Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.mft
File: UC_eWr0nGEuqmtq3za-8w6VEGus.mft (raw, json)
Hash identifier: j54BNd6P96Zxf7AdpMBmPZ/Klu0ogjQ9nGSfUW+AIpc=
Subject key identifier: 00:BA:4E:64:16:03:F0:E4:4B:5A:77:D5:B9:4F:88:C3:CC:E5:59:0E
Authority key identifier: 50:2F:DE:5A:BD:27:18:4B:AA:9A:DA:B7:CD:AF:BC:C3:A5:44:1A:EB
Certificate issuer: /CN=502fde5abd27184baa9adab7cdafbcc3a5441aeb
Certificate serial: 019A7112A70436C946BD664A1D5EC11B69FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UC_eWr0nGEuqmtq3za-8w6VEGus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.mft
Manifest number: 1457
Signing time: Tue 11 Nov 2025 04:00:39 +0000
Manifest this update: Tue 11 Nov 2025 04:00:39 +0000
Manifest next update: Wed 12 Nov 2025 04:00:39 +0000
Files and hashes: 1: UC_eWr0nGEuqmtq3za-8w6VEGus.crl (hash: 8RabPnYVxqenEqEoJG1pflDHBB2SdM19HKVGA7dEYZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.mft
rsync://rpki.ripe.net/repository/DEFAULT/UC_eWr0nGEuqmtq3za-8w6VEGus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:a7:04:36:c9:46:bd:66:4a:1d:5e:c1:1b:69:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=502fde5abd27184baa9adab7cdafbcc3a5441aeb
Validity
Not Before: Nov 11 04:00:39 2025 GMT
Not After : Nov 12 04:00:39 2025 GMT
Subject: CN=00ba4e641603f0e44b5a77d5b94f88c3cce5590e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:de:ff:c4:3c:24:64:05:c3:c3:4b:64:f1:26:
f2:a7:48:fe:33:6b:98:3e:41:d6:6e:20:54:5c:73:
fd:66:98:c9:df:64:4f:fc:50:d7:ad:c1:59:d0:7e:
fe:f7:b0:2b:12:ac:c8:9c:23:83:6c:2c:6f:9a:c5:
a1:ff:87:7d:d3:a6:a3:2f:af:73:d7:5e:a8:44:52:
3f:7b:25:aa:7d:29:07:2f:e8:68:bf:bd:41:07:1b:
17:0c:28:5e:68:0f:67:9d:2f:0e:98:ba:5e:12:55:
1e:1b:f6:21:94:d2:75:db:15:0f:4e:ee:25:ed:dc:
8b:3b:15:76:ef:cf:ce:a8:d7:96:0e:04:77:a4:83:
96:fb:ff:ca:63:f7:ca:62:28:27:79:27:61:c7:bc:
2c:52:ef:ae:67:55:2b:e8:e4:b6:0f:1b:42:87:f6:
e0:fa:b3:6c:74:13:47:1c:2f:d0:61:5e:f0:ba:8c:
17:91:17:be:97:95:a4:01:27:a8:19:73:63:8c:4f:
3b:ff:0d:3a:af:51:f8:4e:1d:33:fc:d1:bc:c3:3d:
f5:ed:cc:f4:7d:63:f5:a8:e7:c2:ed:63:72:58:00:
7d:64:2e:74:9e:28:2b:8b:f6:a7:66:da:65:44:db:
b8:a9:48:14:ac:73:a4:d6:0b:f8:bf:5d:89:0f:c5:
50:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BA:4E:64:16:03:F0:E4:4B:5A:77:D5:B9:4F:88:C3:CC:E5:59:0E
X509v3 Authority Key Identifier:
keyid:50:2F:DE:5A:BD:27:18:4B:AA:9A:DA:B7:CD:AF:BC:C3:A5:44:1A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UC_eWr0nGEuqmtq3za-8w6VEGus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ae:b9:03:65:d5:f0:bd:35:ed:ab:88:86:dc:98:86:7e:fd:
6b:42:56:75:74:86:92:5c:3b:fb:08:8c:9b:91:58:11:7a:c8:
80:4e:f6:b4:91:8c:c4:23:3e:b7:4c:4f:94:81:10:e4:e6:1c:
f2:ea:74:0d:ab:cd:0a:13:49:43:71:46:e5:a3:2c:73:6e:5a:
7c:50:af:33:14:42:76:ce:0f:26:47:a5:05:54:23:f6:4b:f0:
a6:41:4b:20:0b:b7:94:8d:0d:b5:a0:b3:a1:f1:6e:42:f6:cd:
8d:4e:17:bf:8c:2c:07:ca:17:05:87:c0:11:e8:71:ee:81:04:
6d:7e:f6:f8:89:0e:5b:6b:b9:f4:6a:88:28:17:87:7f:63:7d:
22:2b:12:4b:cb:ed:35:8f:93:6a:f3:4b:1c:4a:78:a9:ab:04:
18:02:35:57:39:e1:53:ed:bd:bf:36:a2:6e:a9:de:21:1a:db:
8e:0e:bd:36:1c:21:61:87:86:9a:44:2a:5e:9c:a6:1a:4e:13:
5f:5e:a5:46:0a:2d:15:8f:68:72:8c:4f:db:41:2f:8b:80:17:
25:d2:bb:30:d1:89:ce:52:1b:af:15:43:f9:3a:82:64:5f:75:
3d:a8:a8:95:c1:7c:4f:c7:ad:b4:7c:1a:cc:5d:52:ea:f7:89:
0a:32:75:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:21 2025 by rpki-client