Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft
File: UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft (raw, json)
Hash identifier: fwddSPu+DkDFh839IDJjBW1jbCfmqA+O2s1cLEwdgec=
Subject key identifier: F1:EC:1C:51:54:45:B0:9F:AB:EE:25:B7:63:41:CE:E5:84:46:73:2B
Authority key identifier: 53:14:84:D0:DE:03:9F:66:5E:1F:92:CA:B3:11:CF:EB:C5:92:B7:A7
Certificate issuer: /CN=531484d0de039f665e1f92cab311cfebc592b7a7
Certificate serial: 019A72CA1C046F2B5B7120D5911C3072B7C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft
Manifest number: 0137
Signing time: Tue 11 Nov 2025 12:00:39 +0000
Manifest this update: Tue 11 Nov 2025 12:00:39 +0000
Manifest next update: Wed 12 Nov 2025 12:00:39 +0000
Files and hashes: 1: UxSE0N4Dn2ZeH5LKsxHP68WSt6c.crl (hash: 0bR2DbHg8KoMquEcuouCo9oVHr76DORDQBIKizBr3ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:1c:04:6f:2b:5b:71:20:d5:91:1c:30:72:b7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=531484d0de039f665e1f92cab311cfebc592b7a7
Validity
Not Before: Nov 11 12:00:39 2025 GMT
Not After : Nov 12 12:00:39 2025 GMT
Subject: CN=f1ec1c515445b09fabee25b76341cee58446732b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d7:c4:4c:bc:e9:37:0e:53:45:83:e9:f5:54:
5b:e7:fd:2b:7b:25:ec:d4:7a:35:df:78:8c:f6:3e:
32:89:ce:3e:92:41:f7:13:db:e2:66:c0:4f:fb:08:
35:7b:71:ad:2d:f5:36:68:ac:d3:92:29:27:d8:37:
fc:32:86:e7:a8:0c:96:9b:9f:2d:b6:68:96:5e:72:
ea:8b:c9:12:f2:e2:d1:2b:85:3d:af:a1:b7:3a:c8:
2e:e4:02:1c:4d:71:11:93:ec:b6:01:1d:12:3c:ba:
b2:af:ae:63:a7:a6:85:dd:f5:c1:8d:0f:ba:8b:82:
07:da:da:9f:16:73:72:a3:2a:07:8b:f4:bb:0d:9d:
01:2c:75:ec:5f:84:3c:65:4a:40:d0:2e:d5:b4:88:
be:57:a3:40:7a:1d:e1:30:bd:01:b9:9f:7b:ed:2e:
e7:45:d2:ae:86:37:a4:f1:ce:9d:e1:b7:6e:9e:a6:
cf:69:b2:d7:87:68:a3:43:b1:15:ca:ba:4f:65:db:
85:55:dc:7c:cc:5d:ee:76:df:cd:1a:96:c4:63:c4:
ce:bb:51:29:a8:96:13:a4:49:42:fe:1b:24:63:9f:
15:75:e4:2d:ad:58:25:93:cb:60:6a:5d:76:5f:6e:
5f:4e:ce:71:32:ac:71:87:c9:27:d4:67:ac:f1:de:
45:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:EC:1C:51:54:45:B0:9F:AB:EE:25:B7:63:41:CE:E5:84:46:73:2B
X509v3 Authority Key Identifier:
keyid:53:14:84:D0:DE:03:9F:66:5E:1F:92:CA:B3:11:CF:EB:C5:92:B7:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:18:c7:fd:cb:53:b9:ae:eb:66:41:98:fe:dc:d6:ff:53:3a:
97:67:84:a9:8b:90:74:56:bc:fe:25:b2:35:eb:30:d7:47:ce:
11:9b:e4:8d:a0:45:61:43:4e:51:30:dd:92:ed:9a:9e:30:34:
72:2d:8d:55:b0:50:27:c1:fc:ef:2f:a5:0c:d6:78:a9:b9:ac:
12:a3:ca:0e:67:f2:f8:a8:25:61:6a:e6:49:13:6b:63:d0:75:
c0:3b:b0:6a:7c:0b:07:57:20:cc:54:ff:aa:57:67:5b:c9:a0:
c1:5e:32:6c:74:70:ef:e8:34:ba:ca:65:66:f9:f9:8d:41:68:
f4:28:cc:fd:2a:8a:80:67:f8:f7:a6:cb:09:a7:b7:71:a3:90:
47:44:b3:25:86:ca:df:7c:d6:da:7d:1b:ce:5e:be:5f:47:d3:
e0:6b:ef:c5:5e:42:b0:75:4e:eb:8e:97:e9:c3:b4:8e:35:0c:
40:32:56:27:76:c8:34:86:71:12:86:eb:c6:e3:f6:07:ea:26:
4f:d6:06:05:d3:d3:dc:8b:71:66:06:9a:8a:01:06:e6:2d:e1:
1d:13:4c:a5:ff:ab:52:12:f4:0e:ac:a7:02:05:8a:f5:2e:e6:
bf:5e:0b:25:4a:7a:55:e9:b0:80:f9:fb:44:a8:91:ba:73:64:
10:58:80:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:59:53 2025 by rpki-client