Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/12d4f2-5028-44fb-bdf3-c822155acfa6/1/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.mft
File: UvJb0FrBSIUfoqRjrQ3gcIGEBPc.mft (raw, json)
Hash identifier: iqq2KRbWy9WQgxFnk9mUvnaC5PA+dH0uwyYiw5SXBwk=
Subject key identifier: EB:7F:C3:BB:76:11:A5:65:B1:22:24:D3:D2:27:22:96:50:23:C1:BD
Authority key identifier: 52:F2:5B:D0:5A:C1:48:85:1F:A2:A4:63:AD:0D:E0:70:81:84:04:F7
Certificate issuer: /CN=52f25bd05ac148851fa2a463ad0de070818404f7
Certificate serial: 019A71B987CAD8FB94D337CE3AC600E8F839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/12d4f2-5028-44fb-bdf3-c822155acfa6/1/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.mft
Manifest number: 0B49
Signing time: Tue 11 Nov 2025 07:02:55 +0000
Manifest this update: Tue 11 Nov 2025 07:02:55 +0000
Manifest next update: Wed 12 Nov 2025 07:02:55 +0000
Files and hashes: 1: UvJb0FrBSIUfoqRjrQ3gcIGEBPc.crl (hash: 2Nro/z0y14Imkicpu4QLb8I2Y2RL6vOPYGymPwh0+3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/12d4f2-5028-44fb-bdf3-c822155acfa6/1/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/12d4f2-5028-44fb-bdf3-c822155acfa6/1/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:87:ca:d8:fb:94:d3:37:ce:3a:c6:00:e8:f8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52f25bd05ac148851fa2a463ad0de070818404f7
Validity
Not Before: Nov 11 07:02:55 2025 GMT
Not After : Nov 12 07:02:55 2025 GMT
Subject: CN=eb7fc3bb7611a565b12224d3d22722965023c1bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ee:da:b6:49:71:22:09:fa:18:42:41:aa:4c:
38:86:4f:08:f6:ac:a0:e7:9b:e5:e8:00:d8:88:20:
f1:35:36:71:7e:5b:44:95:a3:fe:38:09:c0:26:f2:
7d:61:11:a1:1f:c5:15:ce:6b:a7:c3:7e:81:3c:d7:
2d:e4:8d:ce:bf:32:19:8c:3a:5c:f3:97:85:db:ba:
05:d0:aa:72:d4:3d:b4:d4:03:47:4d:3a:13:de:61:
83:a7:4e:46:83:f7:da:4e:5f:15:76:c8:02:ae:84:
db:58:93:d5:44:04:36:40:c0:59:aa:f3:8c:15:e2:
15:a7:d3:53:38:c6:78:01:83:94:b4:2c:32:e5:c0:
f0:80:0d:f6:82:89:6e:b5:ea:1e:5a:dd:ee:76:b7:
ef:50:b1:9c:b8:0e:af:9e:cf:47:5d:be:15:cc:58:
ad:71:3c:c2:a8:df:40:78:52:af:54:cb:ce:b3:ae:
4b:9e:ca:d4:5b:af:ff:20:2d:1f:9a:03:d3:3d:cc:
0e:e3:71:24:83:7c:cd:16:86:13:d6:ff:13:3a:0a:
4f:cf:c9:23:37:83:c3:0c:ba:86:52:3f:81:6b:b7:
3b:02:e3:54:f4:fd:ac:9d:d3:d9:a8:6e:ea:58:59:
53:6b:d7:dd:88:63:0a:00:07:61:c8:60:51:14:39:
ac:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7F:C3:BB:76:11:A5:65:B1:22:24:D3:D2:27:22:96:50:23:C1:BD
X509v3 Authority Key Identifier:
keyid:52:F2:5B:D0:5A:C1:48:85:1F:A2:A4:63:AD:0D:E0:70:81:84:04:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/12d4f2-5028-44fb-bdf3-c822155acfa6/1/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/12d4f2-5028-44fb-bdf3-c822155acfa6/1/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:1d:87:23:c1:d9:2a:c8:d7:7e:54:b3:0f:e2:d3:c5:f0:c0:
5e:cf:05:e8:59:91:05:e0:62:88:20:92:e0:66:b4:a4:7f:90:
42:ec:5d:ce:b5:d7:10:6e:b9:2d:fa:ec:cb:e3:22:a0:a8:6e:
a5:c0:09:f9:17:01:b9:74:bc:61:01:85:ed:ff:24:58:1d:94:
52:00:1e:84:b6:ec:50:72:ad:f1:03:82:41:9a:7e:35:e4:0e:
77:d2:9c:02:54:07:19:80:66:fc:91:a8:59:46:12:17:a6:12:
08:00:f4:9d:07:92:75:0e:e0:1d:b8:3a:28:e1:58:4f:74:17:
20:a6:f0:35:81:39:0d:74:bb:62:be:fe:0b:22:6d:8c:93:9a:
1a:af:ac:6b:4d:fd:07:f8:69:99:f2:35:9e:30:b7:9e:46:65:
a8:fc:07:c1:93:a6:2a:08:e5:66:42:fd:7a:9b:af:3a:3e:36:
e6:27:7b:2a:8b:f7:24:53:47:6c:4b:ab:a0:7c:75:da:af:4e:
be:59:df:e3:8c:5f:cd:9d:57:3d:1a:1f:a5:09:20:c0:dd:11:
d4:78:15:46:c4:89:db:f8:b1:a9:b4:fb:ad:f1:3b:d2:2a:9f:
c6:8c:ed:d2:c8:8a:71:16:9b:1c:3c:c1:37:b5:c0:48:72:e8:
4e:e8:36:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:13 2025 by rpki-client