Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
File: uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft (raw, json)
Hash identifier: u8MQhcU1SPcMiMO2ghxmdJx9uhRSISfOxqMsRaRQxZ4=
Subject key identifier: 3C:B8:B9:66:7F:85:8B:34:E1:91:66:15:E7:58:7B:D2:48:B0:BF:B6
Authority key identifier: B8:4B:63:05:86:58:A5:9E:CB:BF:44:39:5B:F1:6F:78:0D:C9:29:CC
Certificate issuer: /CN=b84b63058658a59ecbbf44395bf16f780dc929cc
Certificate serial: 019A7225F8DBEFA3AABA120BF4506EFF9D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 09:01:22 +0000
Manifest this update: Tue 11 Nov 2025 09:01:22 +0000
Manifest next update: Wed 12 Nov 2025 09:01:22 +0000
Files and hashes: 1: uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl (hash: JpkDAsON4W62lvm9e+2TLjNE2mg8ws4NEI2h2MSWWnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f8:db:ef:a3:aa:ba:12:0b:f4:50:6e:ff:9d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b84b63058658a59ecbbf44395bf16f780dc929cc
Validity
Not Before: Nov 11 09:01:22 2025 GMT
Not After : Nov 12 09:01:22 2025 GMT
Subject: CN=3cb8b9667f858b34e1916615e7587bd248b0bfb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:49:64:c3:57:a6:4b:7d:b6:71:b8:0d:76:37:
2f:31:f4:df:28:4f:7b:32:13:d0:ad:02:2c:af:d4:
f1:d6:33:6a:c2:81:b7:97:3a:9e:24:9d:32:e9:73:
99:98:bb:6a:4f:6e:bd:bb:47:df:83:be:da:54:5e:
d4:4e:67:96:7c:3c:6e:14:7e:69:61:a7:58:67:20:
f6:4f:64:3b:d8:ce:db:c8:8e:50:c0:37:f7:cf:09:
23:9f:ea:21:cf:86:48:a2:75:e2:c4:75:f4:57:00:
47:03:74:5c:be:e2:d6:3a:0a:ab:f1:a9:4f:fa:c5:
36:3c:0a:6d:3a:68:f6:a9:2f:05:c6:25:7d:bf:39:
b1:ef:c0:30:e1:d6:36:34:62:8b:f4:c3:55:6f:78:
64:3c:ca:94:79:f2:0b:58:29:00:29:04:5d:5e:2f:
d2:cb:df:6c:e9:36:33:ba:a5:b9:84:98:72:53:20:
4d:f8:d5:76:f3:67:3a:c2:b5:bf:bf:eb:6e:02:64:
e2:07:d5:5f:e5:79:c5:3a:d3:99:b1:dd:d6:d2:d1:
00:bc:5a:1f:b3:41:cc:ec:b8:d0:6b:73:72:b0:50:
56:dd:6c:52:08:5d:1a:ed:ef:2a:5e:d1:02:ea:95:
37:b1:9d:8c:6d:51:1b:f0:fb:76:9e:f9:f5:53:15:
38:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B8:B9:66:7F:85:8B:34:E1:91:66:15:E7:58:7B:D2:48:B0:BF:B6
X509v3 Authority Key Identifier:
keyid:B8:4B:63:05:86:58:A5:9E:CB:BF:44:39:5B:F1:6F:78:0D:C9:29:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b8:1a:b3:e9:82:8a:87:7d:98:2c:71:7d:7f:b2:65:ef:49:
78:a6:21:2e:0b:b3:d7:df:6d:06:ad:b6:68:8e:47:84:f8:b1:
be:57:8f:3f:0d:60:e8:b4:c1:b8:1f:17:65:27:7c:6d:64:81:
bb:d2:62:cf:e9:c3:87:7c:92:58:37:6c:d2:56:1a:fb:cd:07:
9a:9d:1f:c6:9c:94:ad:38:fb:b2:7f:e2:e7:80:a0:4e:74:29:
2e:57:05:c0:07:1f:99:1e:a4:e6:0f:9f:23:e1:c7:a7:b5:79:
c8:57:83:c9:ce:05:f6:83:2c:f8:99:1e:74:53:1e:ac:d2:31:
92:93:3c:17:67:84:51:f5:f0:53:7d:e6:7f:2f:ad:36:73:45:
00:7c:2c:9f:a8:e5:03:ef:08:4f:46:a4:39:fb:a5:48:cd:8b:
51:c5:1c:43:ab:5e:99:e9:55:63:97:33:d0:2f:cc:e4:3b:9f:
09:2e:e8:d2:5f:93:89:57:10:b3:7d:c6:1f:30:b8:77:2c:92:
3d:09:fe:2b:77:ba:97:d3:eb:d8:65:3b:06:2f:3a:60:d5:d3:
b4:b8:92:d3:3c:bd:f6:af:fe:16:9f:d4:7b:47:4a:9e:d5:11:
c9:91:e1:d5:9d:a0:b0:1f:cb:29:4f:68:6b:a4:4f:63:39:36:
45:74:a2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:31 2025 by rpki-client