Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
File: UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft (raw, json)
Hash identifier: uTTYjeQ/UeFTC8QRaY3YHLA0iyOk+srk6yLpeDl+Kos=
Subject key identifier: 02:A6:2C:17:60:41:75:00:A6:AD:A2:97:B4:06:5E:4B:D0:F5:AC:4A
Authority key identifier: 50:1B:52:02:A0:ED:46:F6:41:1E:1E:DA:7C:7B:59:DD:8C:C6:CD:87
Certificate issuer: /CN=501b5202a0ed46f6411e1eda7c7b59dd8cc6cd87
Certificate serial: 019A73011D1D41FE4B22E76A71A0E48E5D15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
Manifest number: 1472
Signing time: Tue 11 Nov 2025 13:00:44 +0000
Manifest this update: Tue 11 Nov 2025 13:00:44 +0000
Manifest next update: Wed 12 Nov 2025 13:00:44 +0000
Files and hashes: 1: UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl (hash: 4f2tpCvpq+0R48ABT8xsjchxMqUCH+0i5OG3McqpK10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:1d:1d:41:fe:4b:22:e7:6a:71:a0:e4:8e:5d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501b5202a0ed46f6411e1eda7c7b59dd8cc6cd87
Validity
Not Before: Nov 11 13:00:44 2025 GMT
Not After : Nov 12 13:00:44 2025 GMT
Subject: CN=02a62c1760417500a6ada297b4065e4bd0f5ac4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:22:bd:0a:8a:b8:d1:13:e9:ac:9b:73:44:d0:
77:0d:43:e2:ff:aa:1b:22:19:a8:5e:6c:a5:71:f1:
f7:ac:6c:96:04:2e:60:7a:04:ab:e4:9e:c9:b2:14:
37:ea:3f:4d:e5:9f:66:4d:93:ba:90:64:1c:79:16:
b9:55:fe:53:9f:a2:d1:9f:71:65:99:6e:c8:68:d1:
a0:10:31:1b:e0:ec:15:52:0f:8e:f4:0e:3b:cf:82:
65:72:69:80:6f:a2:09:98:7c:20:a2:2f:11:ae:b9:
c3:4b:15:8e:ee:78:22:0e:53:be:ee:74:5e:b6:38:
17:26:8f:c0:aa:cc:c7:34:58:b1:64:f3:4b:fe:36:
05:d7:7f:1a:48:f1:de:15:2e:0a:63:11:c8:f2:7a:
4c:22:11:70:5b:59:b1:9f:dd:05:78:f1:e9:44:08:
fa:62:76:0a:51:94:9c:cd:ba:0a:29:8e:e0:a2:46:
44:06:aa:ae:b1:49:60:ec:1c:1f:4a:3c:95:64:4d:
07:85:fd:1e:fc:bc:ee:ac:1d:a9:f3:8c:ec:a0:2f:
3d:1a:8e:4f:69:27:d7:b7:e4:af:40:3c:c8:64:18:
e2:14:05:30:58:4f:1d:36:e1:3d:fb:47:a5:85:91:
98:89:2a:c9:56:f1:56:e7:2a:c8:8e:81:f5:80:58:
1d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A6:2C:17:60:41:75:00:A6:AD:A2:97:B4:06:5E:4B:D0:F5:AC:4A
X509v3 Authority Key Identifier:
keyid:50:1B:52:02:A0:ED:46:F6:41:1E:1E:DA:7C:7B:59:DD:8C:C6:CD:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:1e:10:98:71:28:d8:96:b3:ad:bd:cb:8a:79:6a:54:97:56:
74:ed:a7:5e:24:57:29:cd:fe:9d:f8:da:11:7a:7b:6f:75:4d:
82:90:fe:ac:96:3e:c5:39:a3:88:8b:06:ea:d3:22:d7:9a:dc:
78:36:58:30:db:8b:99:07:7a:7d:72:2f:bf:25:7e:9e:52:30:
ac:dc:54:10:c9:68:91:77:cb:f3:a5:3f:f6:7d:31:4c:eb:9a:
1d:c4:33:0f:94:f5:93:d8:8c:32:73:2b:3d:43:02:ec:b2:82:
37:18:2f:5b:22:71:ca:0e:1d:91:18:f0:64:cc:12:17:78:07:
e2:4a:16:73:a4:b8:90:07:d0:5d:57:b1:e5:74:87:37:bf:b7:
c2:33:a3:f5:2c:cd:df:c0:f8:7e:f4:02:87:fc:94:4e:da:8f:
17:94:2b:24:f7:78:fd:5b:c8:08:4e:d6:5b:58:c1:e5:ed:24:
54:08:f1:15:70:e1:e7:5b:fb:b7:15:21:34:7c:a7:0d:aa:85:
13:1f:8c:3f:57:18:10:21:72:0a:1b:2f:0c:39:f6:c6:29:10:
e6:bb:7d:66:d6:19:59:7b:48:a0:1a:b4:f3:c7:14:44:c5:bd:
20:49:15:bf:42:0f:f0:1b:47:6e:09:d5:35:04:2c:77:39:51:
a5:f0:1b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:51:40 2025 by rpki-client