Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
File: ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft (raw, json)
Hash identifier: gWPsDobwAHhFSTO45IRqK+cU7ytllYtV+gWCOabXn6k=
Subject key identifier: 2C:00:26:DE:F7:5B:31:F9:46:9E:2E:ED:DC:C1:3E:44:91:8A:56:71
Authority key identifier: BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E
Certificate issuer: /CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e
Certificate serial: 019A71B92BD3B242EF1DADF6DFE685FA3EC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
Manifest number: 10DC
Signing time: Tue 11 Nov 2025 07:02:32 +0000
Manifest this update: Tue 11 Nov 2025 07:02:32 +0000
Manifest next update: Wed 12 Nov 2025 07:02:32 +0000
Files and hashes: 1: ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl (hash: fEViNw4uP8X1K09xaxI8k5cPSJ1JM6Pe+GzNAF+Sj0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:2b:d3:b2:42:ef:1d:ad:f6:df:e6:85:fa:3e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e
Validity
Not Before: Nov 11 07:02:32 2025 GMT
Not After : Nov 12 07:02:32 2025 GMT
Subject: CN=2c0026def75b31f9469e2eeddcc13e44918a5671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:22:7a:20:a8:63:2e:1b:c1:0d:36:54:74:e1:
35:d5:8a:0a:3e:0d:d0:d6:b3:a9:72:b5:07:46:4d:
44:e2:f3:40:5e:32:af:d1:0d:61:7a:62:bd:8f:74:
c5:91:5d:83:8e:09:19:a9:4d:36:9c:1d:a5:bb:10:
1b:ad:77:aa:b4:4a:63:5c:09:4e:7b:2b:ab:8d:a5:
e7:01:c9:3d:04:aa:ae:f4:de:94:f1:30:20:44:05:
de:b1:b2:a8:eb:35:52:df:29:6d:38:21:a9:c2:2b:
41:b5:7e:fd:c2:7c:a9:13:df:40:12:4b:b7:16:eb:
2e:f7:19:6b:cf:a9:ef:13:96:01:64:f4:1f:02:e8:
41:72:c4:01:a0:01:fe:00:6a:5b:b4:d5:60:6d:ed:
91:c7:31:41:60:15:10:ca:df:e1:37:5b:15:2d:33:
7c:74:9b:1a:cd:7d:a6:16:8a:7f:7f:e8:74:76:6a:
02:ab:8f:7b:02:15:de:a3:ad:5d:05:54:01:3b:ed:
af:00:61:84:05:57:84:c0:12:b1:01:b9:df:e6:1d:
08:5d:ef:7c:04:30:d3:01:7c:f1:fb:08:5d:3a:41:
c3:a5:d4:e4:82:cc:8e:37:23:93:97:3b:0f:23:cd:
1c:0c:64:c5:dd:f3:8b:5b:4f:7f:95:cc:60:b8:05:
79:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:00:26:DE:F7:5B:31:F9:46:9E:2E:ED:DC:C1:3E:44:91:8A:56:71
X509v3 Authority Key Identifier:
keyid:BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:44:d2:c7:79:64:c7:bd:02:52:7f:f9:09:8f:cf:3d:90:89:
5f:ed:1d:eb:c2:4a:1e:5c:3f:07:c7:11:04:7c:aa:75:b1:cd:
b7:cc:63:75:4f:37:86:2e:17:0b:2c:43:a5:79:7d:ed:fa:d9:
54:77:d5:b4:14:f7:4b:24:c3:55:b1:7b:3f:ee:43:c7:b2:a5:
2f:60:95:66:ad:e0:3d:6b:15:89:0c:03:4e:02:0f:5a:00:ff:
ef:5d:4a:4c:97:32:f7:8d:e5:52:7e:8e:99:cb:02:07:95:91:
2d:34:6b:05:16:6b:cb:f6:d3:d8:e1:5c:40:2a:01:5f:97:7a:
d9:3d:d7:71:64:3e:08:da:6e:ab:d8:43:bf:b6:16:a4:c8:a9:
15:e4:fa:f0:c1:c0:6f:9b:71:61:ed:b5:bf:fa:5d:76:1b:7c:
9b:22:6a:0d:3d:52:b5:a9:4c:74:2a:8b:08:b6:b0:71:90:2c:
bd:f9:aa:12:01:19:22:d6:4f:f2:b1:70:75:75:bb:d8:9d:7e:
66:f0:41:6c:4d:27:18:ad:28:70:fb:03:68:3d:3f:17:08:50:
ee:ef:ef:22:81:aa:0c:ee:aa:fe:03:bc:7f:2b:92:ca:cb:08:
c6:d4:ab:80:aa:69:55:55:b5:c8:ed:38:0f:d7:b4:54:eb:1c:
d4:a3:b7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:18:59 2025 by rpki-client