Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
File: UZhWegOeXM4j7pN0CW7tV7u6KY4.mft (raw, json)
Hash identifier: zPdx0jWkYRlYfEeShbCgSuPWTvFsUQBft1nweEIEihY=
Subject key identifier: 09:63:02:84:B7:37:0C:17:0A:C8:29:36:5F:28:ED:73:EA:FA:D3:F7
Authority key identifier: 51:98:56:7A:03:9E:5C:CE:23:EE:93:74:09:6E:ED:57:BB:BA:29:8E
Certificate issuer: /CN=5198567a039e5cce23ee9374096eed57bbba298e
Certificate serial: 019A71B86D31463C0E8C9EBC8CA36D94237D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
Manifest number: 1719
Signing time: Tue 11 Nov 2025 07:01:43 +0000
Manifest this update: Tue 11 Nov 2025 07:01:43 +0000
Manifest next update: Wed 12 Nov 2025 07:01:43 +0000
Files and hashes: 1: UZhWegOeXM4j7pN0CW7tV7u6KY4.crl (hash: VlegQ4gJxznsbPGLOg5LDcotBctldWyvzXD2Y9QxPOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:6d:31:46:3c:0e:8c:9e:bc:8c:a3:6d:94:23:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5198567a039e5cce23ee9374096eed57bbba298e
Validity
Not Before: Nov 11 07:01:43 2025 GMT
Not After : Nov 12 07:01:43 2025 GMT
Subject: CN=09630284b7370c170ac829365f28ed73eafad3f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ef:36:99:f0:ba:09:a4:ed:fa:24:68:cd:d2:
12:32:26:f9:9b:ef:f8:d1:df:38:82:92:40:57:ba:
7d:93:6c:d3:a5:89:f2:9a:3a:29:09:9b:95:09:e4:
d3:1f:d0:16:0f:48:66:52:18:ae:c4:d7:ca:c0:d3:
10:3f:2a:5e:de:43:20:a9:ac:b0:9d:37:1a:60:d2:
56:60:15:60:92:69:6a:e5:45:6f:cf:d1:16:5e:ef:
07:af:5e:74:09:4e:dd:68:be:12:b2:ff:b6:80:c5:
88:f9:03:97:c2:e8:51:ed:3f:09:c8:c3:e9:5d:68:
a2:1c:3c:2e:ae:18:95:4c:8e:4d:77:f7:4d:3b:32:
f3:7d:14:b4:e7:6e:0c:e6:2e:5a:08:b1:fc:6d:a2:
dd:fe:f2:24:3c:f3:46:01:bb:7d:3a:2a:a4:48:4f:
de:df:3e:f0:85:ac:4e:2e:80:96:71:d0:f7:4e:b8:
43:60:62:c2:bf:93:88:fa:23:d2:09:8a:f9:f0:3a:
81:27:17:b5:e4:d6:b6:9c:f4:54:b0:88:d8:e9:dc:
53:25:98:50:22:36:d7:4f:3b:f9:f3:61:fd:ba:04:
7d:9b:3a:80:9e:d0:49:6c:2f:ff:52:27:27:d0:97:
2c:85:d8:00:3e:bc:f4:70:e9:c0:6e:9c:74:d8:f8:
2c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:63:02:84:B7:37:0C:17:0A:C8:29:36:5F:28:ED:73:EA:FA:D3:F7
X509v3 Authority Key Identifier:
keyid:51:98:56:7A:03:9E:5C:CE:23:EE:93:74:09:6E:ED:57:BB:BA:29:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:2a:96:10:e3:6b:9c:f0:da:8d:56:56:f3:38:62:e2:01:37:
f6:ce:18:1a:b9:0f:48:00:8e:e9:97:1e:92:a9:98:3f:02:eb:
a4:04:64:82:fa:83:03:dd:fb:fa:e1:2a:cf:6b:62:cf:90:38:
ef:ee:3d:d0:5c:15:dd:1a:a4:7c:8c:c1:9b:03:17:a2:a5:be:
03:dd:36:11:29:90:9c:54:fb:69:39:00:88:42:08:8e:a4:fa:
ec:ed:5d:ba:70:f2:2e:fa:d5:2c:55:a1:bf:6a:9f:5f:37:40:
10:43:69:5a:b4:1d:81:40:ec:bd:60:4d:77:cc:2d:e1:ab:45:
12:67:75:37:44:ff:6f:8b:1f:63:41:5e:55:43:b5:4a:fe:af:
48:92:f7:a8:db:62:8c:09:30:64:d9:91:df:cd:4c:cf:b4:a1:
79:3e:9a:5c:93:6c:39:40:8e:26:56:7f:4d:34:5b:4a:ce:d6:
88:29:0c:be:b1:96:01:51:b8:fa:45:78:9e:0e:28:0e:81:f3:
f8:52:9c:f1:a8:50:42:fb:97:67:41:d3:60:d2:45:a7:4c:f0:
93:9a:c0:f4:48:e4:db:39:6b:e7:92:e2:99:62:c3:89:29:7d:
d4:66:dc:78:64:ad:96:a3:55:0e:f8:27:52:62:9a:f6:78:9c:
65:2e:dc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:47:55 2025 by rpki-client