Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
File: Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft (raw, json)
Hash identifier: +9rMjvtvUCjJDr0LpyxHLFbzv88Uzei0tP9mbD6RvwA=
Subject key identifier: A9:EE:FB:A2:2C:9D:41:E8:F7:3C:D4:15:C5:32:4E:43:94:10:90:B2
Authority key identifier: 51:FE:4D:48:AA:01:3D:40:E0:6C:31:2F:F7:10:48:9B:20:DF:E0:7F
Certificate issuer: /CN=51fe4d48aa013d40e06c312ff710489b20dfe07f
Certificate serial: 019A71B7AAD4E35B72B7BD6B817139593277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
Manifest number: 0E04
Signing time: Tue 11 Nov 2025 07:00:53 +0000
Manifest this update: Tue 11 Nov 2025 07:00:53 +0000
Manifest next update: Wed 12 Nov 2025 07:00:53 +0000
Files and hashes: 1: Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl (hash: MUg0QxjCf3zZKlKsfKgiDCfCb0hVS0C2A/mSrnbEH4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:aa:d4:e3:5b:72:b7:bd:6b:81:71:39:59:32:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51fe4d48aa013d40e06c312ff710489b20dfe07f
Validity
Not Before: Nov 11 07:00:53 2025 GMT
Not After : Nov 12 07:00:53 2025 GMT
Subject: CN=a9eefba22c9d41e8f73cd415c5324e43941090b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:83:70:d8:57:fe:56:5f:cd:d8:b0:2f:70:63:
32:ef:62:67:7a:37:76:4d:fa:de:d0:14:97:8a:6d:
01:aa:46:ed:8d:dd:b0:82:30:e4:b6:14:16:16:37:
a0:02:82:dc:81:9b:33:20:24:6c:0f:ea:37:07:76:
fc:08:a8:29:33:d4:68:dc:2e:1b:4e:02:2f:00:e6:
51:b6:1e:3c:f7:87:37:9d:cb:8d:f7:42:1c:5e:aa:
8c:8e:2b:fd:f5:14:87:0a:1d:82:ea:08:fc:17:a4:
26:86:70:fb:b1:f0:84:f0:54:0e:53:66:bd:e1:5e:
55:6d:16:c3:f3:00:e3:96:63:ac:e4:1f:c3:35:3e:
6e:90:36:51:a3:4f:b7:5d:cd:de:2d:b4:68:6f:b2:
c8:f5:9d:0b:ff:d8:39:24:d5:57:e1:03:e1:ed:74:
b9:e4:a3:3c:07:ac:e9:ca:da:84:84:e0:c3:cc:3e:
06:b6:24:3a:48:a9:bf:7c:c9:c9:4d:a3:2b:e1:8f:
e2:30:10:0c:33:0d:39:63:a4:4a:4d:87:7e:e3:c5:
ed:ff:41:c8:ab:e3:28:92:33:5d:f7:38:1e:4d:74:
e4:fe:fc:c4:13:42:7b:eb:93:8c:3e:46:e6:a3:b1:
2c:ad:a1:cd:ec:17:5a:e9:39:21:d5:2b:03:81:19:
b0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EE:FB:A2:2C:9D:41:E8:F7:3C:D4:15:C5:32:4E:43:94:10:90:B2
X509v3 Authority Key Identifier:
keyid:51:FE:4D:48:AA:01:3D:40:E0:6C:31:2F:F7:10:48:9B:20:DF:E0:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:90:2b:88:3a:e5:31:a1:92:2b:e7:53:11:0c:23:d3:30:c2:
77:d7:7c:47:c4:82:9a:f9:53:65:88:36:80:48:65:d0:0b:01:
98:87:01:08:2d:34:df:3e:b6:95:37:46:31:7d:5d:25:aa:79:
37:98:7d:ee:d0:2a:4e:2d:27:d1:e7:3d:e6:04:3f:2d:72:8a:
df:b0:69:4d:e8:35:f0:31:ef:4f:35:69:b3:3d:36:90:aa:ea:
01:f0:1e:b7:06:92:4a:c3:35:05:5d:3a:ba:d8:3e:ee:31:fa:
eb:d0:1d:00:80:2b:a3:78:83:38:00:e4:a2:83:08:e2:bd:4d:
d4:e2:f3:1d:ea:bc:d7:e4:9f:33:3f:e3:93:2f:44:39:d8:34:
6e:f8:31:df:95:d4:f6:0c:a2:14:3a:61:4e:04:d4:06:13:a5:
57:d8:40:46:67:7a:94:18:c4:23:f1:c5:46:4d:d7:40:6b:74:
1f:fb:7b:4d:de:37:21:67:50:f9:89:f3:42:96:a2:99:ab:78:
cd:a6:9e:7e:b8:6b:67:3f:e6:4d:3e:e8:0c:60:b9:c5:de:d4:
34:21:6d:dc:c3:23:c4:11:81:00:0c:d3:90:32:a5:8b:80:d0:
ab:d4:ac:97:8f:b0:f4:d8:bc:12:b7:97:e9:57:54:42:02:5a:
42:a4:ed:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:14 2025 by rpki-client