Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft
File: ULhDqNkbFYJOYOLNaJpvRR4lal4.mft (raw, json)
Hash identifier: Bd72h/9Hf80IS3fKRCfjn4sK68mS6ZQKnmeTBZgi/LM=
Subject key identifier: D7:EE:1C:30:7D:AE:3C:98:E5:9F:6A:E9:83:FE:96:FA:81:93:B4:7B
Authority key identifier: 50:B8:43:A8:D9:1B:15:82:4E:60:E2:CD:68:9A:6F:45:1E:25:6A:5E
Certificate issuer: /CN=50b843a8d91b15824e60e2cd689a6f451e256a5e
Certificate serial: 019A714A15A259F26B3A6158AD676888E7B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULhDqNkbFYJOYOLNaJpvRR4lal4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft
Manifest number: 0490
Signing time: Tue 11 Nov 2025 05:01:11 +0000
Manifest this update: Tue 11 Nov 2025 05:01:11 +0000
Manifest next update: Wed 12 Nov 2025 05:01:11 +0000
Files and hashes: 1: ULhDqNkbFYJOYOLNaJpvRR4lal4.crl (hash: h35M/ViUEUy2468nR7ap1mHu1+gkvj96UJ7wiTCBD1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ULhDqNkbFYJOYOLNaJpvRR4lal4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:15:a2:59:f2:6b:3a:61:58:ad:67:68:88:e7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50b843a8d91b15824e60e2cd689a6f451e256a5e
Validity
Not Before: Nov 11 05:01:11 2025 GMT
Not After : Nov 12 05:01:11 2025 GMT
Subject: CN=d7ee1c307dae3c98e59f6ae983fe96fa8193b47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0e:c0:65:88:17:a0:7a:1e:6c:b0:1a:78:1e:
8e:59:4b:36:4e:41:bb:6f:ac:4b:13:86:eb:de:5d:
ec:4d:98:28:95:2f:b6:e2:b8:e7:39:13:f8:6e:56:
d6:d3:54:79:e9:c7:e3:ef:80:25:3f:1c:74:d1:67:
d7:1d:60:71:bb:c0:a0:a2:a6:6c:36:ee:8e:ee:69:
7d:28:d8:28:08:81:df:ad:34:f8:9a:58:b7:fe:52:
92:46:73:54:d3:a0:0b:07:ef:09:f7:0f:7e:e1:64:
47:41:a7:c7:93:46:fd:1f:c0:78:c9:6d:cf:36:b5:
22:7d:3b:72:9c:1c:01:fd:e4:b3:52:58:88:9d:06:
0b:e3:03:6b:7f:2e:d8:77:aa:3d:d0:44:08:ed:7e:
cf:1d:99:13:b2:d7:3e:33:1c:dc:49:80:c4:79:00:
3c:93:61:81:62:90:62:b7:83:61:b7:72:0c:b5:14:
c2:83:ae:1c:a3:6c:2c:ef:10:81:56:e9:f8:af:36:
be:aa:ea:fc:d3:7d:01:4f:9c:0f:35:19:bf:fe:3b:
8a:82:be:b7:36:06:55:16:8f:83:94:85:86:b6:e2:
b0:2e:97:a1:a6:0c:46:4b:8b:c4:4d:5c:61:7a:27:
74:4b:3c:c4:1a:43:a1:67:a2:e0:0e:58:d7:2a:33:
38:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EE:1C:30:7D:AE:3C:98:E5:9F:6A:E9:83:FE:96:FA:81:93:B4:7B
X509v3 Authority Key Identifier:
keyid:50:B8:43:A8:D9:1B:15:82:4E:60:E2:CD:68:9A:6F:45:1E:25:6A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULhDqNkbFYJOYOLNaJpvRR4lal4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:45:89:49:0b:ca:ef:06:16:b3:a8:e3:28:de:43:52:3c:e1:
94:35:20:9d:4e:e7:76:cd:1a:8e:9f:48:0d:86:58:e9:aa:55:
ee:1c:68:be:95:f7:aa:61:b4:86:13:83:f3:a8:2a:5d:05:1e:
b0:a2:41:a9:d4:e5:c3:77:71:70:7f:76:65:73:11:7c:e5:2d:
59:c5:1e:88:01:ed:ff:3a:98:6e:aa:3e:85:d5:26:32:fb:03:
2f:39:79:92:e3:34:e5:22:c8:73:ad:24:9b:52:bf:ca:3a:1c:
e9:80:be:54:07:0f:cf:73:d7:e5:7d:87:3f:96:13:71:fe:08:
74:1b:77:26:a5:3a:bb:1f:d0:37:d3:da:b2:e0:b7:87:83:9e:
35:41:b6:07:91:57:56:46:a8:0f:0b:44:c2:0d:e5:35:d4:69:
b7:b6:07:7b:b9:cc:1c:d0:46:13:d1:df:7f:64:c9:35:49:1b:
12:47:29:e2:43:96:ae:af:a9:5a:34:06:a8:8c:8e:4e:2b:8f:
ab:96:3a:d4:a4:e7:30:8c:af:87:b5:1a:ba:fa:48:df:d8:0d:
88:88:dc:0c:94:01:3e:e4:5d:35:17:16:28:b3:79:3d:90:64:
47:1e:14:cf:3b:44:51:ef:68:87:7e:68:64:d4:53:57:58:39:
8a:e5:9a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:12 2025 by rpki-client