Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft
File: UJVwBFEY_ttvz2G1lCDIc7cVh78.mft (raw, json)
Hash identifier: hphNZhrlJxfpuipKGwLJ34MiC/YT+DA0XDiy3wYYnW0=
Subject key identifier: 22:A5:71:9A:D9:7F:05:E4:88:CC:EC:76:3E:A2:F7:EA:92:E7:82:53
Authority key identifier: 50:95:70:04:51:18:FE:DB:6F:CF:61:B5:94:20:C8:73:B7:15:87:BF
Certificate issuer: /CN=509570045118fedb6fcf61b59420c873b71587bf
Certificate serial: 019A725C8A82BA54CC94F456640C6A229254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJVwBFEY_ttvz2G1lCDIc7cVh78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 10:00:58 +0000
Manifest this update: Tue 11 Nov 2025 10:00:58 +0000
Manifest next update: Wed 12 Nov 2025 10:00:58 +0000
Files and hashes: 1: UJVwBFEY_ttvz2G1lCDIc7cVh78.crl (hash: LnOvhTqHujDwA2SKPCAH2V6O3OgN2ZFp6X+mUDnZjb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJVwBFEY_ttvz2G1lCDIc7cVh78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:8a:82:ba:54:cc:94:f4:56:64:0c:6a:22:92:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509570045118fedb6fcf61b59420c873b71587bf
Validity
Not Before: Nov 11 10:00:58 2025 GMT
Not After : Nov 12 10:00:58 2025 GMT
Subject: CN=22a5719ad97f05e488ccec763ea2f7ea92e78253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:50:02:24:4b:41:89:a3:19:95:f9:8f:e3:c9:
9b:c3:69:ac:49:d1:c3:bc:ef:fe:9a:b5:ce:a4:cb:
62:bf:ae:10:40:17:d4:b9:e2:bb:38:c0:c2:63:6c:
03:15:b9:69:2b:23:33:31:b5:3c:e4:a6:cc:77:f8:
ba:54:e4:a0:ff:83:c3:57:62:9a:55:77:c7:be:ec:
fe:cd:c3:b0:0f:65:1b:08:20:ad:ff:9b:ec:d5:35:
ad:73:6f:1e:f7:15:ae:3a:d9:cb:3d:07:dd:55:a3:
ae:64:e7:4f:db:37:7d:26:32:6e:d4:61:ec:e3:33:
a4:3b:7a:39:7f:df:f4:79:52:40:bd:10:e8:9c:84:
18:8b:eb:00:40:56:05:54:e3:dc:25:0a:87:73:4b:
ea:58:c3:f3:21:2d:c1:c6:a9:aa:41:3f:05:cb:73:
79:5c:49:68:29:20:38:47:60:2f:93:95:5d:23:19:
ff:b7:ef:7a:de:1b:f4:4c:f4:fe:50:0c:b5:96:ad:
03:b6:f3:39:92:d6:86:ca:80:f1:c1:6d:da:12:1b:
5d:a8:84:e6:97:87:d0:cc:45:b8:2e:aa:50:39:2f:
8c:c0:ce:57:d7:7b:8e:e1:76:9d:f1:2a:79:ee:13:
1c:d3:87:87:06:02:1c:6a:1c:d8:8b:d3:08:f1:60:
88:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A5:71:9A:D9:7F:05:E4:88:CC:EC:76:3E:A2:F7:EA:92:E7:82:53
X509v3 Authority Key Identifier:
keyid:50:95:70:04:51:18:FE:DB:6F:CF:61:B5:94:20:C8:73:B7:15:87:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJVwBFEY_ttvz2G1lCDIc7cVh78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:89:b9:ff:71:1f:51:8f:43:f8:b7:56:bc:c9:c6:b2:f3:db:
1f:f1:8a:3c:c3:61:13:1e:a5:07:e4:2f:a9:2d:d3:7e:68:98:
e7:36:06:70:45:1b:75:c5:93:f0:ca:0e:9f:e9:09:9b:07:1e:
96:13:b9:57:a1:b5:17:08:a5:18:03:1f:0e:e3:03:69:15:25:
26:76:16:97:3c:c0:8f:13:2a:00:fb:1d:82:c6:cc:ea:d3:1a:
16:64:6d:12:bc:49:c1:69:42:3b:3e:d0:88:ca:5f:e0:82:2c:
8d:bb:e4:a4:3d:a4:07:0e:15:78:e0:bf:73:97:03:a6:a1:cd:
ab:c7:bf:51:6d:90:3a:b7:d7:23:3f:76:ad:23:1b:43:cc:86:
1d:fa:03:5c:92:9d:b2:5a:97:d9:89:ae:a3:71:24:26:a0:3d:
64:69:81:54:dc:99:80:b1:e8:9e:ab:fe:61:db:11:59:c8:6b:
4d:e4:17:c9:88:3f:78:a8:81:fc:d0:78:7e:1e:1d:d7:74:36:
67:09:43:4e:ac:9a:81:81:88:ee:7d:fe:72:d4:b8:d3:7d:c2:
98:66:30:af:92:1e:63:21:f3:30:21:ad:f3:49:68:e8:a0:82:
ed:b8:22:7e:b9:55:df:21:ce:73:27:4d:9b:30:c9:e1:5d:d8:
0b:a5:ad:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:16 2025 by rpki-client