Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
File: UrDyNFHcBfp-z50etB3T0TdWRTs.mft (raw, json)
Hash identifier: AqKIqKbG7ZFuqO7A5thdhBfWKqvhe2Sf6DnyeH3aM3k=
Subject key identifier: 4C:3C:23:67:71:60:40:78:A7:D5:59:27:54:1D:1D:13:24:12:A8:31
Authority key identifier: 52:B0:F2:34:51:DC:05:FA:7E:CF:9D:1E:B4:1D:D3:D1:37:56:45:3B
Certificate issuer: /CN=52b0f23451dc05fa7ecf9d1eb41dd3d13756453b
Certificate serial: 019A7225FF9C14F203CE7EAEF37BD9BF636A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 09:01:23 +0000
Manifest this update: Tue 11 Nov 2025 09:01:23 +0000
Manifest next update: Wed 12 Nov 2025 09:01:23 +0000
Files and hashes: 1: UrDyNFHcBfp-z50etB3T0TdWRTs.crl (hash: KSD1WToG/hF4O06JCl2zKOuLOvREUwauNQGLQxDFMRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ff:9c:14:f2:03:ce:7e:ae:f3:7b:d9:bf:63:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b0f23451dc05fa7ecf9d1eb41dd3d13756453b
Validity
Not Before: Nov 11 09:01:23 2025 GMT
Not After : Nov 12 09:01:23 2025 GMT
Subject: CN=4c3c236771604078a7d55927541d1d132412a831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2e:c5:b8:80:70:aa:3e:14:eb:f0:39:a7:17:
87:9c:e0:13:63:ad:e2:22:61:5a:c5:69:d8:ac:1d:
a5:eb:fd:7d:03:2d:1f:8f:cc:ea:39:6a:c7:ab:56:
f8:9c:f2:08:1d:b8:9a:f4:38:d3:85:bc:74:0e:ca:
7c:16:80:79:1f:74:ee:7b:f8:fe:ef:d2:81:89:b9:
bf:f1:a1:66:5c:2d:df:90:50:12:4d:3c:72:62:f4:
e7:b6:42:70:cf:f7:ef:01:85:73:f0:7b:18:00:a7:
0c:a6:42:0b:b3:66:0f:cd:ad:95:6a:f1:ea:7b:cd:
22:25:45:13:05:9e:05:ce:5b:68:8d:2d:0d:43:28:
8c:23:3f:47:e4:98:00:a0:78:b5:07:8b:e7:6f:89:
cb:e0:cd:75:5b:f6:fb:39:42:49:da:72:dd:fd:54:
63:01:ee:6f:22:6b:8f:34:ec:75:12:d5:7a:58:f7:
c6:ba:03:e4:cd:7e:79:19:bd:9e:c7:50:df:41:8e:
58:54:c3:fd:90:3e:26:a6:15:e6:da:06:85:2b:a4:
60:91:95:bf:2a:00:84:e2:1a:24:bd:a4:85:7a:10:
2b:a5:b9:02:ce:25:41:94:02:5b:66:4c:ff:65:ef:
0e:c0:be:6c:61:6a:7c:d5:fa:15:d7:81:f2:bd:63:
cd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3C:23:67:71:60:40:78:A7:D5:59:27:54:1D:1D:13:24:12:A8:31
X509v3 Authority Key Identifier:
keyid:52:B0:F2:34:51:DC:05:FA:7E:CF:9D:1E:B4:1D:D3:D1:37:56:45:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:f9:7c:fe:78:d3:d3:77:1d:8b:b2:ab:73:8a:35:34:b9:96:
8e:79:f5:ce:d2:85:20:58:d2:c5:fa:5d:77:14:1a:b8:83:0c:
44:1d:8d:96:22:1d:dd:56:2a:df:ce:85:bf:4d:fb:cb:ac:41:
7c:6a:4c:8f:9c:38:6d:3f:65:83:05:b8:c0:d7:1b:c2:0e:eb:
96:b6:a2:b6:dd:aa:39:c9:61:48:3a:c4:e2:c7:57:46:f3:3b:
ff:d8:e5:46:e3:3d:42:ec:40:a8:a2:bd:82:3c:0b:42:0e:db:
5d:30:83:f9:05:6a:6f:8b:70:ab:ef:66:f9:79:67:6a:39:73:
bc:93:92:5e:19:97:f5:75:05:dc:9c:e3:59:13:5d:88:1f:b0:
3b:79:7e:25:bd:45:5f:02:d5:03:48:4f:f9:13:99:72:5c:28:
3d:bf:2e:35:d9:ec:7e:03:67:db:00:53:9d:93:b7:14:1b:8d:
fe:52:2a:64:36:47:0e:40:12:a4:2c:62:c5:93:17:0d:1e:1c:
f9:4d:2a:db:be:f7:df:05:22:ad:1a:31:2a:15:99:5b:96:36:
d6:c0:5e:08:fb:ec:36:59:42:15:bb:b7:1b:fe:c5:99:22:6c:
6a:9c:c4:3b:0b:7c:ab:23:23:d6:dd:d1:a9:8c:02:ee:5a:e7:
b9:18:29:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:49 2025 by rpki-client