Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.mft
File: UfsmDqHIG4GxkdCujcNkESHp65Y.mft (raw, json)
Hash identifier: tAK1yjjCRVZbqj1iuTTQdGlHl26ubwgyzReE9ctoft0=
Subject key identifier: 0A:D3:0A:4B:D0:EA:52:CB:D5:CD:75:CA:FF:C4:FB:57:42:93:9F:4B
Authority key identifier: 51:FB:26:0E:A1:C8:1B:81:B1:91:D0:AE:8D:C3:64:11:21:E9:EB:96
Certificate issuer: /CN=51fb260ea1c81b81b191d0ae8dc3641121e9eb96
Certificate serial: 019A725CAAB395A9B05761A56718B2F3EAA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfsmDqHIG4GxkdCujcNkESHp65Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.mft
Manifest number: 06C1
Signing time: Tue 11 Nov 2025 10:01:06 +0000
Manifest this update: Tue 11 Nov 2025 10:01:06 +0000
Manifest next update: Wed 12 Nov 2025 10:01:06 +0000
Files and hashes: 1: UfsmDqHIG4GxkdCujcNkESHp65Y.crl (hash: KTROvJjvVgpz0RVSFyaoGTN3CEURbrjM7p2QsrOVjAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UfsmDqHIG4GxkdCujcNkESHp65Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:aa:b3:95:a9:b0:57:61:a5:67:18:b2:f3:ea:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51fb260ea1c81b81b191d0ae8dc3641121e9eb96
Validity
Not Before: Nov 11 10:01:06 2025 GMT
Not After : Nov 12 10:01:06 2025 GMT
Subject: CN=0ad30a4bd0ea52cbd5cd75caffc4fb5742939f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:61:68:25:6f:1e:b3:14:fe:2a:c8:3a:0e:90:
e4:b3:10:a6:7e:48:b0:63:13:a7:94:11:37:89:2c:
70:00:a4:3a:ad:03:c8:d0:43:b5:20:ca:47:51:c2:
4b:96:8e:42:09:d5:c1:6c:13:d3:72:3b:56:e5:47:
ea:26:56:86:a0:d7:29:03:a2:3a:a5:df:3a:04:79:
eb:3b:d4:57:fe:53:19:e9:a3:89:9b:12:4b:fc:04:
4a:52:70:6c:46:5f:e8:5c:e7:f5:d1:f3:0a:4c:cb:
39:68:26:64:fe:52:83:fe:7e:9f:51:e8:41:28:0a:
63:81:20:25:88:51:e1:ce:c7:46:48:6c:29:c9:b3:
ce:55:81:80:f8:c7:2f:cb:38:45:82:74:06:1f:ca:
9c:9a:87:3d:40:7e:ca:09:5e:42:a0:6b:b2:01:e2:
6e:37:be:65:18:f9:5f:55:99:6d:38:94:41:c5:e1:
2b:9f:7d:ff:a7:4e:df:32:3d:72:37:63:73:99:4b:
e2:a0:1e:5d:a9:89:d9:cd:3f:53:99:8c:67:93:ac:
eb:55:d9:18:80:23:26:c9:7f:19:f1:6f:d5:2b:bb:
6f:1f:34:de:ab:ff:08:61:b6:ac:ed:52:94:5b:dc:
e8:b0:fd:90:b0:2d:80:7a:73:1d:96:fd:87:f5:c3:
d6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D3:0A:4B:D0:EA:52:CB:D5:CD:75:CA:FF:C4:FB:57:42:93:9F:4B
X509v3 Authority Key Identifier:
keyid:51:FB:26:0E:A1:C8:1B:81:B1:91:D0:AE:8D:C3:64:11:21:E9:EB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfsmDqHIG4GxkdCujcNkESHp65Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:81:a9:ad:02:f5:31:f7:dc:19:ff:ff:5e:95:75:3c:47:a9:
e4:2c:ac:b9:69:38:57:b4:41:81:51:24:98:3d:32:a9:79:c2:
61:f7:54:19:62:86:70:83:1f:f6:07:cb:3b:71:00:c3:77:9c:
39:59:18:b8:2a:d4:ca:dc:28:c4:97:9a:d1:ed:bc:68:5a:6e:
8e:ff:94:56:6e:0f:55:df:7e:5f:5e:d6:26:53:66:eb:7c:84:
9c:59:6d:75:13:95:c8:88:a7:9a:ca:2c:c9:72:4f:ae:65:a3:
18:81:43:8f:e0:ab:d3:8d:f8:50:7b:58:bc:0e:05:b0:79:40:
6d:ff:de:1e:4f:31:ec:29:c1:89:a1:f3:ea:43:a4:92:2e:e2:
dd:1a:31:d4:67:47:32:fb:bc:ed:c6:58:1e:6d:57:6d:14:ef:
66:8f:f6:98:d1:a8:27:d9:51:40:79:ab:81:ed:9e:fc:b1:93:
91:60:f5:ef:5e:3a:f1:f1:8c:1d:31:3d:18:9f:be:c0:5d:98:
a5:9c:c6:e4:86:9c:00:1d:ac:10:e5:19:3d:eb:ac:80:87:81:
1f:cd:1e:da:06:0b:17:5e:72:d6:bb:96:fd:ee:ba:43:fb:af:
c9:d8:b5:89:1a:d4:07:40:1c:d1:f3:7a:e3:cf:a5:4a:9c:fb:
49:ae:59:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:29 2025 by rpki-client