Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
File: i_UbRkYUeZl2V31e96gHjqgMF0M.mft (raw, json)
Hash identifier: 4zzrgPZlFx804Ljps3o7ZiCUV8yK7YrAT6A1WWEJI8I=
Subject key identifier: F5:19:AE:38:21:9D:DF:C6:03:25:84:1E:A8:9A:DD:90:E4:19:A6:F8
Authority key identifier: 8B:F5:1B:46:46:14:79:99:76:57:7D:5E:F7:A8:07:8E:A8:0C:17:43
Certificate issuer: /CN=8bf51b464614799976577d5ef7a8078ea80c1743
Certificate serial: 019A725CCC4DE621B3317746A4B0F62814DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
Manifest number: 060C
Signing time: Tue 11 Nov 2025 10:01:15 +0000
Manifest this update: Tue 11 Nov 2025 10:01:15 +0000
Manifest next update: Wed 12 Nov 2025 10:01:15 +0000
Files and hashes: 1: i_UbRkYUeZl2V31e96gHjqgMF0M.crl (hash: us8cvS6iuO5+4H0zewKZrHyDUCj8qaBU26+qD3FJXgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:cc:4d:e6:21:b3:31:77:46:a4:b0:f6:28:14:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bf51b464614799976577d5ef7a8078ea80c1743
Validity
Not Before: Nov 11 10:01:15 2025 GMT
Not After : Nov 12 10:01:15 2025 GMT
Subject: CN=f519ae38219ddfc60325841ea89add90e419a6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ae:f9:16:23:ce:4e:e4:72:bc:47:df:1a:e4:
86:34:03:8c:90:b1:6a:a7:15:f7:a9:b3:8c:4f:be:
9e:ae:ce:63:47:19:26:27:4e:c2:68:59:27:1d:e3:
b3:ea:83:60:1b:b1:39:f6:fc:fc:93:ef:46:ae:60:
61:01:f8:77:ea:50:44:c4:b6:d6:6b:df:4a:40:50:
9b:ec:57:49:03:3f:1a:99:d6:b0:1c:04:8b:23:78:
69:40:3c:05:e9:91:fb:45:91:c9:d8:f2:6d:e7:2b:
88:2a:eb:a2:d9:19:21:ea:48:ec:06:29:fc:24:ff:
12:72:0f:35:23:d3:18:0e:72:30:40:9a:78:ee:d3:
c2:89:8c:88:df:66:cc:c0:d5:dd:99:2c:ac:88:99:
2a:89:b6:cd:89:df:25:26:96:8f:ec:b7:4d:0e:e7:
be:f8:74:be:62:99:eb:d5:b1:18:90:46:8e:50:16:
a0:85:91:97:4e:5a:20:1a:02:82:bb:ae:69:ee:16:
cc:5f:f7:6f:7b:e1:7d:fe:9f:bb:6b:a7:7f:f1:1b:
cb:b6:8e:ce:06:bc:dc:80:36:6b:53:16:88:56:55:
3d:ef:7a:f6:9d:d6:2c:7c:e2:f4:2b:a1:db:76:54:
6b:d8:b2:08:bf:75:af:8b:de:3b:e3:2b:b2:fd:0f:
46:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:19:AE:38:21:9D:DF:C6:03:25:84:1E:A8:9A:DD:90:E4:19:A6:F8
X509v3 Authority Key Identifier:
keyid:8B:F5:1B:46:46:14:79:99:76:57:7D:5E:F7:A8:07:8E:A8:0C:17:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:54:7a:40:cc:e6:e6:09:bf:ea:4d:fd:51:da:87:f8:5a:6f:
35:cc:10:38:5f:db:d9:9a:54:a6:d3:0c:f0:b6:13:e7:5a:ae:
71:90:e0:ea:6a:35:e5:ed:31:2b:5d:b1:14:81:14:dd:0b:b0:
a6:6a:58:39:5b:19:b8:f4:3a:11:7c:0f:17:1c:c5:b1:75:df:
e9:95:ef:5a:53:74:74:49:cf:a4:f3:ad:db:b6:cc:83:19:fc:
37:f6:f3:f9:46:a6:5a:4d:54:1e:c4:64:73:04:51:12:8b:c2:
1c:b7:d7:99:3b:6a:fc:39:8f:6a:18:79:12:af:18:d2:b4:da:
9d:17:a1:0b:37:ea:41:d3:c0:5e:8f:59:03:09:14:5a:8f:b7:
4b:00:72:fc:c8:5a:19:ff:c5:07:74:5e:4e:d2:61:25:35:57:
b5:f0:3d:41:34:e8:23:58:b2:ec:bc:c8:94:ca:51:11:e3:e7:
de:14:e7:e9:35:50:ae:eb:ae:ce:8d:22:0e:48:e6:2c:57:78:
27:8f:ec:fe:c0:ae:71:54:3a:4c:ec:0a:5b:2c:c8:9f:4a:e0:
65:b5:6b:74:aa:d0:ed:81:23:62:0b:57:d4:49:7e:25:77:89:
f6:fa:fc:64:d9:b7:4b:5c:99:eb:33:ce:ea:57:02:1d:35:92:
9b:2e:dd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:01 2025 by rpki-client