Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
File: g-ULKlHI9a25N7IqkMcg9rBPKXM.mft (raw, json)
Hash identifier: CCB4hj9/QC1wYQ00Pul+/gVEdxnanvl5/7TallXVT0o=
Subject key identifier: 18:59:30:4F:A0:9B:BD:B5:B1:27:FA:B7:42:14:C4:6C:54:47:9A:BA
Authority key identifier: 83:E5:0B:2A:51:C8:F5:AD:B9:37:B2:2A:90:C7:20:F6:B0:4F:29:73
Certificate issuer: /CN=83e50b2a51c8f5adb937b22a90c720f6b04f2973
Certificate serial: 019A7226357CE67518D15ABF100E16810A0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
Manifest number: 1532
Signing time: Tue 11 Nov 2025 09:01:37 +0000
Manifest this update: Tue 11 Nov 2025 09:01:37 +0000
Manifest next update: Wed 12 Nov 2025 09:01:37 +0000
Files and hashes: 1: g-ULKlHI9a25N7IqkMcg9rBPKXM.crl (hash: SaO9p1HWJl0olOChrk+7uOWmgXSVmC3YIeoGw51K2RU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:35:7c:e6:75:18:d1:5a:bf:10:0e:16:81:0a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e50b2a51c8f5adb937b22a90c720f6b04f2973
Validity
Not Before: Nov 11 09:01:37 2025 GMT
Not After : Nov 12 09:01:37 2025 GMT
Subject: CN=1859304fa09bbdb5b127fab74214c46c54479aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cd:fa:35:f4:a6:54:df:3a:dc:5e:e6:99:e7:
56:e1:c9:b7:12:79:6d:de:0d:b4:12:5a:e1:7b:e4:
5f:a1:62:03:66:b9:15:5f:bc:0c:d2:03:e4:02:8c:
fb:f6:5a:de:fe:7a:bc:ac:80:2e:b8:7d:72:01:d4:
b3:0f:94:f2:84:bf:9c:12:7a:8b:45:3c:b0:4d:da:
1c:7d:b5:2a:14:6a:89:9b:58:87:6f:07:6c:13:34:
6b:4d:b3:20:b0:ff:31:a7:a7:46:38:e1:80:9d:f8:
09:b2:27:8a:4e:47:64:e2:0b:1f:49:a0:ba:4d:21:
6a:21:58:0a:81:8e:50:aa:3c:af:bb:d4:1b:25:e9:
b1:bc:e0:af:f9:87:63:50:ec:b1:ce:37:f4:86:9b:
44:a1:4d:f7:ea:98:07:1d:cc:c5:01:28:d1:8d:58:
91:f4:55:f4:24:a1:ca:60:ec:86:f0:0c:f2:fe:2b:
31:79:a1:28:bd:ef:4f:d1:85:53:6c:0f:44:05:67:
53:18:ef:1e:ac:e9:ce:b7:d1:25:9e:f1:2f:c7:c5:
ec:e3:de:21:b0:50:e9:03:fe:1d:26:e0:65:33:80:
53:50:95:6f:80:d2:37:3e:2d:a8:42:a8:69:9c:e8:
85:33:ae:e4:cb:49:b3:ad:92:40:9b:b5:38:ef:1d:
f2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:59:30:4F:A0:9B:BD:B5:B1:27:FA:B7:42:14:C4:6C:54:47:9A:BA
X509v3 Authority Key Identifier:
keyid:83:E5:0B:2A:51:C8:F5:AD:B9:37:B2:2A:90:C7:20:F6:B0:4F:29:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:cd:10:d0:19:2f:af:43:92:91:dc:6c:54:54:55:5c:8b:33:
00:81:69:06:be:78:db:7b:22:5f:c8:75:94:d6:7e:83:ac:0f:
26:99:23:aa:e9:12:74:85:d7:d3:38:e9:5a:3b:f1:c3:be:e5:
cb:89:47:4f:13:7b:43:e3:ec:57:20:31:36:85:d3:55:cc:b1:
1e:ed:87:b8:f6:49:54:c9:08:3e:16:c2:0b:19:db:0f:c9:34:
cd:a7:6a:ac:63:e5:b0:bf:71:a4:9e:ba:4c:83:bf:9d:8f:1d:
fd:07:25:f4:f3:00:c4:9c:f0:7f:f2:4e:bc:10:42:c8:44:22:
60:54:12:f3:45:b4:fe:02:86:3c:33:53:5a:6d:65:87:69:06:
0a:bf:59:09:da:68:60:f4:bb:d3:02:ef:19:de:c4:21:4b:13:
25:58:0a:f9:e8:85:6d:a6:a0:6f:32:0f:82:5f:d3:a0:2c:7d:
73:4b:f0:3e:9f:dd:a1:ba:ed:d2:d4:ab:12:45:1c:0c:77:03:
98:7c:16:68:73:e2:32:d5:fd:d1:12:94:60:94:0b:96:d5:7a:
61:fe:2d:83:f6:8a:d2:ad:b8:cc:d3:3a:ac:5a:7d:a5:c7:df:
75:9a:3b:a0:ee:77:c1:75:cc:b9:bd:0b:06:ae:31:91:71:c4:
84:65:74:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:35 2025 by rpki-client