Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
File: Uw4xZLFq4JEmhPqpDkORTeH91aU.mft (raw, json)
Hash identifier: l8sFgBzaZlATjpZF8FiJyMrLzOleR75M+2MoweHEFOo=
Subject key identifier: 8F:8E:26:F0:62:62:75:F5:D3:70:E1:FC:54:04:75:B1:21:7D:AA:88
Authority key identifier: 53:0E:31:64:B1:6A:E0:91:26:84:FA:A9:0E:43:91:4D:E1:FD:D5:A5
Certificate issuer: /CN=530e3164b16ae0912684faa90e43914de1fdd5a5
Certificate serial: 019A73A64DA3553024B71223960F07F32B2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
Manifest number: 0FD3
Signing time: Tue 11 Nov 2025 16:01:09 +0000
Manifest this update: Tue 11 Nov 2025 16:01:09 +0000
Manifest next update: Wed 12 Nov 2025 16:01:09 +0000
Files and hashes: 1: Uw4xZLFq4JEmhPqpDkORTeH91aU.crl (hash: kp7sOdGkCxK9zTIYaoPOLZQgNVuAM+ksAZiuZw6SnvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:4d:a3:55:30:24:b7:12:23:96:0f:07:f3:2b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=530e3164b16ae0912684faa90e43914de1fdd5a5
Validity
Not Before: Nov 11 16:01:09 2025 GMT
Not After : Nov 12 16:01:09 2025 GMT
Subject: CN=8f8e26f0626275f5d370e1fc540475b1217daa88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:72:34:8e:d5:ba:fa:c6:ba:06:39:a6:4d:
8b:92:c8:0c:d6:a2:d3:96:4a:f7:92:0e:07:32:0b:
61:21:31:03:f3:ed:23:cc:99:cc:1b:90:60:64:59:
14:5a:22:6e:d7:10:30:cd:60:b6:53:42:f2:dc:ce:
d8:4f:35:41:c6:a8:e4:42:92:3d:07:33:73:ff:cb:
6d:8f:35:9a:75:1f:01:d8:78:e9:25:d5:1f:19:78:
8f:49:84:d3:f5:ab:bc:56:50:44:ea:cc:eb:71:4c:
24:b5:db:2e:45:79:09:3f:c6:95:ee:e1:f1:ee:85:
90:47:cb:64:b4:06:bb:6e:09:a0:ef:c8:36:e0:0c:
89:e5:16:5b:4c:7b:9d:be:1d:7b:e5:51:b9:e0:85:
1e:b8:84:24:29:89:75:57:75:dd:f4:a9:d0:61:2d:
57:b6:aa:6f:49:3c:40:57:23:9b:ad:8a:1a:ad:7d:
a5:c3:af:67:05:9b:ca:b6:27:4b:54:3f:77:fb:7d:
85:73:4c:ea:16:3f:ed:55:6f:d5:ff:e4:30:46:66:
8a:10:bd:ab:fb:4b:21:1f:e8:1a:c2:ba:14:64:85:
a2:38:72:82:34:98:11:0b:49:e4:96:d9:b4:95:91:
08:c5:c2:08:cb:85:0e:f3:ee:90:f0:c3:44:9f:aa:
d7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8E:26:F0:62:62:75:F5:D3:70:E1:FC:54:04:75:B1:21:7D:AA:88
X509v3 Authority Key Identifier:
keyid:53:0E:31:64:B1:6A:E0:91:26:84:FA:A9:0E:43:91:4D:E1:FD:D5:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:43:e7:4b:20:2b:17:14:40:37:4c:b1:3b:09:7c:3a:64:dd:
26:80:9d:b5:d8:56:85:1a:69:6e:33:6a:f8:02:26:8a:c4:b4:
e3:7a:62:2b:64:90:1b:2a:77:e9:a5:94:1f:36:4e:1f:27:bf:
be:51:42:c4:f8:6b:19:b4:37:a1:57:5b:7c:ee:20:6c:23:40:
de:b5:1b:88:db:fc:ee:80:d7:4e:72:83:4d:46:6f:c4:7d:81:
fd:0e:00:22:97:79:b6:80:e1:19:48:45:ac:63:b6:e5:70:db:
21:e2:46:b3:b7:86:e0:9a:78:90:4e:1c:6a:0f:e0:73:60:ae:
3f:7b:d5:d6:e0:a6:1e:5c:ca:95:e4:d2:ce:0c:98:42:f5:0e:
ed:da:be:5f:de:37:da:cb:b3:65:ad:77:e7:e5:4d:bb:0b:fe:
7b:b5:68:41:15:4f:49:03:19:d7:96:19:ac:5b:f7:e5:a0:e6:
cb:8b:98:8d:8c:97:ee:c4:ff:83:c7:fb:5b:90:ae:3d:6b:c6:
bf:37:d7:51:8e:e8:8c:64:b2:fc:77:ed:51:4e:b3:d3:01:b5:
4e:28:27:29:7c:73:75:e2:14:51:c6:b3:9f:9d:94:da:ba:08:
cc:53:e6:58:5e:d4:cd:1a:68:0e:dd:c2:1a:54:9a:5a:9d:e3:
57:76:9f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:11:38 2025 by rpki-client