Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft
File: UZxxlGfHXvlxe8YrftrpALovRiU.mft (raw, json)
Hash identifier: qbk7WzU6XPRAB2Cc2Ywyj6e6DeLtX2mLJe2Jq9+goBU=
Subject key identifier: 09:EF:AD:E5:BF:BD:3E:A0:CD:01:D4:98:4C:1C:B0:CE:C9:98:02:72
Authority key identifier: 51:9C:71:94:67:C7:5E:F9:71:7B:C6:2B:7E:DA:E9:00:BA:2F:46:25
Certificate issuer: /CN=519c719467c75ef9717bc62b7edae900ba2f4625
Certificate serial: 019A71B86497FDC1077305CC8423EF5BF269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZxxlGfHXvlxe8YrftrpALovRiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft
Manifest number: 0155
Signing time: Tue 11 Nov 2025 07:01:41 +0000
Manifest this update: Tue 11 Nov 2025 07:01:41 +0000
Manifest next update: Wed 12 Nov 2025 07:01:41 +0000
Files and hashes: 1: UZxxlGfHXvlxe8YrftrpALovRiU.crl (hash: cRvGtjt7Frt+LiAaCTpgbuCO/bTulI0KIOwNjFMJdnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZxxlGfHXvlxe8YrftrpALovRiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:64:97:fd:c1:07:73:05:cc:84:23:ef:5b:f2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519c719467c75ef9717bc62b7edae900ba2f4625
Validity
Not Before: Nov 11 07:01:41 2025 GMT
Not After : Nov 12 07:01:41 2025 GMT
Subject: CN=09efade5bfbd3ea0cd01d4984c1cb0cec9980272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:99:0c:fb:9a:d2:d6:d5:6b:8f:53:fc:e4:8b:
f0:44:46:d3:bb:2b:13:57:79:ab:c2:df:a9:1b:02:
93:0d:b9:4a:18:d2:b2:3b:07:bf:bf:90:34:a1:4c:
c9:cb:50:b0:1a:78:24:3e:78:a5:ee:25:2a:c3:00:
4c:f9:02:0a:8e:bb:ec:0a:ea:20:5b:7e:65:df:4b:
81:c7:76:1b:dc:d0:b7:12:bb:e9:ef:44:b9:8e:d4:
eb:9d:86:49:b8:25:30:c1:fc:b4:7e:4b:6b:e0:65:
84:1b:1f:c1:73:9c:9a:be:44:13:80:6d:75:e9:4f:
20:83:db:fe:5d:5e:d2:9e:ec:e1:9d:ba:cb:cc:30:
50:07:9e:2d:e0:6e:f9:c4:12:4b:ee:a2:e6:7c:c9:
7d:a5:f0:5d:b1:f9:9a:ae:25:fd:8b:b1:a4:1a:6f:
3a:8a:3c:cf:1d:16:61:59:9e:cb:05:2f:7a:c5:95:
14:a8:6e:95:fe:6c:ce:96:17:c4:09:95:49:2e:17:
0f:c5:7b:46:f4:7d:e5:e3:ae:38:3d:33:68:3e:eb:
b6:2d:ea:bc:3f:df:9b:29:d0:23:ae:a7:34:c8:fd:
b0:e4:1d:35:24:92:32:c4:9c:93:46:a8:11:62:3f:
7d:7c:cf:f9:f8:83:95:d1:65:e8:eb:bb:37:77:e9:
be:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EF:AD:E5:BF:BD:3E:A0:CD:01:D4:98:4C:1C:B0:CE:C9:98:02:72
X509v3 Authority Key Identifier:
keyid:51:9C:71:94:67:C7:5E:F9:71:7B:C6:2B:7E:DA:E9:00:BA:2F:46:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZxxlGfHXvlxe8YrftrpALovRiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:59:26:ea:e2:13:68:36:f7:60:e7:12:a1:47:64:fa:c0:ff:
bd:02:39:67:03:f9:42:61:fa:10:05:04:02:b5:7d:39:0b:33:
00:d4:25:af:40:f7:f1:a2:d4:c7:6e:1f:84:1e:4a:c7:15:4f:
d5:f7:f7:df:46:6b:e2:f3:d4:e9:29:a0:e4:d6:fa:ca:27:cf:
d8:a2:46:84:f6:af:7b:4f:7a:c5:86:26:5f:07:78:20:95:67:
d2:59:41:5f:68:c7:f9:f0:42:fc:03:a7:06:1f:03:dc:3c:b7:
23:ef:e7:cd:f4:3d:4b:d6:b4:df:e5:97:a3:b3:d8:e2:cb:68:
02:fc:59:53:2d:30:49:65:2c:9b:06:bf:ce:ce:0c:3d:3b:cf:
9d:eb:36:1a:a9:b4:1f:0b:7b:b6:4b:7b:56:68:d0:ae:69:e8:
40:28:9e:a6:2d:7d:c8:31:ee:d5:a0:06:45:e0:b1:00:a1:31:
39:79:79:dc:4e:7b:bc:cb:1e:28:15:c1:12:a1:67:42:7b:bd:
0f:2a:c5:cb:3e:11:63:47:4a:db:c6:b2:38:45:21:98:ad:92:
66:d3:9c:c7:2d:66:6c:29:ec:8f:0d:5a:62:36:76:fa:3c:a6:
31:78:33:9a:f4:60:31:14:7c:3f:f0:c6:b2:08:0b:35:b0:3b:
00:14:0c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:31 2025 by rpki-client