Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft
File: UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft (raw, json)
Hash identifier: yiXihtvzBuwNpzQzc3pSeH/d0W7ztLYSqPKRojWnYYA=
Subject key identifier: B6:37:C3:AC:3D:3C:52:01:A1:EB:9D:F0:AB:E0:16:19:61:A6:B9:1E
Authority key identifier: 50:09:7F:B5:8C:6F:6A:44:1D:8E:D7:50:00:77:3B:4D:09:85:67:46
Certificate issuer: /CN=50097fb58c6f6a441d8ed75000773b4d09856746
Certificate serial: 019A70DC685EF752527E6C3CCE607156EEC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft
Manifest number: 0B40
Signing time: Tue 11 Nov 2025 03:01:24 +0000
Manifest this update: Tue 11 Nov 2025 03:01:24 +0000
Manifest next update: Wed 12 Nov 2025 03:01:24 +0000
Files and hashes: 1: UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl (hash: T/Ny42eleMOzMUMh6O+oKA0bBsCmXG5dIzFTtMmrr6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:68:5e:f7:52:52:7e:6c:3c:ce:60:71:56:ee:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50097fb58c6f6a441d8ed75000773b4d09856746
Validity
Not Before: Nov 11 03:01:24 2025 GMT
Not After : Nov 12 03:01:24 2025 GMT
Subject: CN=b637c3ac3d3c5201a1eb9df0abe0161961a6b91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bb:7d:85:fb:00:07:6c:1e:cb:f5:3b:1f:c0:
60:b6:5b:4d:5a:27:a6:e4:db:cd:72:90:23:69:82:
ed:f1:45:ff:f1:1d:5c:44:e2:aa:29:11:a5:62:39:
fa:2c:7c:7e:0f:e2:74:b2:a0:05:97:9a:50:16:c7:
5f:13:69:4d:43:1c:2a:45:66:a8:dc:ae:d7:9c:b5:
bb:06:1e:77:fe:b9:46:da:5d:b6:dd:bb:fd:b6:38:
39:ff:14:c1:8c:9d:9e:5e:c0:59:76:2f:8f:9a:f3:
12:6f:c1:99:ea:08:9f:3d:4b:70:f9:bb:07:cc:b2:
e0:05:de:89:34:07:bc:a4:1a:4e:d6:de:d9:ed:d6:
8f:e2:d6:93:b4:20:65:a2:88:30:f0:b3:39:dc:cc:
77:ea:02:c6:8e:2f:52:e2:25:e7:7a:8b:2f:ca:7f:
7f:49:6d:d4:71:77:23:7f:48:28:7b:4b:ec:9d:9a:
ee:e2:78:d2:80:f3:29:7f:25:77:28:36:0f:df:bc:
2f:e8:15:72:d9:aa:68:b5:ef:c7:0d:d0:8e:8b:e9:
88:b7:8c:87:e8:cc:63:cd:f5:02:f4:5a:24:d5:24:
1d:75:a7:7e:4e:89:f0:48:dd:4a:27:51:cb:d9:88:
ac:40:84:32:4a:40:70:e9:f5:f5:7d:10:68:15:ed:
5e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:37:C3:AC:3D:3C:52:01:A1:EB:9D:F0:AB:E0:16:19:61:A6:B9:1E
X509v3 Authority Key Identifier:
keyid:50:09:7F:B5:8C:6F:6A:44:1D:8E:D7:50:00:77:3B:4D:09:85:67:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:18:d1:0b:d8:d3:ac:d8:e7:b1:e8:d5:cf:33:32:2d:31:b5:
e7:3f:ba:a4:09:3c:77:5c:c6:cd:80:b3:61:ce:9f:00:3d:dc:
03:ec:72:89:04:69:0f:e9:ba:e4:2f:60:a1:f8:41:5d:ad:10:
bd:46:e6:55:6e:97:35:00:2a:91:2d:d5:23:06:5a:31:da:c0:
7c:db:75:5a:50:cf:70:a8:d1:df:89:5e:eb:4a:16:1d:4a:55:
cb:c8:aa:27:37:72:5e:75:5c:71:f7:32:c1:d6:c2:65:d7:13:
15:64:1d:95:48:60:1e:d4:f7:4c:e7:1a:cf:d5:fa:86:cd:ec:
dc:4f:72:d1:ca:dd:33:84:3b:38:f4:25:cb:40:42:42:86:db:
65:53:62:b5:db:9f:ae:4a:50:73:51:63:2a:c5:cb:58:a7:51:
9e:d7:10:2b:b8:db:a6:96:4d:73:4c:7a:12:5e:98:a0:1b:63:
43:7d:15:6f:13:5d:6e:f4:a4:58:bb:c5:57:c8:b1:72:9d:85:
43:c5:a5:97:e1:73:66:08:96:36:fb:1b:49:49:26:4b:09:c0:
ff:fe:f3:47:52:d7:bc:1e:09:2d:17:84:2e:15:1b:2e:1f:11:
53:80:8d:b9:1f:a2:18:fe:f6:42:1b:a8:af:63:5b:68:88:86:
95:e6:f4:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3Ghe91JSfmw8zmBxVu7BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMDk3ZmI1OGM2ZjZhNDQxZDhlZDc1MDAwNzczYjRkMDk4
NTY3NDYwHhcNMjUxMTExMDMwMTI0WhcNMjUxMTEyMDMwMTI0WjAzMTEwLwYDVQQD
EyhiNjM3YzNhYzNkM2M1MjAxYTFlYjlkZjBhYmUwMTYxOTYxYTZiOTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7t9hfsAB2wey/U7H8BgtltNWiem
5NvNcpAjaYLt8UX/8R1cROKqKRGlYjn6LHx+D+J0sqAFl5pQFsdfE2lNQxwqRWao
3K7XnLW7Bh53/rlG2l223bv9tjg5/xTBjJ2eXsBZdi+PmvMSb8GZ6gifPUtw+bsH
zLLgBd6JNAe8pBpO1t7Z7daP4taTtCBloogw8LM53Mx36gLGji9S4iXneosvyn9/
SW3UcXcjf0goe0vsnZru4njSgPMpfyV3KDYP37wv6BVy2apote/HDdCOi+mIt4yH
6MxjzfUC9Fok1SQddad+TonwSN1KJ1HL2YisQIQySkBw6fX1fRBoFe1eZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLY3w6w9PFIBoeud8KvgFhlhprkeMB8GA1UdIwQY
MBaAFFAJf7WMb2pEHY7XUAB3O00JhWdGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUFsX3RZeHZha1FkanRkUUFIYzdUUW1GWjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8wNWY0MWUtZTE0Yi00MDk5LWFjYWMt
MjJkYzYzNmIyNDg4LzEvVUFsX3RZeHZha1FkanRkUUFIYzdUUW1GWjBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8wNWY0MWUtZTE0Yi00MDk5LWFjYWMtMjJkYzYzNmIyNDg4
LzEvVUFsX3RZeHZha1FkanRkUUFIYzdUUW1GWjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACxjRC9jT
rNjnsejVzzMyLTG15z+6pAk8d1zGzYCzYc6fAD3cA+xyiQRpD+m65C9gofhBXa0Q
vUbmVW6XNQAqkS3VIwZaMdrAfNt1WlDPcKjR34le60oWHUpVy8iqJzdyXnVccfcy
wdbCZdcTFWQdlUhgHtT3TOcaz9X6hs3s3E9y0crdM4Q7OPQly0BCQobbZVNitduf
rkpQc1FjKsXLWKdRntcQK7jbppZNc0x6El6YoBtjQ30VbxNdbvSkWLvFV8ixcp2F
Q8Wll+FzZgiWNvsbSUkmSwnA//7zR1LXvB4JLReELhUbLh8RU4CNuR+iGP72Qhuo
r2NbaIiGleb0PQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:48 2025 by rpki-client