Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
File: uji5p2P2XAJ6o92th8GI2nikvZc.mft (raw, json)
Hash identifier: UUv2JlDDj6Bwa68nS5u9Xxr6xBjq/ATemsG7DliuDq0=
Subject key identifier: 3B:AB:58:F9:5C:FB:28:49:D3:1A:37:09:DF:54:8F:A2:90:BA:D4:FD
Authority key identifier: BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97
Certificate issuer: /CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97
Certificate serial: 019A72264A418DE1D3223E76E346F65046E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 09:01:43 +0000
Manifest this update: Tue 11 Nov 2025 09:01:43 +0000
Manifest next update: Wed 12 Nov 2025 09:01:43 +0000
Files and hashes: 1: uji5p2P2XAJ6o92th8GI2nikvZc.crl (hash: tBLHImFv5wUSpmXAEEGmhA5mIwah9yLjFIwO3Vx+5lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:4a:41:8d:e1:d3:22:3e:76:e3:46:f6:50:46:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97
Validity
Not Before: Nov 11 09:01:43 2025 GMT
Not After : Nov 12 09:01:43 2025 GMT
Subject: CN=3bab58f95cfb2849d31a3709df548fa290bad4fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ef:65:14:7d:e5:e5:88:6c:c0:df:25:e1:24:
0b:3a:ec:88:95:da:bb:f5:a5:01:ca:be:3c:55:82:
17:f2:8a:de:48:78:8c:e3:1b:2f:7d:4f:c3:31:58:
45:bf:31:06:e5:89:53:d6:ec:c6:ef:79:22:74:25:
90:bb:15:b9:69:02:ff:67:fa:10:78:2d:c6:2c:c5:
06:cc:48:9e:a4:31:cf:30:57:c3:3c:fb:f4:a3:66:
d7:d9:89:e7:dc:02:67:df:75:31:ec:2b:ec:4f:88:
d1:e9:80:91:bd:cb:80:4c:7e:58:e8:84:68:2d:15:
78:1e:70:85:3c:41:4f:92:ad:18:3b:08:8d:0e:26:
0b:dd:c3:10:76:e9:39:9d:7b:f3:3b:eb:ac:40:d9:
1c:c5:dd:f6:a4:59:fe:ce:1b:bb:40:64:e6:7c:f6:
5a:42:c2:12:4e:40:32:d8:d4:21:00:bc:76:77:cb:
1b:f6:3d:a3:16:97:fd:e7:17:8b:4c:0f:33:8a:b9:
3e:cd:be:96:e3:5a:8c:82:10:a9:68:96:0d:87:f2:
e7:a9:d9:67:6b:91:7f:89:d8:ed:3e:d7:ed:be:77:
df:de:1e:87:f1:03:32:8b:28:5b:f8:7a:f2:b4:3d:
67:76:7b:8d:74:f8:66:ae:82:61:01:eb:1a:33:77:
ed:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AB:58:F9:5C:FB:28:49:D3:1A:37:09:DF:54:8F:A2:90:BA:D4:FD
X509v3 Authority Key Identifier:
keyid:BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:59:d3:a8:93:98:fb:f0:ec:a9:80:35:25:42:47:cc:36:a5:
fb:0b:17:7d:f6:f1:b0:2f:b9:ba:cd:d3:3a:2a:a5:89:51:fa:
4f:3c:b6:f0:e7:c7:5b:3e:9e:ea:29:f7:5b:52:52:30:4b:da:
6b:d3:36:9f:11:5a:47:17:1d:17:1b:78:3b:71:fb:d0:40:e8:
b7:2a:30:e7:c4:6f:0a:6a:f7:a4:f4:f7:1d:b3:c5:1a:c0:2f:
a3:8a:49:df:46:33:20:55:0e:54:da:37:e5:68:ca:92:23:0c:
c8:46:2b:e2:70:b3:77:12:5f:6e:35:14:e9:a7:ec:64:ee:c6:
e4:e9:e2:4e:a8:a3:80:ea:b5:a6:16:d8:7d:52:80:ad:78:cb:
84:2c:e3:63:ec:7c:7b:94:9d:a0:8d:e2:1d:aa:da:62:e3:0d:
45:14:ac:2b:37:c0:7e:a7:75:a4:68:bf:65:08:e9:ea:38:f5:
28:5c:03:a3:bc:6d:1b:91:90:43:67:10:1b:f7:88:74:b2:f0:
63:a3:f9:23:28:a9:4d:9f:09:0a:22:0d:11:8e:c4:c6:41:28:
4d:dd:1f:1e:d9:f8:33:ab:8d:8e:52:98:67:6f:67:f3:28:eb:
89:00:f2:76:88:8b:95:d6:5c:70:04:e0:c8:14:aa:3d:de:65:
0b:4a:9b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:19 2025 by rpki-client