:36:93:f8:77:5b:e3:8c:f0:50:bd:d8:aa:b6:4e:
77:43:1d:06:bc:20:53:20:3a:da:9d:2e:6a:ad:e4:
29:cc:34:43:74:24:01:65:63:eb:d7:27:55:d0:67:
88:6d:94:85:85:36:ed:0c:e0:0e:56:06:e2:c3:4f:
33:b3:ed:92:a9:c6:ca:11:63:f4:33:ea:a7:e6:f6:
f5:31:32:28:e4:96:8b:0a:31:7f:2e:f3:44:e8:fa:
d1:11:2a:a0:e9:4e:7b:d5:a3:56:8b:76:27:4e:bd:
f3:41:8f:8c:ef:f2:67:e8:40:af:f0:2e:99:46:a5:
f6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A2:F2:1B:69:3E:F5:6E:47:CA:FD:40:B2:B6:61:14:8E:4E:3C:E2
X509v3 Authority Key Identifier:
keyid:B9:43:D7:E4:4D:37:AC:59:10:02:63:19:F1:0C:DD:73:96:7D:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c1:68:76:0d:2e:07:0c:9b:4e:9f:5f:86:c4:e6:29:a3:09:
ea:97:f0:a5:a0:d6:e9:bd:e1:a2:61:6c:df:88:e0:d5:7e:d3:
e0:3f:c3:99:44:2a:a8:61:9c:b7:04:c6:9f:ef:ab:07:f9:a9:
c8:91:46:b3:c1:b3:23:8b:c7:e1:c3:ba:7c:e7:8f:96:90:fc:
d3:ff:04:52:e3:2a:06:4e:5f:33:86:f5:01:f2:50:ec:95:6a:
89:00:db:41:08:85:bd:06:a8:60:70:5e:88:29:46:86:15:04:
22:d8:3a:91:46:b3:08:e2:f0:ae:96:34:f3:07:25:a3:8f:6d:
cd:c2:75:f7:3f:24:93:60:51:4e:b0:c5:be:3c:be:1f:41:77:
2e:2d:09:44:30:e9:d0:28:27:05:e2:97:81:dd:44:50:30:fe:
4d:20:fb:f9:98:55:c9:a1:1a:e4:9a:88:46:e5:7b:a6:2f:f2:
e0:ff:5c:55:88:a6:28:36:82:b6:a6:3f:ad:ab:5c:57:b6:76:
19:cc:78:a4:54:f4:e3:bd:e0:0a:19:3a:7f:d9:73:1d:01:ae:
dd:f5:35:fb:45:66:d4:da:96:fc:3c:bf:e3:64:54:9e:21:c1:
6b:79:7c:ab:7d:5c:4d:00:6c:e9:92:33:9b:e2:c2:22:ee:48:
39:cd:5c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:55:14 2025 by rpki-client