Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e535ec-8052-43f5-88dd-cb25a31db7fb/1/_U1vBrsSN-JpB-ZALSvQ2Ik3JQU.mft
File: _U1vBrsSN-JpB-ZALSvQ2Ik3JQU.mft (raw, json)
Hash identifier: 2WeTXSTdbsz4ipl6GtFjsAcx6dACfL9r9NVAQp7w7yk=
Subject key identifier: D5:0F:3E:24:F2:93:CF:9D:C8:30:FA:D3:91:EA:21:1B:BF:8F:BE:8B
Authority key identifier: FD:4D:6F:06:BB:12:37:E2:69:07:E6:40:2D:2B:D0:D8:89:37:25:05
Certificate issuer: /CN=fd4d6f06bb1237e26907e6402d2bd0d889372505
Certificate serial: 019A71B850478196C36D320F83B938334BA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_U1vBrsSN-JpB-ZALSvQ2Ik3JQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e535ec-8052-43f5-88dd-cb25a31db7fb/1/_U1vBrsSN-JpB-ZALSvQ2Ik3JQU.mft
Manifest number: 36
Signing time: Tue 11 Nov 2025 07:01:35 +0000
Manifest this update: Tue 11 Nov 2025 07:01:35 +0000
Manifest next update: Wed 12 Nov 2025 07:01:35 +0000
Files and hashes: 1: _U1vBrsSN-JpB-ZALSvQ2Ik3JQU.crl (hash: iiOvAd8iK59enQ2LiTnOlUszj5JioxioYK8CGf/x9Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/e535ec-8052-43f5-88dd-cb25a31db7fb/1/_U1vBrsSN-JpB-ZALSvQ2Ik3JQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/e535ec-8052-43f5-88dd-cb25a31db7fb/1/_U1vBrsSN-JpB-ZALSvQ2Ik3JQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_U1vBrsSN-JpB-ZALSvQ2Ik3JQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:50:47:81:96:c3:6d:32:0f:83:b9:38:33:4b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd4d6f06bb1237e26907e6402d2bd0d889372505
Validity
Not Before: Nov 11 07:01:35 2025 GMT
Not After : Nov 12 07:01:35 2025 GMT
Subject: CN=d50f3e24f293cf9dc830fad391ea211bbf8fbe8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d4:f2:2f:78:d2:b0:c2:d8:ad:43:65:10:df:
a6:f7:1d:8a:98:ed:c2:17:fb:f0:70:e9:11:51:69:
df:65:bf:19:94:76:f9:43:b2:73:18:91:74:a3:e6:
82:e8:08:b0:3b:ff:4b:d7:b2:f4:93:17:6d:a1:cc:
77:0e:c3:c7:31:68:0c:15:65:9e:ca:3e:dc:7c:2f:
66:69:d2:6f:84:40:ee:a2:a9:54:a9:a5:a2:05:9c:
89:e3:88:0e:d8:56:8b:3a:c1:b6:1b:16:9a:0d:e2:
0f:c1:28:01:89:f5:f5:1b:ce:a6:c5:5b:d1:2a:dd:
04:7e:d6:d8:f8:16:6a:b6:a4:46:b7:89:d6:91:8b:
2d:41:e1:25:3b:0b:ae:d2:be:d2:3b:07:71:38:56:
34:16:51:44:a7:cf:ea:68:d1:bb:54:13:8e:e9:67:
a3:f1:59:1b:2b:fb:bf:97:c3:39:98:8f:39:21:c0:
57:fa:4b:d2:50:18:cf:43:aa:70:93:e0:9c:a2:16:
5e:64:8e:da:3d:fa:ea:76:2e:6b:4b:a5:49:2f:96:
8c:d6:6d:20:35:fa:30:83:ba:d5:49:0f:fb:7b:68:
eb:53:e5:bd:f1:dc:14:5e:cc:fd:0a:80:46:3b:de:
ad:ec:f7:f7:26:4d:de:52:58:66:3e:99:2a:6a:7e:
ad:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0F:3E:24:F2:93:CF:9D:C8:30:FA:D3:91:EA:21:1B:BF:8F:BE:8B
X509v3 Authority Key Identifier:
keyid:FD:4D:6F:06:BB:12:37:E2:69:07:E6:40:2D:2B:D0:D8:89:37:25:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_U1vBrsSN-JpB-ZALSvQ2Ik3JQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e535ec-8052-43f5-88dd-cb25a31db7fb/1/_U1vBrsSN-JpB-ZALSvQ2Ik3JQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e535ec-8052-43f5-88dd-cb25a31db7fb/1/_U1vBrsSN-JpB-ZALSvQ2Ik3JQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e0:04:89:78:3c:24:04:f5:4f:37:05:58:46:b7:fa:97:71:
e8:42:3a:78:90:a8:13:13:ff:c2:1b:70:b3:69:92:1f:2c:b9:
aa:2d:67:ee:f4:5b:f4:29:ca:2c:02:8d:cb:c7:01:e3:ee:73:
d1:fc:04:ae:6c:ae:cc:6c:24:a6:95:7e:51:1e:38:a7:64:b9:
57:ce:94:4e:67:03:31:b5:fe:6f:67:70:a1:a6:68:a5:e1:1d:
13:57:45:23:df:9f:5f:23:fc:68:e2:6f:46:57:2d:26:e5:42:
8a:81:6e:df:40:01:73:e4:ab:6c:28:d3:df:20:d9:2f:fb:00:
8e:33:96:b1:35:db:62:19:66:b4:ea:8e:00:94:6c:c2:4b:51:
49:b2:f8:ac:23:6c:1b:ba:91:ae:8e:16:7a:76:2d:70:72:28:
52:d2:2b:c1:f5:32:9b:f0:e8:9a:06:21:d7:7a:88:f1:e4:02:
48:a5:c4:26:bc:f4:8b:f9:86:f5:b4:be:f6:47:01:12:23:00:
7f:f5:95:24:e2:0a:77:00:6b:4b:2e:70:10:13:b9:73:fe:20:
5e:ee:50:1b:9a:c7:8b:45:37:e1:96:77:34:3f:76:fe:7e:66:
77:ac:9e:da:1a:5a:b9:01:30:6f:ef:03:99:91:cd:a0:e7:1d:
f7:c2:1f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:39 2025 by rpki-client