Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
File: ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft (raw, json)
Hash identifier: VzK5TyTx2r3n0Ba/o6uOSS+L2VbOgx42pIUwWsI4CNM=
Subject key identifier: D3:56:CB:83:37:97:44:E5:15:98:00:9B:23:D6:85:19:90:C5:01:06
Authority key identifier: BA:58:27:55:72:43:48:93:B9:CB:D1:4E:4A:DE:70:89:29:E4:67:F8
Certificate issuer: /CN=ba58275572434893b9cbd14e4ade708929e467f8
Certificate serial: 019A71B8BA03C84FB6B7F784A033527E14C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
Manifest number: 12FA
Signing time: Tue 11 Nov 2025 07:02:02 +0000
Manifest this update: Tue 11 Nov 2025 07:02:02 +0000
Manifest next update: Wed 12 Nov 2025 07:02:02 +0000
Files and hashes: 1: ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl (hash: gy/hUPEoLov4Awc3NIGruGbvc3eLR4E703Liu6t2Yak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ba:03:c8:4f:b6:b7:f7:84:a0:33:52:7e:14:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba58275572434893b9cbd14e4ade708929e467f8
Validity
Not Before: Nov 11 07:02:02 2025 GMT
Not After : Nov 12 07:02:02 2025 GMT
Subject: CN=d356cb83379744e51598009b23d6851990c50106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d7:88:f1:55:d3:66:c3:72:4d:e5:4a:68:4b:
2c:cb:2f:f0:88:9c:34:62:c5:91:bd:eb:b3:ca:4d:
6d:a9:df:3d:24:64:b5:55:62:2c:10:cf:45:c4:38:
ae:38:c0:44:35:ad:fd:e1:fa:67:11:e2:df:6f:e4:
87:ef:7d:0b:ef:51:51:5f:58:e4:68:ba:0e:15:cc:
c8:bc:21:c2:5c:8e:5f:d9:f8:26:b0:5c:03:e3:80:
f9:0e:c4:f7:4d:18:d1:1c:da:3a:ac:b4:a6:28:0d:
6a:25:f7:95:b2:86:5c:82:40:71:e1:2c:08:1b:d0:
a2:b2:fe:dd:d2:e0:c5:33:94:f9:e7:b9:15:53:c4:
24:f4:b4:59:85:f7:40:f6:a3:07:4d:ec:c8:83:6c:
bb:8c:9c:72:b0:a5:0d:db:84:71:45:13:58:3f:c3:
10:43:f7:1c:8a:2b:1a:4a:ec:ca:0f:f8:4b:f3:69:
15:cb:b7:f4:81:66:ba:0a:0b:e8:72:72:ae:61:9a:
ca:06:01:3e:3e:d9:68:19:4f:3d:c5:22:e3:eb:b9:
df:9c:f1:3b:f1:87:19:a8:1f:5d:51:e8:f4:38:0c:
9c:29:71:80:70:f8:e2:44:37:a1:21:fc:6b:36:f7:
bf:e8:c9:b0:df:65:f2:9a:e9:a5:81:2c:4e:60:f7:
d9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:56:CB:83:37:97:44:E5:15:98:00:9B:23:D6:85:19:90:C5:01:06
X509v3 Authority Key Identifier:
keyid:BA:58:27:55:72:43:48:93:B9:CB:D1:4E:4A:DE:70:89:29:E4:67:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b0:c4:8b:7f:3f:31:3f:62:9f:cd:72:9c:1d:d1:d6:33:f5:
a5:11:82:56:c5:e9:5a:52:e2:5c:0e:1c:b9:0f:1e:f5:a0:b0:
65:7f:d4:8a:27:4c:d6:22:4c:c5:59:ee:36:93:8e:e2:b3:4d:
cf:c3:39:05:67:9b:4b:79:9d:7d:9b:01:dd:c4:94:48:9f:27:
41:51:01:e9:85:40:5d:6f:c4:75:c3:02:eb:31:0d:16:bd:e9:
8b:07:1c:80:82:53:0f:b7:b1:45:2b:06:01:0f:5e:0f:d7:77:
7d:95:bf:f2:6e:1c:dc:2c:5e:bc:74:74:fc:1e:8d:0c:b5:cf:
da:c8:1e:90:db:7d:c7:ff:af:3d:a7:7d:a6:48:a3:b7:aa:81:
1b:d4:52:45:5b:33:8d:d4:c4:21:98:61:2c:15:d8:23:a5:fd:
58:58:09:c9:9d:4d:7c:2c:6e:b6:e7:07:4c:26:9c:78:7e:a8:
6f:f1:ae:59:51:0b:b3:ae:41:56:f3:ca:3f:bd:d6:ab:17:df:
28:39:d9:05:a1:fa:f1:aa:be:24:ef:ab:66:e4:57:ba:06:9f:
42:8c:a6:ee:c1:56:4d:4d:c7:4b:40:d4:1a:2f:ec:76:3d:ff:
b2:01:ea:e9:15:0e:e8:58:42:03:74:77:e2:63:fc:1d:ba:42:
eb:f7:5c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:14 2025 by rpki-client