Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft
File: pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft (raw, json)
Hash identifier: oEp/hf0jibIv7ixXotNcg6r1ZJ7sb3BGRVlmFStkR6I=
Subject key identifier: D3:9A:EE:1D:25:88:17:72:CD:86:AE:65:B0:05:7F:9A:13:87:12:E3
Authority key identifier: A5:40:AB:D1:98:82:CA:C8:0B:76:6D:72:AD:8F:EC:24:AB:95:50:AF
Certificate issuer: /CN=a540abd19882cac80b766d72ad8fec24ab9550af
Certificate serial: 019A7225D07E3FD60FFC7606112EE65BD4D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUCr0ZiCysgLdm1yrY_sJKuVUK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft
Manifest number: EB
Signing time: Tue 11 Nov 2025 09:01:11 +0000
Manifest this update: Tue 11 Nov 2025 09:01:11 +0000
Manifest next update: Wed 12 Nov 2025 09:01:11 +0000
Files and hashes: 1: pUCr0ZiCysgLdm1yrY_sJKuVUK8.crl (hash: +2SfYKRiB1I3HS3U22OUnaOY7R/SXEqbtEKjscdlaxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUCr0ZiCysgLdm1yrY_sJKuVUK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:d0:7e:3f:d6:0f:fc:76:06:11:2e:e6:5b:d4:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a540abd19882cac80b766d72ad8fec24ab9550af
Validity
Not Before: Nov 11 09:01:11 2025 GMT
Not After : Nov 12 09:01:11 2025 GMT
Subject: CN=d39aee1d25881772cd86ae65b0057f9a138712e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:17:eb:56:e4:22:89:14:74:76:66:ef:0c:e9:
60:7a:49:d1:ae:f4:57:ef:95:36:cb:af:d5:5f:6a:
e2:45:e4:d1:14:19:b8:4f:74:df:2c:7b:a6:a9:4e:
5f:3a:06:e2:47:51:16:b2:57:d0:be:03:12:dc:a2:
8a:e5:66:3d:b0:01:92:89:29:63:d6:79:7b:64:93:
43:ac:aa:51:bb:00:05:38:6e:6a:92:83:2e:c8:5e:
89:a6:3a:41:b4:f2:fc:e6:13:0a:3c:85:5b:a5:67:
3e:69:ac:70:69:4d:03:d5:13:27:51:98:c1:00:ba:
c6:b6:96:48:9a:40:ab:b5:ec:9d:74:33:19:84:60:
cb:3a:2d:15:db:df:d9:7b:0b:cf:c4:86:1e:25:1e:
94:78:1f:6d:de:3e:cd:e9:bc:17:09:37:e2:bc:69:
fc:e0:fd:b6:71:cb:7d:d0:27:69:be:ae:f4:36:2c:
b7:d9:38:3d:38:9e:b5:bb:9e:f8:5e:24:e3:6c:32:
03:eb:0b:3c:ee:c6:97:b1:aa:62:63:70:04:5c:d6:
a0:72:32:4d:6d:45:04:77:5d:84:60:77:3b:e7:11:
d0:85:ca:3e:ca:2a:3f:09:33:5c:3a:b1:3d:9a:12:
9f:a3:79:6d:4c:19:55:2a:42:a3:f0:fd:5e:ab:bc:
ef:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9A:EE:1D:25:88:17:72:CD:86:AE:65:B0:05:7F:9A:13:87:12:E3
X509v3 Authority Key Identifier:
keyid:A5:40:AB:D1:98:82:CA:C8:0B:76:6D:72:AD:8F:EC:24:AB:95:50:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUCr0ZiCysgLdm1yrY_sJKuVUK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:54:36:1b:ff:0a:80:14:2c:44:32:2a:12:cd:ac:f6:b6:a2:
78:be:f0:2b:6d:9e:e2:23:82:3e:41:e5:f9:4c:40:f9:25:03:
e0:59:a5:55:7b:ba:22:0d:41:5a:69:80:67:bc:03:5d:3d:c9:
f1:b3:dd:dd:d9:54:c3:48:62:26:b5:c6:b6:12:4b:bd:07:3c:
6d:d1:be:30:ec:6e:17:69:af:9b:3a:99:48:d8:be:cd:1a:be:
ae:5d:a9:a1:ff:5c:eb:cc:1a:ea:1b:0a:94:d6:d0:ea:25:5a:
2e:9f:94:28:0a:31:7c:11:89:45:ed:e5:ea:b7:38:82:e8:65:
b0:9a:5d:a6:81:27:66:c3:b6:6f:a8:50:d2:de:10:68:c0:05:
45:b8:db:58:78:af:4a:c3:7f:e6:99:a2:c5:73:1e:42:1e:91:
79:02:d5:5e:b4:ff:30:0c:af:5d:39:9a:49:47:55:04:f3:9a:
2d:67:cd:80:09:13:6e:b2:03:4d:69:71:e4:35:ab:ab:2e:75:
b1:08:41:4c:2c:8a:73:1d:ce:e4:28:5b:01:00:f8:0d:b8:2e:
20:30:81:9d:2a:1f:a2:6e:5d:1b:d5:f8:31:60:86:a4:ac:ec:
36:4c:19:b9:6a:89:d7:1f:24:82:e0:b7:61:f8:2f:45:2f:d7:
f8:1a:1e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:41:15 2025 by rpki-client