Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft
File: uLhsyEeC6kEMbYfCzTv4agaqF7s.mft (raw, json)
Hash identifier: Dj2Cx/yjwuKx14Cb5Zk6KjQJoQAVVkHKeaMHTrs0OhY=
Subject key identifier: 04:C8:29:59:7E:0F:F9:1B:B1:7C:CF:54:20:A5:D9:0D:10:C6:C5:BA
Authority key identifier: B8:B8:6C:C8:47:82:EA:41:0C:6D:87:C2:CD:3B:F8:6A:06:AA:17:BB
Certificate issuer: /CN=b8b86cc84782ea410c6d87c2cd3bf86a06aa17bb
Certificate serial: 019A1D637D796B4332A844B075327CE05A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLhsyEeC6kEMbYfCzTv4agaqF7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft
Manifest number: 0D84
Signing time: Sat 25 Oct 2025 22:00:50 +0000
Manifest this update: Sat 25 Oct 2025 22:00:50 +0000
Manifest next update: Sun 26 Oct 2025 22:00:50 +0000
Files and hashes: 1: uLhsyEeC6kEMbYfCzTv4agaqF7s.crl (hash: pzDKfMeQvC75pH3TRwGzzD92URXWjBoXaJMh3gUOnLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uLhsyEeC6kEMbYfCzTv4agaqF7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:63:7d:79:6b:43:32:a8:44:b0:75:32:7c:e0:5a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8b86cc84782ea410c6d87c2cd3bf86a06aa17bb
Validity
Not Before: Oct 25 22:00:50 2025 GMT
Not After : Oct 26 22:00:50 2025 GMT
Subject: CN=04c829597e0ff91bb17ccf5420a5d90d10c6c5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1d:a7:12:64:d6:c1:83:82:42:ee:f0:40:13:
d6:9b:17:e8:2c:7a:c4:21:44:6a:cd:24:bd:a5:bc:
1b:52:ec:19:2d:82:39:0e:30:d3:8a:f1:09:79:e0:
80:35:85:8a:74:6b:97:36:b8:a4:df:97:f0:99:8e:
e4:71:83:85:dc:75:1e:f4:a4:87:3b:07:23:41:19:
4e:30:ed:5e:35:43:9a:47:db:53:19:a3:57:de:f9:
bb:71:5d:32:96:0f:1e:22:ca:76:69:8a:ce:09:1a:
bf:cf:65:65:01:25:0b:35:16:cf:7b:68:44:b1:f7:
de:8d:ac:fb:9b:1a:47:ad:53:df:b3:75:20:aa:ce:
53:06:b6:f7:32:08:4a:e4:fe:27:e6:52:a8:a3:94:
12:64:d9:10:ef:dc:c9:b7:01:bb:fd:be:c1:c6:43:
7a:89:7b:41:4d:f2:76:a2:7d:52:2a:b0:08:26:4b:
3c:cf:4c:9c:20:ab:21:d5:7e:ec:17:0d:a8:f2:03:
ff:bf:9b:8f:67:0a:40:a3:f4:cd:0e:85:9f:2a:e2:
1a:b2:5b:32:44:37:27:c8:69:b4:a1:c4:bb:b4:3c:
78:e8:97:95:66:d5:7c:56:14:48:41:9d:c2:c1:89:
3f:87:68:a4:c3:f4:6e:26:ca:40:94:52:c6:24:42:
7c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C8:29:59:7E:0F:F9:1B:B1:7C:CF:54:20:A5:D9:0D:10:C6:C5:BA
X509v3 Authority Key Identifier:
keyid:B8:B8:6C:C8:47:82:EA:41:0C:6D:87:C2:CD:3B:F8:6A:06:AA:17:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLhsyEeC6kEMbYfCzTv4agaqF7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:70:9f:83:23:dd:af:3b:bf:0a:f2:ca:a3:91:fd:f1:98:55:
69:26:7c:c1:19:40:b3:d0:0b:f8:44:88:27:8a:fb:9a:1b:63:
9b:8e:83:91:61:26:37:f2:c3:f4:42:8d:df:fe:6f:10:6e:53:
fa:5e:f8:5d:70:54:f9:ab:43:4b:24:54:2f:8a:11:6e:83:a9:
91:57:1d:b6:d0:6d:96:17:4e:52:c4:0e:52:2b:a5:45:5c:0d:
7d:d9:76:ae:54:9c:8d:b5:c4:cd:50:a7:6e:11:47:c1:0e:67:
2a:1b:aa:b1:07:2d:ed:d7:56:94:53:db:b8:02:c6:f3:d8:6c:
7c:fd:82:f0:83:55:db:16:a5:dc:5a:09:84:26:ad:2b:d1:d6:
78:89:30:ce:b3:31:8f:13:f6:40:01:ec:48:a2:f6:a5:83:cd:
c5:7f:b9:5e:5e:27:e2:d6:bc:46:39:af:e0:51:f0:2d:b8:56:
29:a8:2f:0c:5b:d1:57:b4:f0:c9:0c:91:b5:00:dd:64:96:67:
e2:f8:37:5c:89:bd:6e:a4:8c:f1:55:55:73:89:24:4c:1f:72:
bc:03:82:7e:9a:ce:cb:15:f2:28:80:a6:b9:4a:b7:1b:0e:28:
93:23:65:af:0d:c4:ef:07:04:dc:b3:53:9c:67:4d:47:42:97:
ee:1b:be:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 07:18:48 2025 by rpki-client