Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
File: Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft (raw, json)
Hash identifier: U3X2ql4eNp4Oqu64P33XTlf89Vx5BYMtP43xIt/t6Qg=
Subject key identifier: 84:CF:F9:03:96:29:85:9E:C2:EC:6D:01:0E:BA:60:1B:EC:7E:A2:FC
Authority key identifier: 53:1E:DB:25:54:D2:5D:1C:10:D8:71:4E:81:D3:6C:C2:95:D9:6B:F9
Certificate issuer: /CN=531edb2554d25d1c10d8714e81d36cc295d96bf9
Certificate serial: 019A71B91ED1F1DD7E21B023F19BD8748128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
Manifest number: 0C2B
Signing time: Tue 11 Nov 2025 07:02:28 +0000
Manifest this update: Tue 11 Nov 2025 07:02:28 +0000
Manifest next update: Wed 12 Nov 2025 07:02:28 +0000
Files and hashes: 1: Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl (hash: dA2whXr7eVNFiekNOgwj4eBGe2aJDRltA5u585bXiiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:1e:d1:f1:dd:7e:21:b0:23:f1:9b:d8:74:81:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=531edb2554d25d1c10d8714e81d36cc295d96bf9
Validity
Not Before: Nov 11 07:02:28 2025 GMT
Not After : Nov 12 07:02:28 2025 GMT
Subject: CN=84cff9039629859ec2ec6d010eba601bec7ea2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fa:03:51:9c:f3:ab:45:6c:cc:c7:f6:f6:0d:
9d:b2:0a:39:ad:3f:65:4f:f4:0b:8e:cc:1a:49:3b:
78:cf:02:b1:89:1d:92:d0:f8:74:64:6c:7d:0e:e4:
d0:d4:9a:68:b0:a5:5a:ef:66:62:3d:5d:d7:7d:34:
0d:35:58:47:5a:24:70:5a:d3:b3:8b:58:71:f9:e6:
b3:8f:3b:a6:77:7e:9e:bb:ed:7f:e7:13:02:66:b2:
4b:d8:31:8e:0a:8c:13:c3:5c:db:7d:e3:94:6d:0e:
ab:0f:1e:ae:95:4f:4b:9b:d7:19:ac:ea:a8:0f:0d:
ca:12:e2:bf:3d:d6:54:d3:d6:ac:3c:ef:67:8f:8b:
41:75:36:2b:02:93:fa:36:c1:6d:ed:d8:88:74:cb:
3c:3a:43:19:2e:85:f9:46:da:67:cd:41:35:2d:f4:
b5:24:df:78:c1:cd:13:0a:57:04:de:4d:53:f4:fe:
54:13:98:05:48:88:a9:1a:4c:76:76:11:16:19:df:
59:56:75:90:5c:2f:0b:b6:2b:c7:b3:e9:e2:10:08:
3b:d5:4a:18:bc:3d:74:9c:4c:01:fd:e9:b6:b4:8d:
5a:31:b7:bc:93:9a:77:55:75:5e:03:3a:b4:bf:96:
26:16:82:bc:47:6b:e4:89:95:00:80:fa:03:5a:b2:
35:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CF:F9:03:96:29:85:9E:C2:EC:6D:01:0E:BA:60:1B:EC:7E:A2:FC
X509v3 Authority Key Identifier:
keyid:53:1E:DB:25:54:D2:5D:1C:10:D8:71:4E:81:D3:6C:C2:95:D9:6B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f6:b8:42:37:0d:56:6e:40:15:ae:de:a6:0f:65:40:fe:b1:
37:fb:e3:8a:6e:90:f2:09:87:0d:70:ec:89:00:3e:5a:d1:e0:
e4:17:e4:3d:87:7d:82:c1:7f:3a:0a:35:47:60:e6:fa:99:18:
b1:40:c0:98:e7:39:96:e8:0d:48:93:e0:f6:87:f1:ba:ee:26:
d5:81:7f:d4:f8:8a:c6:1a:86:61:7a:b9:8c:08:b4:c6:07:3f:
17:af:89:c2:9c:c7:00:f1:c8:99:40:f6:e4:b8:e2:28:d4:6f:
3f:da:ec:b3:52:2a:9f:35:a2:b8:6d:ff:2a:0d:2b:d2:0d:92:
73:72:cb:9f:14:fa:9c:3c:62:9e:16:c1:6d:96:84:22:73:47:
3c:08:6e:cd:f0:fb:1d:fd:2b:ce:50:b9:56:9a:c6:82:45:dd:
71:77:b6:69:68:ef:85:ba:41:31:ef:30:b3:8c:0f:ea:ec:a5:
be:29:79:34:88:8b:db:7c:6d:5f:c9:fe:fe:10:ca:32:01:cd:
3b:1d:3f:81:cd:23:19:26:85:81:4d:ab:e3:63:cb:76:f5:af:
07:1b:3f:59:55:b1:0b:06:b1:e5:a9:be:f3:0c:78:00:a6:c5:
da:17:64:81:74:57:4a:62:00:ae:7b:74:18:41:4a:30:ed:7d:
5b:59:13:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:46 2025 by rpki-client