Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
File: ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft (raw, json)
Hash identifier: qXwRYPvi11hoiWuhkvvpTnNqpUo3ubx6yGeh7sFdauI=
Subject key identifier: B2:F2:AA:B8:49:75:A3:46:F4:7A:7B:CD:DE:85:3A:90:71:30:58:B2
Authority key identifier: B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2
Certificate issuer: /CN=b9aefe976787c2878e269d807cab98ad736d61e2
Certificate serial: 019A71EE7994D7026C4804C4B7418CF7EBFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
Manifest number: 1498
Signing time: Tue 11 Nov 2025 08:00:45 +0000
Manifest this update: Tue 11 Nov 2025 08:00:45 +0000
Manifest next update: Wed 12 Nov 2025 08:00:45 +0000
Files and hashes: 1: ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl (hash: IcfmzYqvfJZWlo/Ds7XFZ8d9ykWqwJ3DsXuFqRotro8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:79:94:d7:02:6c:48:04:c4:b7:41:8c:f7:eb:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9aefe976787c2878e269d807cab98ad736d61e2
Validity
Not Before: Nov 11 08:00:45 2025 GMT
Not After : Nov 12 08:00:45 2025 GMT
Subject: CN=b2f2aab84975a346f47a7bcdde853a90713058b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fa:08:9f:82:cd:59:7e:fa:73:64:d3:3a:ee:
c4:c3:bc:07:e0:5e:74:07:9a:39:87:fe:c9:d6:e3:
1f:07:32:f5:f4:d8:78:4e:5b:84:bf:92:c9:cf:e1:
25:12:bf:bb:b7:57:ec:97:27:07:c4:f9:e6:c2:53:
36:e0:c3:5b:ac:bf:f4:c2:33:c6:9e:76:31:a8:83:
55:e4:10:99:7d:53:95:2c:1c:eb:f0:29:2a:9f:46:
e0:9f:1f:9a:7c:82:f1:08:68:c6:7c:58:ad:33:c8:
8d:9a:8f:27:e2:7d:d1:e8:c5:21:5e:3f:79:b1:63:
7a:c5:00:18:dc:8b:9f:8b:d4:2b:90:d2:cd:4b:6d:
77:32:62:5d:86:eb:59:85:f0:1a:30:30:19:9d:3d:
1e:f4:66:42:85:02:ef:27:b5:d7:eb:1f:d7:24:44:
fd:c1:5f:85:ec:9d:44:9f:21:7f:2e:02:12:d6:17:
af:12:93:61:89:55:e9:13:ce:44:6a:75:42:14:63:
85:26:4c:ca:22:98:90:ed:0e:66:e9:99:9f:ae:49:
87:58:5a:51:de:ea:14:13:8a:a7:3e:fb:aa:b7:60:
1d:da:f3:b1:dd:73:c7:6f:ab:b1:f0:0b:cb:c6:c1:
79:56:ae:62:ed:6d:38:5d:6e:4d:bb:51:13:e1:96:
56:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F2:AA:B8:49:75:A3:46:F4:7A:7B:CD:DE:85:3A:90:71:30:58:B2
X509v3 Authority Key Identifier:
keyid:B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:09:4a:09:7c:4a:e6:7d:4b:83:7b:4e:3d:48:90:b3:25:28:
96:c7:45:95:4b:c7:2b:65:cc:88:2b:9d:d6:9d:8e:8c:e8:56:
e5:b1:07:c7:74:bc:39:2c:39:ac:5c:79:ad:a6:4f:ab:5f:50:
4c:8f:90:68:c8:da:d0:37:82:27:1e:08:2b:92:f5:8f:30:65:
68:6c:eb:96:af:2a:2e:42:15:f8:8e:ba:70:c3:af:4e:90:ec:
30:86:2f:d4:4d:f2:0d:19:22:21:d6:70:50:e0:b4:fc:0b:5a:
88:85:42:1e:48:b0:d6:7d:1b:8f:ca:28:1e:1d:57:c5:26:29:
70:4b:3b:a0:ee:3b:d9:b7:02:92:eb:14:b8:4d:5a:b1:dc:42:
f7:bc:d7:1b:f9:11:12:cc:a2:a7:81:c6:9a:d1:31:57:fb:de:
f7:57:38:b2:77:c8:eb:81:04:ba:0c:fb:64:8e:9b:13:c6:69:
43:86:25:1e:a5:c0:2d:ad:08:a0:19:1f:98:da:aa:e7:03:7e:
f9:c6:a2:aa:9d:ad:f6:b7:2d:14:16:1b:0a:e2:05:75:23:6c:
d1:f6:c4:0d:d0:09:42:cd:7a:b2:8d:c1:a3:7e:a3:d4:af:5e:
c7:c2:4a:82:0d:6b:cf:d4:23:8b:5c:46:7c:09:a1:8f:b5:03:
fd:bc:04:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:31 2025 by rpki-client