Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.mft
File: UVy9vRam6GjplnW8KRgCaMJY8Ps.mft (raw, json)
Hash identifier: hOr5lNBx2opz7rgqeoO0rTvReC3qdd7+SDGq7ovyD+4=
Subject key identifier: FC:42:85:E4:49:BA:96:EB:45:68:47:4F:87:8C:20:D1:0D:D4:0A:F7
Authority key identifier: 51:5C:BD:BD:16:A6:E8:68:E9:96:75:BC:29:18:02:68:C2:58:F0:FB
Certificate issuer: /CN=515cbdbd16a6e868e99675bc29180268c258f0fb
Certificate serial: 019A71B823637C2BE1F454002CB225F04604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVy9vRam6GjplnW8KRgCaMJY8Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.mft
Manifest number: 120A
Signing time: Tue 11 Nov 2025 07:01:24 +0000
Manifest this update: Tue 11 Nov 2025 07:01:24 +0000
Manifest next update: Wed 12 Nov 2025 07:01:24 +0000
Files and hashes: 1: UVy9vRam6GjplnW8KRgCaMJY8Ps.crl (hash: TarKvIme1THagfh1bNEa7ROBKD1Q0hPuiLwTz+IaI5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/UVy9vRam6GjplnW8KRgCaMJY8Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:23:63:7c:2b:e1:f4:54:00:2c:b2:25:f0:46:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=515cbdbd16a6e868e99675bc29180268c258f0fb
Validity
Not Before: Nov 11 07:01:24 2025 GMT
Not After : Nov 12 07:01:24 2025 GMT
Subject: CN=fc4285e449ba96eb4568474f878c20d10dd40af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3b:aa:0d:43:63:0c:0b:41:e2:b2:9c:91:01:
bc:2e:d2:97:4a:62:ef:ce:78:5f:94:90:7e:67:c1:
d0:a0:9f:a8:4e:76:5e:d5:1c:ce:e6:e0:ea:87:a8:
0c:cf:2d:19:d6:c5:3a:68:9e:5e:9b:fc:4b:02:5b:
ba:c3:87:a0:51:3c:a9:a4:94:d2:ab:5a:15:31:5a:
dc:8d:49:74:98:2b:7e:b8:a0:ff:e8:63:3b:92:67:
1a:ef:20:30:05:cd:f1:39:cf:ce:7e:bb:03:39:d7:
50:11:78:38:3a:77:e9:f9:8d:3b:81:1e:df:d0:24:
d4:9b:ff:1e:1c:4e:cb:e3:64:1c:d8:a8:17:b8:c9:
6d:a4:34:2a:e9:82:1f:18:d7:de:8c:d0:b8:a1:68:
a6:57:e5:b8:0e:11:7c:0b:f8:84:d7:d3:39:34:85:
d4:06:8b:73:dc:28:2f:ae:ff:bb:2b:84:fb:8d:04:
f3:44:b3:21:9f:f2:ca:f2:41:ca:3f:9c:a3:9f:b1:
0b:8d:03:13:a0:c7:63:f1:8d:02:7d:d8:35:db:d0:
22:5d:a0:a7:88:8a:b0:e8:f4:e8:2d:ea:1c:e0:d6:
26:bf:d5:09:54:04:c4:95:11:1c:cf:50:75:7a:54:
2c:ae:9e:bb:3a:66:71:bb:9e:ef:a7:8d:b5:ad:2e:
66:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:42:85:E4:49:BA:96:EB:45:68:47:4F:87:8C:20:D1:0D:D4:0A:F7
X509v3 Authority Key Identifier:
keyid:51:5C:BD:BD:16:A6:E8:68:E9:96:75:BC:29:18:02:68:C2:58:F0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVy9vRam6GjplnW8KRgCaMJY8Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:2f:c9:5a:9f:c0:bf:8d:4b:89:63:98:92:18:0a:f2:ec:ad:
cd:0c:f7:0e:e9:d1:4e:5a:6e:13:e7:09:e4:ce:d1:5c:9c:48:
ad:5e:fd:7b:4b:4b:6f:ff:c2:49:b9:09:f8:3a:4e:dd:38:17:
36:86:e2:d2:ba:20:76:2b:8c:39:37:48:9d:9c:e1:a2:ab:65:
b7:08:89:ee:45:84:de:c4:e0:dc:f8:7c:d2:11:ee:87:2f:3c:
c8:7c:cf:5c:34:c9:1f:25:e5:24:93:65:2a:69:db:89:a2:2a:
48:c5:b9:bd:df:5f:84:70:61:56:f1:9f:49:60:f0:5f:32:2e:
c0:65:9f:fd:40:23:fb:e5:c9:30:60:5a:0b:29:b4:57:74:80:
c6:e5:27:1d:0d:97:c3:bd:83:d2:94:36:77:7a:8b:53:33:ac:
b9:9d:8f:e4:30:16:08:35:7f:59:1f:34:fe:52:ff:f0:a1:0f:
57:05:c5:c9:1a:dd:23:65:91:b4:75:f8:ca:d7:e6:ed:71:91:
d8:d4:fa:41:32:80:fd:ef:f1:4d:b9:c7:6f:e1:d0:d5:3c:90:
18:d5:37:62:38:4b:18:61:68:00:be:e1:7c:a5:c3:d3:71:ad:
55:68:b4:2f:16:15:ab:9c:26:75:e4:fc:9a:36:28:39:af:d2:
e1:be:a8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:52 2025 by rpki-client