Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
File: kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft (raw, json)
Hash identifier: pXtK4RCvnDhqIvGGfjMDI0brEBHAV+WsqWRQFlimmdY=
Subject key identifier: 46:82:22:24:31:A1:3B:C2:88:00:99:AA:47:19:A2:1D:1A:F7:F0:BC
Authority key identifier: 91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63
Certificate issuer: /CN=9143c5f48c77a79c985f5e5362e082ad54e23063
Certificate serial: 019A71B78A609343E29463AB3F19BEE83FC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
Manifest number: 0E04
Signing time: Tue 11 Nov 2025 07:00:45 +0000
Manifest this update: Tue 11 Nov 2025 07:00:45 +0000
Manifest next update: Wed 12 Nov 2025 07:00:45 +0000
Files and hashes: 1: kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl (hash: tXLXo5GMLWXYdbMZt6x/xhdFuybRJdgJxH1CeKs5EbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:8a:60:93:43:e2:94:63:ab:3f:19:be:e8:3f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9143c5f48c77a79c985f5e5362e082ad54e23063
Validity
Not Before: Nov 11 07:00:45 2025 GMT
Not After : Nov 12 07:00:45 2025 GMT
Subject: CN=4682222431a13bc2880099aa4719a21d1af7f0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:aa:c9:28:26:9a:fa:33:43:06:ef:a1:c8:8a:
8a:b5:4f:58:34:a6:0a:0d:db:67:7e:d5:0a:55:06:
28:9a:30:15:09:c2:cf:ac:3b:63:42:73:4c:73:d0:
6e:62:e0:ef:01:bd:f1:c3:60:23:7f:1f:7b:a2:34:
5b:1d:a0:6c:d7:b2:31:b0:cc:83:b7:81:46:68:b4:
2f:aa:64:20:c6:59:5f:49:96:96:82:88:ad:be:d2:
df:94:d6:cd:cd:11:ab:fe:91:ec:fd:ce:33:af:8f:
95:c1:61:5b:85:2b:35:30:f4:d8:63:5c:3b:85:96:
33:99:de:60:22:6a:85:8d:76:b8:c6:40:34:b5:cf:
1e:38:85:87:56:9b:5d:10:17:a3:da:0c:4c:cd:de:
b3:ef:78:c4:49:93:27:93:47:35:b4:cd:12:29:b9:
98:a3:25:c6:8b:7f:6e:ce:ed:27:6d:d5:de:34:8b:
f1:b6:b7:64:c1:42:92:9b:f7:6d:78:7e:a3:bd:fc:
ff:a9:a1:c5:3f:24:44:da:de:0e:69:b5:84:56:95:
c0:80:ba:fe:6e:76:e1:f9:b1:0b:bb:c6:ac:5d:22:
57:e3:30:6f:97:d6:a6:4f:ed:53:7c:fb:95:14:10:
0c:76:bd:20:1a:93:1c:cd:5c:51:14:52:07:11:d2:
64:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:82:22:24:31:A1:3B:C2:88:00:99:AA:47:19:A2:1D:1A:F7:F0:BC
X509v3 Authority Key Identifier:
keyid:91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:bb:d5:b4:73:df:d0:ec:04:23:5d:c6:37:1b:d7:f2:64:09:
51:18:1d:45:a0:5a:7f:bd:c2:55:5b:77:25:d4:0a:48:15:a3:
2f:d3:a6:a4:42:49:0a:7d:0c:1e:ad:64:33:cf:7b:34:c1:26:
08:25:ff:23:3c:5e:f2:16:6c:f2:b7:2e:a9:25:7e:b5:03:8f:
b6:16:ab:f6:6e:f4:6d:ab:cf:80:01:fc:21:8c:18:97:44:fc:
ba:03:63:cf:f7:08:6a:03:92:a8:47:5f:09:1f:d8:fe:fb:5a:
df:7e:0f:14:cb:4d:4f:f0:4f:83:84:d2:a4:c7:7c:8c:a3:26:
6c:83:91:33:fe:c0:fa:b0:17:ee:c0:57:fb:c2:07:27:49:92:
66:1f:d1:a3:41:cb:64:c3:87:90:77:f6:cd:31:79:4f:f4:d2:
0b:06:ed:4e:c5:ae:29:3a:d3:0f:53:46:1d:99:e7:44:6e:d9:
d7:5c:a7:25:ae:bf:ef:df:b9:3e:47:0e:5d:cc:53:a1:71:be:
99:04:1d:9d:72:5e:5c:9a:b6:cd:7c:aa:72:1f:b7:02:e1:2f:
43:1f:53:e3:b1:45:d1:b1:5b:08:40:5a:ef:24:d9:68:d4:d4:
59:4d:50:8c:c1:74:dc:2b:ba:61:7b:e2:d3:07:99:08:bd:a8:
c4:0b:11:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:58 2025 by rpki-client