Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/540c03-ba83-4971-8981-744dcd014fa4/1/uVZnsVy6fKp0FSdIRHOE--A7iTo.mft
File: uVZnsVy6fKp0FSdIRHOE--A7iTo.mft (raw, json)
Hash identifier: QbMzs/WvuQtmUlM88GMhO+JAbXTvz53WIT9D8OYHBcM=
Subject key identifier: 57:AC:5C:95:D0:C9:B9:06:61:D7:87:4B:BB:D5:DD:47:7E:A3:D8:3F
Authority key identifier: B9:56:67:B1:5C:BA:7C:AA:74:15:27:48:44:73:84:FB:E0:3B:89:3A
Certificate issuer: /CN=b95667b15cba7caa74152748447384fbe03b893a
Certificate serial: 019A71B7C079C2C84844289BBBB340B51F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uVZnsVy6fKp0FSdIRHOE--A7iTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/540c03-ba83-4971-8981-744dcd014fa4/1/uVZnsVy6fKp0FSdIRHOE--A7iTo.mft
Manifest number: 09D0
Signing time: Tue 11 Nov 2025 07:00:58 +0000
Manifest this update: Tue 11 Nov 2025 07:00:58 +0000
Manifest next update: Wed 12 Nov 2025 07:00:58 +0000
Files and hashes: 1: uVZnsVy6fKp0FSdIRHOE--A7iTo.crl (hash: VF+hv8Z5pwmsNYt5iHoWehRb+bopOIlx/w4dTWfy9pM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/540c03-ba83-4971-8981-744dcd014fa4/1/uVZnsVy6fKp0FSdIRHOE--A7iTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/540c03-ba83-4971-8981-744dcd014fa4/1/uVZnsVy6fKp0FSdIRHOE--A7iTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uVZnsVy6fKp0FSdIRHOE--A7iTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:c0:79:c2:c8:48:44:28:9b:bb:b3:40:b5:1f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b95667b15cba7caa74152748447384fbe03b893a
Validity
Not Before: Nov 11 07:00:58 2025 GMT
Not After : Nov 12 07:00:58 2025 GMT
Subject: CN=57ac5c95d0c9b90661d7874bbbd5dd477ea3d83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:67:27:b3:4f:31:17:39:04:17:1b:e1:7b:d0:
a3:2d:8a:67:57:c6:16:17:ba:0c:7e:de:ca:f9:a4:
fe:4b:48:ab:f7:e8:d1:59:36:ff:13:0f:a7:7b:34:
51:f8:3c:c3:b3:bf:8e:99:ec:00:4c:83:13:4a:2e:
bc:d2:b5:0c:c2:58:17:5b:2c:72:36:fc:9d:7c:5c:
92:52:58:f2:70:a6:17:54:ad:53:16:8e:5a:8e:88:
22:cf:36:6e:22:e4:2c:ac:c6:37:94:47:27:fd:df:
be:7f:16:b8:69:0b:a9:4b:94:5b:a8:26:91:e7:74:
c2:47:63:7f:e8:f7:4b:8e:21:88:db:2f:f5:7e:53:
53:45:c4:bc:31:b7:5d:c1:fd:b0:34:8e:9b:60:f4:
9d:6b:a3:f9:26:63:43:32:18:51:6c:88:41:e6:de:
98:7d:dd:98:d7:40:34:95:7d:1f:67:fe:b1:da:0e:
38:94:25:ba:5b:37:e6:f1:70:4f:75:e7:82:fd:47:
82:4f:cf:8c:ee:cb:59:3c:63:3d:44:e6:ed:0d:16:
84:61:fb:b8:de:60:44:e5:8a:8f:ac:0f:34:6b:48:
e3:8a:1d:39:50:e8:7f:55:93:d0:fa:68:1b:62:4f:
09:ec:be:4f:e9:08:56:8c:35:5d:c7:ca:45:00:59:
25:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AC:5C:95:D0:C9:B9:06:61:D7:87:4B:BB:D5:DD:47:7E:A3:D8:3F
X509v3 Authority Key Identifier:
keyid:B9:56:67:B1:5C:BA:7C:AA:74:15:27:48:44:73:84:FB:E0:3B:89:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uVZnsVy6fKp0FSdIRHOE--A7iTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/540c03-ba83-4971-8981-744dcd014fa4/1/uVZnsVy6fKp0FSdIRHOE--A7iTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/540c03-ba83-4971-8981-744dcd014fa4/1/uVZnsVy6fKp0FSdIRHOE--A7iTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:e8:f7:9e:da:62:bf:76:b4:63:07:78:2c:f6:eb:93:ba:f0:
20:ef:4f:2f:15:0c:d9:0a:39:cc:bc:7d:cb:e8:df:67:77:23:
40:13:ee:11:a4:3a:a3:cc:b3:bb:b6:47:8c:15:4d:e5:1a:37:
aa:0b:ea:29:8c:ba:0c:7d:0f:bf:cb:43:e3:6e:46:88:39:9b:
ea:02:2e:65:94:2f:b5:aa:86:be:e5:73:80:48:19:a2:3d:c1:
c8:ed:e0:7f:db:c6:dc:2b:d0:39:4f:0e:ae:8b:22:cb:8f:8c:
70:1c:63:5e:f2:ec:98:1d:64:bf:4d:d5:a8:31:86:34:2a:87:
d3:42:16:0b:86:89:9d:5a:c7:30:1f:6f:cf:eb:5c:a3:d7:b0:
01:4f:41:28:ea:9c:81:78:0b:b8:77:04:e3:56:60:4a:8b:23:
f0:f7:68:4f:44:67:17:0a:d3:86:f6:91:79:85:92:35:d3:19:
e6:45:61:50:81:d5:17:ee:50:55:16:00:52:75:2c:47:d3:6b:
38:26:14:63:e4:5f:dd:24:49:da:ef:a6:98:56:35:40:ab:f1:
8e:f4:c3:65:e6:9a:68:89:a3:fb:65:ab:f5:17:39:70:a9:1e:
d3:b4:54:ee:0b:c6:2a:f9:f5:0f:65:a7:7d:57:02:85:20:0e:
79:a3:34:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:50 2025 by rpki-client