Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a31884-2952-4647-815e-e52525db12db/1/UDCmlphoVt51uCLWrpX-ATE4IK8.mft
File: UDCmlphoVt51uCLWrpX-ATE4IK8.mft (raw, json)
Hash identifier: aR0L7fEUi1iOsmEOm9I3tM6Vc/dmC6JdSlSK1zxb4CA=
Subject key identifier: AD:B7:73:58:B8:E2:78:96:3A:FC:86:F0:40:1F:DB:49:0B:89:68:A6
Authority key identifier: 50:30:A6:96:98:68:56:DE:75:B8:22:D6:AE:95:FE:01:31:38:20:AF
Certificate issuer: /CN=5030a696986856de75b822d6ae95fe01313820af
Certificate serial: 019A711342A118EF748AA84D1B35E40420E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UDCmlphoVt51uCLWrpX-ATE4IK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a31884-2952-4647-815e-e52525db12db/1/UDCmlphoVt51uCLWrpX-ATE4IK8.mft
Manifest number: 1117
Signing time: Tue 11 Nov 2025 04:01:18 +0000
Manifest this update: Tue 11 Nov 2025 04:01:18 +0000
Manifest next update: Wed 12 Nov 2025 04:01:18 +0000
Files and hashes: 1: UDCmlphoVt51uCLWrpX-ATE4IK8.crl (hash: mJM4O6Hkd2IEEQBEEAIZ9ONHl7gEKqzcnB8g++/wJL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a31884-2952-4647-815e-e52525db12db/1/UDCmlphoVt51uCLWrpX-ATE4IK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/a31884-2952-4647-815e-e52525db12db/1/UDCmlphoVt51uCLWrpX-ATE4IK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UDCmlphoVt51uCLWrpX-ATE4IK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:42:a1:18:ef:74:8a:a8:4d:1b:35:e4:04:20:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5030a696986856de75b822d6ae95fe01313820af
Validity
Not Before: Nov 11 04:01:18 2025 GMT
Not After : Nov 12 04:01:18 2025 GMT
Subject: CN=adb77358b8e278963afc86f0401fdb490b8968a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:48:3b:77:59:41:d5:2b:39:1c:63:13:9e:f6:
89:3a:02:52:40:92:dd:06:33:27:a4:b7:b0:19:33:
87:c5:84:5b:81:a8:bb:46:2c:6a:31:6e:08:6b:1e:
31:53:b9:b8:b5:58:09:25:ad:0d:33:ba:03:fe:3f:
b2:6a:24:60:93:e0:43:a6:89:fa:e7:ac:b9:92:b1:
e4:13:20:57:f8:0f:9e:82:12:75:b4:86:95:48:df:
5c:a9:bf:5e:78:c7:e6:aa:fd:23:13:f8:00:01:22:
e2:6f:07:29:7d:d6:d2:5d:61:88:34:dc:02:b8:bd:
af:d3:37:09:87:67:9d:07:8d:5e:a6:da:e6:b0:7b:
1c:14:39:ff:73:34:46:3c:91:bb:30:37:5b:16:c0:
17:f9:65:67:f5:40:f3:bd:38:7d:07:2d:2a:76:b3:
84:d1:1a:4d:7b:8c:03:42:aa:d5:8b:8d:16:27:d7:
84:a1:7b:08:e0:99:82:e6:7f:7b:47:40:b7:75:df:
99:bc:43:f9:10:e0:d7:90:ff:af:4a:12:53:71:a7:
24:69:30:b2:ce:0f:c1:1b:1f:2d:a1:94:b0:63:c5:
b2:23:91:0b:c3:f5:f2:ea:19:cc:3c:84:a3:cd:2a:
9b:b8:21:a9:11:ae:d0:58:69:14:60:a6:69:13:69:
81:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B7:73:58:B8:E2:78:96:3A:FC:86:F0:40:1F:DB:49:0B:89:68:A6
X509v3 Authority Key Identifier:
keyid:50:30:A6:96:98:68:56:DE:75:B8:22:D6:AE:95:FE:01:31:38:20:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDCmlphoVt51uCLWrpX-ATE4IK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a31884-2952-4647-815e-e52525db12db/1/UDCmlphoVt51uCLWrpX-ATE4IK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a31884-2952-4647-815e-e52525db12db/1/UDCmlphoVt51uCLWrpX-ATE4IK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:05:9e:e6:7f:e1:75:b2:c3:c8:8c:eb:f8:30:3f:16:b4:02:
0b:ab:9c:f1:53:ad:6e:e1:7e:b1:14:4a:60:c5:06:e3:7c:ef:
4c:e5:f6:08:24:1f:20:a5:b7:7e:50:a4:54:a2:b7:9f:56:57:
3f:e8:4d:11:f4:7c:e8:ac:ec:c5:78:1b:b7:0a:9f:5b:f7:3e:
35:d6:e5:79:98:48:4e:87:24:03:3b:6e:b9:96:20:de:e3:fc:
74:b3:79:e2:ca:5a:e0:ac:a9:da:b7:c7:d5:d5:1f:bc:50:30:
de:22:5e:c4:72:d0:ec:b1:e7:8c:49:85:70:e6:af:d8:dc:08:
12:90:fe:fb:0e:85:ec:b5:e7:c9:df:ad:df:2a:75:e5:7d:94:
30:e2:e0:9c:53:a7:d4:cf:a3:72:1f:22:32:35:ab:9e:95:e3:
46:f8:01:2b:9d:24:cb:b1:25:18:1e:f4:4e:76:10:21:03:95:
ed:1b:81:bd:c3:81:34:36:40:64:a8:bf:4e:bd:7f:a5:99:ff:
85:84:a9:b9:bd:40:a4:f3:5e:ed:3b:76:1f:6d:57:9c:f0:93:
f8:bb:87:b2:19:fa:41:7a:4e:c9:ff:65:31:4c:c8:3a:bb:27:
ad:6f:a7:cf:e1:83:f1:e4:62:18:03:5f:47:bc:dc:fd:b4:eb:
c3:af:1e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:23 2025 by rpki-client