
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a31884-2952-4647-815e-e52525db12db/1/UDCmlphoVt51uCLWrpX-ATE4IK8.mft
File: UDCmlphoVt51uCLWrpX-ATE4IK8.mft (raw, json)
Hash identifier: gElxetIfz6Q/yGQaOVRRAnQ1xLfbbJQQo1RH0VubqLE=
Subject key identifier: 6A:AA:2E:CD:02:92:B8:DD:A2:BD:12:A1:F3:16:BF:2B:8D:C3:B1:EB
Authority key identifier: 50:30:A6:96:98:68:56:DE:75:B8:22:D6:AE:95:FE:01:31:38:20:AF
Certificate issuer: /CN=5030a696986856de75b822d6ae95fe01313820af
Certificate serial: 019922FA4944F51D48D3B87A9979DFDC4B56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UDCmlphoVt51uCLWrpX-ATE4IK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a31884-2952-4647-815e-e52525db12db/1/UDCmlphoVt51uCLWrpX-ATE4IK8.mft
Manifest number: 106A
Signing time: Sun 07 Sep 2025 07:00:52 +0000
Manifest this update: Sun 07 Sep 2025 07:00:52 +0000
Manifest next update: Mon 08 Sep 2025 07:00:52 +0000
Files and hashes: 1: UDCmlphoVt51uCLWrpX-ATE4IK8.crl (hash: lnyOeWSsxqIAodJ/JpVqemNQbzDnaLfKkj3SPW1F9j4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a31884-2952-4647-815e-e52525db12db/1/UDCmlphoVt51uCLWrpX-ATE4IK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/a31884-2952-4647-815e-e52525db12db/1/UDCmlphoVt51uCLWrpX-ATE4IK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UDCmlphoVt51uCLWrpX-ATE4IK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:49:44:f5:1d:48:d3:b8:7a:99:79:df:dc:4b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5030a696986856de75b822d6ae95fe01313820af
Validity
Not Before: Sep 7 07:00:52 2025 GMT
Not After : Sep 8 07:00:52 2025 GMT
Subject: CN=6aaa2ecd0292b8dda2bd12a1f316bf2b8dc3b1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b1:b2:9c:61:5a:1c:0f:4e:ff:67:6d:27:eb:
ad:22:c1:4c:cc:d2:51:b9:25:2b:cc:af:76:ee:5c:
92:04:7d:16:7a:c6:07:5c:46:dc:c7:d0:d4:7c:02:
38:f5:79:08:4c:10:d3:4e:39:fc:2f:76:9a:03:d3:
5b:df:39:df:c7:78:55:05:1c:2f:33:8b:35:5d:cc:
4d:77:9e:d6:c2:e6:44:df:9c:75:b4:8d:ae:f3:39:
6c:12:cf:79:d7:7a:1f:ff:13:18:3a:f7:aa:4b:aa:
29:72:f9:e6:92:78:98:48:0e:8c:a0:86:c1:de:ef:
84:75:24:ff:b2:25:d5:ae:77:b2:8f:3d:ee:4d:a4:
14:eb:f9:26:3d:39:f4:8d:d9:21:4d:15:7a:d9:d7:
3a:7d:42:a3:c9:8e:39:ac:8c:c8:62:55:4a:c0:31:
b2:da:9c:6b:3a:62:be:be:c0:00:66:7f:d0:37:07:
e8:ca:5c:f9:97:a1:1c:33:a6:60:95:c6:a8:b6:a8:
13:f6:1a:c2:16:90:5c:3c:46:80:12:af:ae:1c:6f:
06:b4:10:cc:78:45:b7:3d:da:f0:fe:97:db:7f:71:
8d:3e:e7:4f:bd:89:28:09:7d:cb:56:2a:8a:85:b3:
b6:55:e7:31:6e:1b:cf:64:b2:6c:f0:50:df:62:59:
47:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AA:2E:CD:02:92:B8:DD:A2:BD:12:A1:F3:16:BF:2B:8D:C3:B1:EB
X509v3 Authority Key Identifier:
keyid:50:30:A6:96:98:68:56:DE:75:B8:22:D6:AE:95:FE:01:31:38:20:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDCmlphoVt51uCLWrpX-ATE4IK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a31884-2952-4647-815e-e52525db12db/1/UDCmlphoVt51uCLWrpX-ATE4IK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a31884-2952-4647-815e-e52525db12db/1/UDCmlphoVt51uCLWrpX-ATE4IK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:fb:50:69:42:1d:9c:32:99:d1:26:87:26:28:2a:c3:73:a7:
5e:9d:04:89:b1:12:2f:a2:a1:46:da:b2:41:69:a3:fd:1d:ab:
54:e9:ad:b1:9e:06:33:75:9a:a9:4f:be:dc:ab:d0:32:40:25:
84:ef:07:ba:4d:01:2e:04:96:10:a5:d7:5b:5d:2b:ab:9b:fa:
74:36:33:72:0e:c7:a4:fe:f5:d2:9d:ce:96:bb:f2:cb:0d:d7:
20:b5:af:3d:6c:85:d6:b0:00:cb:20:90:9d:65:d3:1d:86:f7:
c8:40:06:96:d2:b0:9d:1c:93:b1:f3:3d:f5:c2:51:7d:40:4f:
27:52:6d:87:da:f8:1d:e3:1b:c2:36:3e:df:ce:a6:1a:c9:42:
21:ac:3a:6b:c1:ed:5e:5b:5e:59:a6:87:cc:e7:31:55:3d:ed:
92:25:be:4f:59:38:e3:c9:7e:77:16:16:98:27:09:70:7d:4d:
48:62:f7:17:ad:b2:04:98:de:09:09:05:53:eb:b9:eb:31:8e:
70:0f:d5:44:30:c6:8e:00:44:de:7b:4b:f6:40:d7:3f:c7:ac:
1b:fe:ac:3b:15:06:b3:00:eb:13:6f:bc:e8:8b:d2:12:26:6c:
17:a9:9a:75:8c:38:04:06:69:68:f0:49:2c:4f:ec:8a:e0:9f:
7d:d2:19:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:54:15 2025 by rpki-client