Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.mft
File: urOPSeByR4vlU-z_NjXz3Zd1gQE.mft (raw, json)
Hash identifier: EmUUKS5AbvAn0Hrpa4NP0MbqzUBnoY1H5S+O4zVNnPE=
Subject key identifier: DC:B5:8D:46:B4:68:89:B4:39:87:7C:B2:E8:3D:73:65:0F:AB:2A:09
Authority key identifier: BA:B3:8F:49:E0:72:47:8B:E5:53:EC:FF:36:35:F3:DD:97:75:81:01
Certificate issuer: /CN=bab38f49e072478be553ecff3635f3dd97758101
Certificate serial: 019A70A586A104A058C78DEBCF3195C03885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urOPSeByR4vlU-z_NjXz3Zd1gQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.mft
Manifest number: 110D
Signing time: Tue 11 Nov 2025 02:01:27 +0000
Manifest this update: Tue 11 Nov 2025 02:01:27 +0000
Manifest next update: Wed 12 Nov 2025 02:01:27 +0000
Files and hashes: 1: urOPSeByR4vlU-z_NjXz3Zd1gQE.crl (hash: f2mNeRVO9l9FyYqKCxoofN2L7u9vUIE96wJIb4VVpdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/urOPSeByR4vlU-z_NjXz3Zd1gQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:86:a1:04:a0:58:c7:8d:eb:cf:31:95:c0:38:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab38f49e072478be553ecff3635f3dd97758101
Validity
Not Before: Nov 11 02:01:27 2025 GMT
Not After : Nov 12 02:01:27 2025 GMT
Subject: CN=dcb58d46b46889b439877cb2e83d73650fab2a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:48:b1:b2:b4:e6:af:fb:e9:96:b9:c9:f0:29:
3c:be:26:56:33:d9:8d:7f:35:20:fd:d5:52:f2:7f:
f9:07:2f:56:87:c6:fc:f0:7e:ab:fa:37:3d:8e:93:
b7:c3:d7:93:d4:6e:dc:b5:5f:86:24:1e:21:84:cf:
21:b5:2b:f6:88:79:1f:fb:17:91:8b:d3:8c:7d:79:
06:5a:64:37:36:83:b7:2c:ef:27:4a:29:31:14:8f:
71:38:7e:fe:b4:2a:33:b1:2a:1c:6b:af:23:8b:53:
7d:df:cd:54:7c:6c:69:d2:90:a6:4f:2e:a4:26:d4:
8e:f3:2c:b5:95:b8:30:8b:28:fe:04:9f:78:30:48:
c1:4a:b0:60:5f:6d:17:4a:76:a8:ea:6a:09:53:c7:
e5:10:8d:b3:39:5f:c8:2a:2e:aa:45:b7:f2:ea:80:
3b:05:d4:d6:4a:77:b5:48:0c:ca:92:09:51:14:3c:
c6:68:8e:0e:3b:27:36:9d:27:ca:15:0b:d1:09:36:
54:b9:5c:db:de:41:57:20:17:eb:f9:e8:9c:fa:6f:
40:36:72:45:5d:da:88:01:4c:59:cf:5f:06:af:c3:
40:58:1c:59:0f:35:08:cb:bc:99:47:95:11:2e:a6:
3d:85:2d:b1:cc:f7:1d:be:6c:ec:e0:66:1b:a0:e5:
ce:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B5:8D:46:B4:68:89:B4:39:87:7C:B2:E8:3D:73:65:0F:AB:2A:09
X509v3 Authority Key Identifier:
keyid:BA:B3:8F:49:E0:72:47:8B:E5:53:EC:FF:36:35:F3:DD:97:75:81:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urOPSeByR4vlU-z_NjXz3Zd1gQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:78:f2:75:76:e1:36:5f:0a:08:8c:e4:31:7a:7c:ee:7d:67:
d2:7d:66:b7:41:df:8c:8b:dc:95:fa:bf:9d:ef:f7:25:7a:ce:
12:de:30:2f:43:61:63:d2:ce:d6:88:ce:31:e2:34:dd:2b:0f:
3e:3d:3b:5f:a9:08:21:4f:19:ec:7f:43:58:a6:7a:b8:41:2a:
fe:2d:05:ba:01:c2:4f:79:11:0b:79:c0:63:23:79:5a:9a:c4:
d9:d3:bd:20:d2:2f:49:81:db:52:4c:e4:38:18:fc:38:c9:54:
67:b2:e8:d9:f3:14:04:85:36:1f:ec:2f:30:ee:98:09:9a:76:
52:e1:75:30:80:29:5a:5b:4b:09:29:a5:b9:70:19:af:6d:59:
f6:1f:03:65:9d:f2:64:b6:54:4f:16:91:27:be:a2:27:19:c1:
2c:6c:84:d5:d5:f0:29:40:ee:ab:ab:d3:d6:68:5c:b7:a6:64:
48:55:61:f4:93:25:80:9f:07:a2:50:09:b1:60:60:a6:e3:b1:
a8:3d:67:58:a5:d7:05:5e:8f:ff:ed:cf:ce:1d:2d:82:14:30:
9a:82:31:f7:c5:8e:1d:19:fd:75:2f:76:34:f1:b2:9e:8b:ff:
52:c1:44:4a:5b:16:b0:50:d5:5d:16:dc:c5:7a:71:16:d9:9a:
f6:72:f5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:44 2025 by rpki-client