Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
File: UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft (raw, json)
Hash identifier: 6vuVEVLMCnKGrttBt6TXeGIAihI8swlHySw0sn5i45c=
Subject key identifier: AC:38:10:77:86:7D:2E:3E:94:78:27:13:B8:05:A6:D5:44:7F:F7:5A
Authority key identifier: 50:10:39:75:6C:CF:31:F6:4A:88:34:43:E1:F1:73:28:34:D2:B8:B2
Certificate issuer: /CN=501039756ccf31f64a883443e1f1732834d2b8b2
Certificate serial: 019A7225B8EEC9430AB826443AB62FC02357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
Manifest number: 0A83
Signing time: Tue 11 Nov 2025 09:01:06 +0000
Manifest this update: Tue 11 Nov 2025 09:01:06 +0000
Manifest next update: Wed 12 Nov 2025 09:01:06 +0000
Files and hashes: 1: UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl (hash: 42MS5p+q/hEuoHeWxAIJvOt/JtkEipSgvVq7IhXSkPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:b8:ee:c9:43:0a:b8:26:44:3a:b6:2f:c0:23:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501039756ccf31f64a883443e1f1732834d2b8b2
Validity
Not Before: Nov 11 09:01:06 2025 GMT
Not After : Nov 12 09:01:06 2025 GMT
Subject: CN=ac381077867d2e3e94782713b805a6d5447ff75a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:79:00:1e:1f:35:4e:e6:d5:f3:a7:51:d9:d3:
e1:cf:04:fa:4f:2a:ea:a2:fd:dc:7c:4a:a5:e2:6f:
a9:a0:6c:32:bb:ff:15:eb:16:b2:24:48:58:66:54:
0c:0f:4f:9e:a6:6a:c6:82:f8:39:95:eb:1d:bc:2a:
9f:8a:c9:a7:38:11:99:d3:8b:b3:7c:84:a5:5c:6a:
9d:d9:94:68:fe:23:db:18:bb:e3:92:0f:f1:0f:1c:
d7:6a:0f:4e:8d:2f:38:7d:9d:d9:e3:43:20:11:22:
26:c1:05:3d:df:18:22:66:dd:79:18:7a:29:2d:60:
69:98:d2:70:61:59:0d:4f:ed:87:83:12:6a:2c:85:
04:50:95:45:ff:45:b4:b8:6f:49:bf:e9:9f:cf:3b:
e0:7b:91:bd:66:bb:da:49:b1:65:91:d7:9d:6d:81:
19:1c:8d:b9:bc:36:25:fe:46:b7:70:56:98:4b:aa:
ed:ae:fa:88:42:d6:97:6f:97:f6:b6:70:a7:f9:8c:
3f:c8:be:28:e6:5a:ad:cb:35:ce:d7:ca:49:28:c5:
c5:8f:89:82:fe:10:ca:c2:4e:5d:8b:5b:7d:14:e5:
7c:e8:f0:51:8f:f6:f1:19:6f:82:c6:f9:05:69:22:
92:8e:18:13:42:f9:f6:8e:34:96:f4:cf:4b:b6:a0:
59:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:38:10:77:86:7D:2E:3E:94:78:27:13:B8:05:A6:D5:44:7F:F7:5A
X509v3 Authority Key Identifier:
keyid:50:10:39:75:6C:CF:31:F6:4A:88:34:43:E1:F1:73:28:34:D2:B8:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:7a:b4:a0:4c:bc:f5:cc:13:91:4f:93:e9:f1:16:e6:74:2d:
30:76:68:3d:ae:37:23:07:da:e8:d5:83:37:d8:c6:e9:a7:4a:
e9:09:9f:d9:7e:c7:37:78:89:ca:bf:64:52:61:d6:b6:0f:bd:
8d:9a:5a:71:c4:59:16:62:9d:ef:0a:3c:48:fd:3e:d2:3e:55:
08:2e:c4:03:bd:d0:6f:7b:1d:86:b7:49:f7:d3:58:73:96:fb:
14:8c:b4:fc:3c:f9:00:1c:e6:a0:50:5c:b3:23:14:ad:96:15:
6b:10:c6:21:2b:1b:15:57:6a:98:2a:cd:9d:cf:73:de:6f:61:
04:6b:c1:6a:36:ea:be:8c:f5:93:e8:89:cd:28:e9:5b:7c:e7:
34:1e:d4:2d:99:66:4b:6b:1a:02:43:9e:bd:2b:30:2b:10:b7:
69:57:c8:08:89:6a:86:f6:31:15:dc:41:ac:aa:3f:eb:5c:56:
80:4b:20:ab:b4:98:e1:fb:2b:57:ef:1a:9d:f7:56:87:1b:a2:
5f:77:c3:ed:df:f9:69:cc:c0:53:55:45:55:ff:02:29:45:31:
b6:db:41:0f:19:03:ad:e4:2a:f4:29:63:d7:ed:74:8c:0b:30:
a3:17:84:62:17:09:77:bb:6a:97:5e:e4:96:d1:30:04:5e:c4:
5a:e4:a7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:41 2025 by rpki-client