Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft
File: uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft (raw, json)
Hash identifier: RM3MHrRqebF6MqxJV5/UboA9Vx9aehuN97d00RQf+o0=
Subject key identifier: 97:1B:B9:2F:C4:87:AE:73:1E:41:72:A5:70:7A:66:5B:3C:81:CC:87
Authority key identifier: B9:1F:8D:B0:2E:2E:97:1D:54:F9:0E:EF:10:70:90:39:8F:CC:3D:92
Certificate issuer: /CN=b91f8db02e2e971d54f90eef107090398fcc3d92
Certificate serial: 019A71B9442066BD44DC3BF99174BFD8B751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft
Manifest number: 0961
Signing time: Tue 11 Nov 2025 07:02:38 +0000
Manifest this update: Tue 11 Nov 2025 07:02:38 +0000
Manifest next update: Wed 12 Nov 2025 07:02:38 +0000
Files and hashes: 1: uR-NsC4ulx1U-Q7vEHCQOY_MPZI.crl (hash: 6vaDJvezp90lFxtj39pc4Gqf0kf8svDNLYXGuUOwihQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:44:20:66:bd:44:dc:3b:f9:91:74:bf:d8:b7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91f8db02e2e971d54f90eef107090398fcc3d92
Validity
Not Before: Nov 11 07:02:38 2025 GMT
Not After : Nov 12 07:02:38 2025 GMT
Subject: CN=971bb92fc487ae731e4172a5707a665b3c81cc87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:86:8f:1b:c2:9f:ce:17:9b:f1:d7:fc:08:e2:
bf:6e:8b:3c:71:2a:82:4f:de:cc:7d:05:fd:42:ec:
c9:b1:3a:48:b0:a4:91:f5:8b:d8:44:ec:0c:14:4a:
de:86:c0:8f:c8:26:61:88:15:bc:02:ca:22:7e:37:
d7:93:d2:65:f0:ca:53:8a:f2:25:b6:f3:7b:7c:f8:
bf:5c:bd:08:13:28:4b:8c:a6:9a:eb:aa:13:4e:92:
a6:ae:ea:af:e5:cd:f7:7e:b5:e3:a7:92:d3:dc:16:
76:a8:78:c5:9a:97:fc:fd:42:bb:8d:b5:de:f0:28:
a6:4e:14:f2:d4:9c:51:fc:5c:51:d7:92:c1:b7:a5:
f7:c4:aa:ef:ea:7c:38:cb:48:d0:ea:e9:80:11:12:
34:04:4c:dc:fa:94:61:c6:32:0c:b4:23:d0:95:60:
e4:5b:51:da:e9:1e:6a:5d:12:82:3e:ae:0b:84:e2:
5e:1b:ec:fe:21:aa:41:58:72:73:3e:4e:8a:d1:be:
7f:52:38:00:90:3c:2b:96:f9:2f:d4:2c:3e:46:ef:
17:5c:21:af:42:67:56:87:db:56:b3:eb:93:7c:dd:
5d:99:8a:d6:6c:5e:af:77:1f:fa:f5:66:62:bb:bb:
47:33:f8:90:f4:90:68:e8:d0:cf:12:52:cd:f8:7d:
22:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1B:B9:2F:C4:87:AE:73:1E:41:72:A5:70:7A:66:5B:3C:81:CC:87
X509v3 Authority Key Identifier:
keyid:B9:1F:8D:B0:2E:2E:97:1D:54:F9:0E:EF:10:70:90:39:8F:CC:3D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:69:ac:c9:60:d3:af:dd:c2:71:54:de:fa:c7:23:f9:43:1c:
99:92:2d:ad:52:00:c0:51:ba:44:b7:8e:ee:fd:39:65:fc:1f:
44:60:fc:ca:a3:39:4a:f0:10:dd:16:3e:bb:76:b2:81:d0:8e:
e8:35:98:2f:10:1e:e3:e2:40:59:2a:c8:30:7b:48:57:5c:a5:
cc:bc:9c:b8:eb:fc:99:f4:dc:f8:4f:f1:5f:b0:88:4c:0f:8e:
a9:4a:d1:40:9f:08:98:25:3a:6d:25:57:54:4f:ed:6d:e7:43:
ca:b9:c7:4f:1b:8d:5a:57:47:75:51:b6:1e:72:c0:a9:db:c6:
f6:f6:86:1d:1b:50:27:57:32:d5:0f:2c:0b:b3:f4:0e:7e:80:
5e:f0:93:09:b0:f0:45:f8:7f:8e:6a:4e:ae:07:9b:07:b7:34:
62:e2:1a:21:6b:c1:e7:f0:e4:53:5f:de:ea:0c:b6:1c:4c:7e:
f5:27:7b:19:5b:95:ba:94:4c:0b:d0:9c:85:fe:6d:5d:77:9d:
4d:0b:71:46:92:7f:eb:dd:d1:f8:58:a0:71:7c:42:e7:7f:a7:
f5:66:5b:2a:14:3f:a9:44:cb:26:41:f0:fe:cc:81:0e:1a:55:
ee:72:28:c1:bc:01:ca:e4:c7:16:15:4e:ae:76:31:72:f1:38:
ed:6a:63:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:31 2025 by rpki-client