Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
File: UfKdGEvMUP5lTd70AV3hfSRv0qM.mft (raw, json)
Hash identifier: 0qJ6JFs3M2VZ0XIEBgY+LbZLpDHtTadsJYxDpm+n7oQ=
Subject key identifier: A7:67:A3:AB:5C:24:71:FD:5B:70:36:E6:EE:92:34:42:98:C2:23:B1
Authority key identifier: 51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3
Certificate issuer: /CN=51f29d184bcc50fe654ddef4015de17d246fd2a3
Certificate serial: 019A7149FB3E0D845B137645770CF69D5D50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
Manifest number: 0113
Signing time: Tue 11 Nov 2025 05:01:05 +0000
Manifest this update: Tue 11 Nov 2025 05:01:05 +0000
Manifest next update: Wed 12 Nov 2025 05:01:05 +0000
Files and hashes: 1: UfKdGEvMUP5lTd70AV3hfSRv0qM.crl (hash: n1I7Wx60x1gO8TBJNltk8xufxEpWICxXAFFDXSyAY4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:fb:3e:0d:84:5b:13:76:45:77:0c:f6:9d:5d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51f29d184bcc50fe654ddef4015de17d246fd2a3
Validity
Not Before: Nov 11 05:01:05 2025 GMT
Not After : Nov 12 05:01:05 2025 GMT
Subject: CN=a767a3ab5c2471fd5b7036e6ee92344298c223b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5a:ce:3e:43:ac:07:93:25:c6:7e:ab:bf:31:
70:01:6e:42:cc:f0:c2:81:1d:a2:89:e0:e8:0c:51:
b1:d2:29:2d:d4:aa:1b:a8:19:81:a3:cc:a9:c1:4b:
c0:81:15:ce:d5:a3:63:90:0e:27:05:47:40:47:e0:
26:79:15:b4:36:85:b9:ca:4d:17:93:18:f7:b5:1a:
32:2c:82:6e:9e:e0:ee:41:26:f9:1a:3a:f6:a6:9b:
e0:a5:77:5f:45:c8:84:b4:35:fb:4c:d4:58:03:ba:
ef:51:fc:77:0a:d9:7a:d0:67:54:d0:6b:4b:27:c5:
6b:ed:23:b5:fe:43:42:8d:e1:74:08:09:a8:a6:e3:
93:6a:ba:7f:12:52:81:67:27:86:7e:6c:2c:16:db:
81:f0:9d:96:8d:d8:cf:56:08:91:b1:f7:c8:4a:e4:
91:05:88:24:23:96:e7:66:20:b0:71:d5:aa:ac:d2:
05:66:9d:76:30:13:b1:38:74:7a:59:14:a5:94:ab:
a2:ea:bb:61:f2:8a:00:a0:11:f2:48:f1:05:16:18:
57:cd:d9:1f:6e:a3:4d:5e:c2:52:07:50:b0:aa:50:
ab:27:5a:46:18:7b:0a:5f:70:54:0a:6c:75:97:bc:
93:92:a6:d7:d5:c8:ec:9b:37:1f:42:33:32:5e:d6:
2a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:67:A3:AB:5C:24:71:FD:5B:70:36:E6:EE:92:34:42:98:C2:23:B1
X509v3 Authority Key Identifier:
keyid:51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:17:3b:89:32:83:73:9a:61:d5:29:19:53:17:5c:4e:0f:a6:
28:72:ec:1e:02:8e:80:79:8f:80:3f:50:b8:33:20:92:b4:90:
03:7b:5b:11:47:1b:0d:6b:0f:45:90:c9:aa:84:eb:4b:c2:6b:
1f:28:9f:20:bd:6d:8b:b0:76:e1:93:68:8c:cf:bf:ba:bb:f9:
25:86:7c:88:d9:9b:16:78:23:18:59:b0:fc:86:21:2b:79:a3:
b1:fc:7b:36:66:3e:cd:1c:68:a9:08:c8:9c:06:6f:d7:ca:03:
2f:74:36:f4:24:45:83:f8:71:f6:dd:1f:fa:67:d8:bd:f1:aa:
45:9c:ce:2c:af:21:6f:df:f9:9a:25:b8:78:d9:3f:c4:89:52:
26:97:a5:a4:b6:5c:a9:0f:f9:1d:1d:3c:82:c9:4d:9d:91:67:
56:92:04:24:a9:12:cd:79:7a:bf:18:47:ce:04:69:07:5a:6b:
54:b6:60:d3:58:42:fe:da:61:0b:10:ec:ec:b5:9e:c9:28:88:
e7:8f:c0:94:4e:e0:6c:7a:b9:0d:49:00:1c:82:f8:ca:96:e8:
e5:47:28:4b:64:d2:92:7c:70:53:43:0f:f0:5a:ac:d1:71:45:
8c:cc:b4:52:ef:a9:69:ba:c2:41:df:35:61:0a:0c:43:05:76:
0e:4b:78:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:02 2025 by rpki-client