Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft
File: Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft (raw, json)
Hash identifier: v+pA9kld0TMuZ9DevwoaSz8CI2MsWK0eBpbzFYZ2Vrc=
Subject key identifier: 6D:36:99:EC:A1:D1:BE:8C:26:99:67:FA:4C:D9:F3:62:A4:F6:E9:43
Authority key identifier: 52:EF:F3:85:D4:B4:82:15:D8:05:B5:88:A2:70:58:29:D4:62:11:71
Certificate issuer: /CN=52eff385d4b48215d805b588a2705829d4621171
Certificate serial: 019A71B7CD8122F86854EE366248AE949C86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uu_zhdS0ghXYBbWIonBYKdRiEXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft
Manifest number: 0AC8
Signing time: Tue 11 Nov 2025 07:01:02 +0000
Manifest this update: Tue 11 Nov 2025 07:01:02 +0000
Manifest next update: Wed 12 Nov 2025 07:01:02 +0000
Files and hashes: 1: Uu_zhdS0ghXYBbWIonBYKdRiEXE.crl (hash: aBKrX71YvXiMylQN79kcrdVG5VWGLdnlLJLnGvVJDA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uu_zhdS0ghXYBbWIonBYKdRiEXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:cd:81:22:f8:68:54:ee:36:62:48:ae:94:9c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52eff385d4b48215d805b588a2705829d4621171
Validity
Not Before: Nov 11 07:01:02 2025 GMT
Not After : Nov 12 07:01:02 2025 GMT
Subject: CN=6d3699eca1d1be8c269967fa4cd9f362a4f6e943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3b:7b:73:19:c5:72:62:16:18:a5:98:a1:64:
f3:36:5b:db:d7:cb:63:94:08:25:2f:1f:8b:0f:1c:
13:8d:ec:0f:1d:54:05:ac:03:70:2e:b6:36:6a:1b:
5e:59:1f:58:4f:b8:ff:1d:27:39:93:a9:19:ed:ce:
2c:32:a3:fe:70:e2:f2:af:48:84:16:0c:31:37:99:
00:fc:07:b2:46:4c:b0:5e:33:48:ef:ed:71:44:8e:
fe:e5:de:64:97:7a:4d:30:36:00:d5:6b:e3:3b:76:
6e:cc:d7:07:7c:10:99:a9:1c:3f:44:68:62:83:f2:
ce:74:ba:89:88:df:02:86:72:99:ad:70:18:53:08:
db:ab:f1:fc:2d:5b:19:1d:7c:a3:2b:7c:fb:ce:90:
55:b0:4d:ac:7a:8e:3d:92:df:5e:6d:6b:03:aa:95:
b3:59:ae:34:97:1a:ef:32:52:51:9b:5f:ad:52:31:
ab:c5:97:8e:08:24:f7:2f:e2:e2:5d:28:d7:24:a5:
7c:31:3d:58:db:5d:24:92:02:9f:03:b1:52:d3:81:
f1:02:e4:6a:8b:ef:c3:dc:5a:8b:85:db:9b:ae:e0:
82:6f:7b:92:82:fb:69:ce:72:3e:41:67:a5:4b:27:
af:38:4c:8e:1c:b2:1a:b0:e4:fc:cb:0b:72:24:0c:
c4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:36:99:EC:A1:D1:BE:8C:26:99:67:FA:4C:D9:F3:62:A4:F6:E9:43
X509v3 Authority Key Identifier:
keyid:52:EF:F3:85:D4:B4:82:15:D8:05:B5:88:A2:70:58:29:D4:62:11:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uu_zhdS0ghXYBbWIonBYKdRiEXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:8d:70:4f:db:0e:e8:1a:79:c6:93:4e:8e:8d:a0:46:01:e6:
a4:dd:63:57:21:0e:af:cd:17:b0:8f:13:8f:ee:3c:5d:01:9a:
95:93:24:c3:11:a8:8e:7e:13:3b:cb:30:06:7f:97:c7:4a:4b:
a0:34:2f:a3:e4:03:2b:c4:0d:7b:fd:d0:0b:1f:cf:e6:68:5a:
4f:ca:e3:e0:be:31:e6:5a:2b:ce:1f:47:f5:ba:d8:e2:62:b9:
12:7e:d8:a3:86:e4:42:ca:4e:76:cd:94:65:3a:3f:4e:16:47:
7d:a5:f3:29:21:93:00:05:02:da:cd:29:d0:97:9a:a5:1e:97:
dc:af:86:c2:d5:0a:ca:ed:eb:48:98:7f:9f:74:30:85:5f:40:
2f:4c:95:6d:a8:97:bf:6e:ad:2e:b1:27:01:76:48:57:4e:46:
b0:57:1d:2b:c1:b7:1a:aa:3e:37:d1:63:b7:34:07:7b:b0:39:
cc:da:17:22:3a:0d:07:65:c0:b6:b7:05:fa:b3:39:b7:09:77:
04:1c:c0:e5:75:55:f1:21:e5:15:94:fc:82:d5:17:de:32:67:
c4:5e:b5:0b:4c:ec:46:55:03:e5:1e:7e:0d:7b:7b:96:37:8a:
bf:ba:18:b5:fb:2b:ab:c8:44:2e:89:82:f1:f4:7f:49:7c:00:
24:16:e0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:40:56 2025 by rpki-client