Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
File: vUltYJRIpG2YZUJqjp7aWICI0Fc.mft (raw, json)
Hash identifier: 60OL5pFTmlzd+Rg7YCs1s4zGY0jTswBU0pEWDtpxkCc=
Subject key identifier: 6A:EA:05:1C:F6:47:14:B3:0B:0D:09:4B:66:00:30:33:92:D3:4F:4F
Authority key identifier: BD:49:6D:60:94:48:A4:6D:98:65:42:6A:8E:9E:DA:58:80:88:D0:57
Certificate issuer: /CN=bd496d609448a46d9865426a8e9eda588088d057
Certificate serial: 019A71B81C77AACB0A9B07BAB29187FA4B3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
Manifest number: 1353
Signing time: Tue 11 Nov 2025 07:01:22 +0000
Manifest this update: Tue 11 Nov 2025 07:01:22 +0000
Manifest next update: Wed 12 Nov 2025 07:01:22 +0000
Files and hashes: 1: vUltYJRIpG2YZUJqjp7aWICI0Fc.crl (hash: F9iEXQvLslWz8DScozvFg6ygR0mQvsP3aCV7eObVIjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:1c:77:aa:cb:0a:9b:07:ba:b2:91:87:fa:4b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd496d609448a46d9865426a8e9eda588088d057
Validity
Not Before: Nov 11 07:01:22 2025 GMT
Not After : Nov 12 07:01:22 2025 GMT
Subject: CN=6aea051cf64714b30b0d094b6600303392d34f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:45:71:bc:a2:1e:1d:45:e7:be:09:cc:41:ba:
07:fa:06:fe:05:04:20:81:1b:d4:7c:2f:c9:ec:cb:
37:78:f7:23:6e:93:04:30:6e:51:6e:29:a8:97:aa:
e4:22:9b:f6:3b:d0:5b:e3:cd:d1:26:fa:a2:7c:b9:
60:16:38:f4:44:a7:86:69:68:90:20:f6:44:e8:10:
d3:3c:7c:30:e1:d8:fe:13:45:87:ed:60:e7:56:68:
25:43:fb:fb:68:b9:8d:99:50:09:5c:4e:2e:59:f3:
9f:ed:48:79:25:df:8b:7b:da:00:2e:09:92:4a:58:
25:9b:f9:bd:75:77:99:db:41:7f:8a:ee:4d:31:22:
5f:26:e4:c0:3d:da:b5:21:04:ba:8b:6e:87:33:62:
0f:1d:b8:50:b1:a6:23:10:01:11:3b:fe:0a:75:e1:
28:3c:fd:55:c1:b7:44:f5:e0:1d:68:3d:1a:56:60:
9f:f4:54:6b:46:14:81:10:4c:ba:71:b8:81:80:49:
5b:d0:ff:71:d6:50:92:c1:04:5e:96:6d:27:e6:06:
f1:11:ce:56:44:40:94:46:a8:78:17:e4:59:35:df:
5f:3c:9b:45:6d:e6:ce:23:ed:2d:1d:87:d3:77:09:
fb:a8:08:9f:e7:0e:e4:a6:05:c6:2f:0e:fd:0b:f9:
88:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EA:05:1C:F6:47:14:B3:0B:0D:09:4B:66:00:30:33:92:D3:4F:4F
X509v3 Authority Key Identifier:
keyid:BD:49:6D:60:94:48:A4:6D:98:65:42:6A:8E:9E:DA:58:80:88:D0:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:fe:4d:9c:0a:40:e9:43:22:7d:d2:71:61:7a:97:a9:93:16:
62:ae:92:e9:ed:cc:c3:ea:ba:26:f0:57:66:22:ff:fd:10:9b:
92:ad:53:0c:c8:c3:45:35:32:37:dd:63:63:69:ff:a9:d6:ed:
cc:b4:7e:ce:48:78:77:ee:4d:c5:4e:e5:32:b8:44:0c:92:49:
02:78:74:ea:2b:8d:d4:80:f1:a7:d4:e8:63:6d:ac:06:fd:92:
d6:67:4b:52:32:60:aa:be:03:2f:91:15:60:5c:2e:63:45:2a:
f1:a9:ee:84:89:34:7b:18:85:20:67:5e:6a:e3:cd:a4:84:c4:
ee:4c:24:ad:00:5a:d4:84:d3:04:80:14:6a:61:8f:42:5b:a8:
69:db:68:56:70:d2:ff:5e:1d:e3:df:6a:06:8b:e1:8b:ed:c1:
d6:c2:7c:54:a4:34:45:ff:78:6a:a9:d1:b5:e0:32:fd:c4:5a:
95:38:44:ee:11:35:66:99:71:f6:de:af:86:cb:80:0c:81:1f:
83:89:c9:92:fb:9e:3f:a1:52:66:4b:44:35:66:76:0e:96:93:
6e:f8:19:39:92:2c:27:b3:ee:71:01:e0:97:02:43:22:d4:b3:
50:97:91:99:1d:f5:f9:fb:7e:3d:f8:76:67:ea:2e:b1:3e:5f:
3a:37:96:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:27 2025 by rpki-client