Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft
File: UJw4zD6qNVb6OaIvMNwbpINv6J8.mft (raw, json)
Hash identifier: lDw2J0+/VuH7zojR09RqfVvz5qsJtdmWVIRsiQ1x710=
Subject key identifier: 5D:BF:94:BD:D2:16:C9:04:A4:33:A6:14:92:8B:5C:D1:0D:23:7A:37
Authority key identifier: 50:9C:38:CC:3E:AA:35:56:FA:39:A2:2F:30:DC:1B:A4:83:6F:E8:9F
Certificate issuer: /CN=509c38cc3eaa3556fa39a22f30dc1ba4836fe89f
Certificate serial: 019A2A4361A7D5982AC48E4095EA69D6D746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJw4zD6qNVb6OaIvMNwbpINv6J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft
Manifest number: 16F6
Signing time: Tue 28 Oct 2025 10:00:50 +0000
Manifest this update: Tue 28 Oct 2025 10:00:50 +0000
Manifest next update: Wed 29 Oct 2025 10:00:50 +0000
Files and hashes: 1: UJw4zD6qNVb6OaIvMNwbpINv6J8.crl (hash: q6jsVYBL+FQl3TPdKMz5qgI77prUZjtfnU1bekmxWxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJw4zD6qNVb6OaIvMNwbpINv6J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:43:61:a7:d5:98:2a:c4:8e:40:95:ea:69:d6:d7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509c38cc3eaa3556fa39a22f30dc1ba4836fe89f
Validity
Not Before: Oct 28 10:00:50 2025 GMT
Not After : Oct 29 10:00:50 2025 GMT
Subject: CN=5dbf94bdd216c904a433a614928b5cd10d237a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1c:f3:84:b5:0c:d3:da:04:b7:e9:8b:9c:e5:
ed:cc:e5:26:9c:3a:b9:e8:f7:da:b6:1e:28:fb:8c:
43:77:58:0b:19:1f:52:ec:16:b2:f5:50:3d:3a:aa:
e2:8a:62:cc:34:46:9e:05:25:91:8d:72:71:50:a7:
cb:be:8c:39:64:f1:41:9e:44:67:e0:74:22:a7:85:
74:0f:eb:15:12:c6:f1:ae:7b:3c:b4:86:50:43:71:
d3:f8:fe:a5:0e:61:82:50:09:d8:38:5f:35:11:bb:
a8:73:42:a9:4d:19:77:b6:b1:2a:31:e4:08:01:93:
97:b8:06:c4:f5:f5:9c:0b:8b:89:1d:68:9c:f4:f5:
15:44:7e:b0:ea:97:26:53:ab:37:af:b6:1b:09:bb:
b7:a6:a5:b8:ff:70:a7:08:1f:b8:70:46:c5:be:1d:
48:75:c3:df:c0:40:9d:60:e1:27:74:fb:cf:16:34:
6d:f2:2c:5b:96:7e:98:3f:f3:d1:5c:28:a5:6a:fb:
a0:18:7e:7a:7c:6f:96:2f:94:cc:e0:df:48:de:1f:
6f:b6:d1:57:d0:00:32:c7:14:39:80:d2:2b:9a:4d:
e6:33:c6:23:ae:b2:77:60:61:2d:8c:e2:3c:4a:08:
82:f9:04:df:3f:1c:45:fc:ef:9a:7f:56:a9:b6:6c:
91:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BF:94:BD:D2:16:C9:04:A4:33:A6:14:92:8B:5C:D1:0D:23:7A:37
X509v3 Authority Key Identifier:
keyid:50:9C:38:CC:3E:AA:35:56:FA:39:A2:2F:30:DC:1B:A4:83:6F:E8:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJw4zD6qNVb6OaIvMNwbpINv6J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:09:11:5c:77:db:42:fc:6b:ee:7a:1f:5b:91:49:0d:eb:99:
41:3b:5a:02:2c:04:f8:51:ab:4a:47:c4:e3:bf:57:26:1b:11:
77:f0:7f:f4:c3:f2:ba:09:2e:4e:10:5b:6d:a0:1b:28:d7:dd:
9a:16:d7:c7:88:d7:91:26:5a:b6:1f:78:02:b8:45:98:92:d1:
99:8c:75:12:1d:11:8a:2e:d7:1c:0a:42:a4:20:8e:06:1a:77:
b7:7e:cb:f2:df:0d:c3:fa:22:99:c7:ba:ab:1c:cb:69:81:e1:
bf:cb:65:b4:d7:4c:27:cf:57:1d:04:c7:09:0a:28:84:78:0a:
a4:7f:77:85:d2:5a:de:f9:7f:e0:d0:24:09:b4:63:fc:a8:80:
cc:27:67:a5:9d:bb:1d:1e:ed:ef:05:38:53:08:17:a5:41:1a:
ed:35:92:83:6c:52:ce:b1:a2:06:af:35:ab:ca:b8:25:33:79:
94:e7:a7:87:a8:4b:cf:27:89:c0:d3:42:5c:ca:97:16:18:ba:
3b:67:ec:e4:e6:3a:c5:d0:f0:2c:b8:73:7d:6a:52:86:45:98:
34:a2:f8:52:18:bc:95:4e:c6:04:d1:d6:2c:c9:8c:e4:44:84:
e8:f7:98:6f:6f:94:42:5a:80:d4:34:2f:6b:56:be:e5:eb:70:
dc:37:b3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:39:09 2025 by rpki-client