Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft
File: rUskfyJRG39TOwAtmfvsK1WbbC8.mft (raw, json)
Hash identifier: xni12VePh1ARWb5sPtgrXcziPjk3cEHg06Q0JNIfCOY=
Subject key identifier: 61:41:BB:48:66:25:FD:FE:43:11:57:F0:67:70:61:54:31:4B:98:68
Authority key identifier: AD:4B:24:7F:22:51:1B:7F:53:3B:00:2D:99:FB:EC:2B:55:9B:6C:2F
Certificate issuer: /CN=ad4b247f22511b7f533b002d99fbec2b559b6c2f
Certificate serial: 019A73380113F2C39CAB95E8EEC63D1EF2D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUskfyJRG39TOwAtmfvsK1WbbC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft
Manifest number: 05A9
Signing time: Tue 11 Nov 2025 14:00:41 +0000
Manifest this update: Tue 11 Nov 2025 14:00:41 +0000
Manifest next update: Wed 12 Nov 2025 14:00:41 +0000
Files and hashes: 1: rUskfyJRG39TOwAtmfvsK1WbbC8.crl (hash: GeTAOraQQW9LLKkjZRsv3FH7v1Uiw5nSxO2CEULDGUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUskfyJRG39TOwAtmfvsK1WbbC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:01:13:f2:c3:9c:ab:95:e8:ee:c6:3d:1e:f2:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4b247f22511b7f533b002d99fbec2b559b6c2f
Validity
Not Before: Nov 11 14:00:41 2025 GMT
Not After : Nov 12 14:00:41 2025 GMT
Subject: CN=6141bb486625fdfe431157f067706154314b9868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:81:9b:2a:56:13:fc:02:63:eb:53:d5:84:df:
85:cb:1d:6f:41:de:02:3a:7a:7f:0a:2a:a7:97:1d:
d8:ce:78:48:9c:78:77:9f:a0:62:ce:a1:41:79:93:
1a:a5:e8:5e:f3:eb:34:e6:25:c7:25:5e:3e:32:a7:
ec:23:b0:ea:01:23:46:4a:1c:b2:ba:52:8a:13:f1:
7a:68:c1:d8:4c:26:3a:d9:2f:19:18:ae:14:cc:8d:
ee:e6:f7:86:e1:bf:8a:89:c9:2c:8d:46:5a:30:70:
e5:d0:21:83:04:8c:b6:1f:3c:21:e7:d6:af:4b:83:
1e:1d:0b:c4:d5:12:52:30:00:51:38:5a:0c:ea:12:
4e:a6:a7:08:87:9f:fe:c7:1a:4b:be:7c:fb:86:ca:
54:6b:7d:8c:8f:b1:d7:2d:b1:83:e4:02:2d:3a:d0:
68:e1:3f:9b:ec:fa:eb:02:88:93:b5:69:01:08:6e:
e5:ad:08:42:ee:02:dc:60:62:49:15:6a:1e:cf:4e:
53:f5:10:ce:3c:d1:6e:d7:82:08:5c:69:66:7d:3d:
98:23:1f:18:44:76:92:51:93:2d:83:23:49:76:41:
f0:28:e3:97:a6:ba:90:2d:4e:39:c0:83:61:26:bd:
d9:58:dd:c8:a1:65:06:75:e9:18:06:96:f4:89:87:
2e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:41:BB:48:66:25:FD:FE:43:11:57:F0:67:70:61:54:31:4B:98:68
X509v3 Authority Key Identifier:
keyid:AD:4B:24:7F:22:51:1B:7F:53:3B:00:2D:99:FB:EC:2B:55:9B:6C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUskfyJRG39TOwAtmfvsK1WbbC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d0:64:e2:0b:0c:41:33:74:0f:cb:df:52:d3:a9:d6:f8:4a:
9c:1b:2a:50:b0:ab:89:29:97:4b:70:f3:90:61:75:e8:83:86:
60:7d:1c:6b:e9:c1:38:76:cf:54:84:96:ef:31:d5:0a:21:11:
7d:9d:cd:8b:a3:2c:de:2c:4d:86:a5:a6:e8:12:30:1c:25:69:
51:e1:85:cc:09:4f:ca:a2:80:19:03:e9:2b:7f:f8:c6:e0:5c:
19:28:eb:e1:bd:bb:5b:45:af:ec:e7:f9:6b:63:37:f4:20:a2:
d0:e9:0c:1a:87:79:93:5a:64:46:a2:a8:25:e2:24:b0:27:ff:
2a:fb:92:20:71:77:70:5a:3c:af:1e:45:b8:00:c7:87:c1:a1:
53:7b:50:9b:5a:9d:66:52:93:18:23:27:ac:11:d4:94:f4:06:
b9:35:81:b4:95:94:61:78:cb:40:6c:f1:30:2f:33:f9:ee:45:
1a:d5:88:30:10:00:df:19:71:41:ec:29:94:62:b2:17:2c:99:
a8:dd:33:13:d8:ad:28:10:e9:82:2d:14:47:52:10:48:d6:1c:
bf:42:e0:90:f0:87:d1:c4:42:a3:32:fa:da:22:c2:7c:73:93:
52:2b:31:61:a8:be:2f:c1:06:ca:79:dc:9a:0c:23:56:4f:97:
f6:a6:25:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:34 2025 by rpki-client