Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
File: UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft (raw, json)
Hash identifier: xNDa1zA3HPGcU49+dqa/VwgfE7X0l4KDOeHuEArM/kg=
Subject key identifier: 6A:D2:96:35:83:C9:9C:E3:21:0F:A0:C5:71:FD:DB:DA:7E:24:F2:19
Authority key identifier: 51:C3:CC:54:41:4F:B4:42:BE:39:D6:E1:A4:AF:72:4C:FF:EE:EE:FF
Certificate issuer: /CN=51c3cc54414fb442be39d6e1a4af724cffeeeeff
Certificate serial: 019A71B8D2BA10AEC6D8A80BD4DA54BCC14D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UcPMVEFPtEK-OdbhpK9yTP_u7v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
Manifest number: 1624
Signing time: Tue 11 Nov 2025 07:02:09 +0000
Manifest this update: Tue 11 Nov 2025 07:02:09 +0000
Manifest next update: Wed 12 Nov 2025 07:02:09 +0000
Files and hashes: 1: UcPMVEFPtEK-OdbhpK9yTP_u7v8.crl (hash: FQjFn69z3A3n8s7iZFbUBH/4gziDgmH3IVqUxkO08q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UcPMVEFPtEK-OdbhpK9yTP_u7v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d2:ba:10:ae:c6:d8:a8:0b:d4:da:54:bc:c1:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51c3cc54414fb442be39d6e1a4af724cffeeeeff
Validity
Not Before: Nov 11 07:02:09 2025 GMT
Not After : Nov 12 07:02:09 2025 GMT
Subject: CN=6ad2963583c99ce3210fa0c571fddbda7e24f219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d5:18:5f:b7:b2:33:89:32:d7:c2:ba:66:e1:
b6:93:84:bb:47:6d:fd:7e:fb:b3:4a:2c:85:e4:96:
c7:ea:82:01:08:e7:40:9d:60:3c:9b:63:96:3c:6c:
45:0a:ea:70:65:9d:9d:1b:b5:3e:18:e4:c6:d9:a4:
06:38:47:45:7d:ed:e9:fa:84:63:0c:52:42:43:c4:
61:a1:57:ba:a1:8a:14:03:a9:9e:b4:f4:e1:17:d9:
3e:12:ae:d0:8d:6c:07:0a:a5:5b:30:67:f6:b8:e3:
6c:6d:5e:29:9c:34:52:3d:9b:d6:da:2e:3f:ab:07:
ee:d8:91:90:4a:c9:28:f1:c0:13:75:25:f8:df:73:
71:08:7e:af:2f:78:06:0d:07:bb:3e:54:b2:6c:fb:
28:cf:d1:a0:09:90:ac:2d:57:77:6a:ab:69:09:15:
ba:21:e6:37:d8:f5:76:2d:c2:46:dd:45:4d:51:0a:
26:3b:bd:c4:5b:8b:b1:72:69:e5:74:33:76:d7:bf:
74:b1:3f:1f:a9:c8:5d:9f:47:c5:00:03:ea:f0:b0:
08:f2:54:d1:a7:2d:70:d4:5c:c9:6b:37:e9:36:86:
02:e1:78:c5:e6:39:82:2e:67:5c:9e:3b:ad:99:4a:
2e:e0:ac:6a:61:35:38:d7:24:1c:37:04:13:be:57:
59:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D2:96:35:83:C9:9C:E3:21:0F:A0:C5:71:FD:DB:DA:7E:24:F2:19
X509v3 Authority Key Identifier:
keyid:51:C3:CC:54:41:4F:B4:42:BE:39:D6:E1:A4:AF:72:4C:FF:EE:EE:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UcPMVEFPtEK-OdbhpK9yTP_u7v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c5:81:98:f0:7a:f9:39:70:a1:a5:5b:1f:2f:0f:ec:fd:eb:
fc:6d:0d:b8:e7:a8:86:b5:4c:5f:42:99:48:c2:6f:bf:d3:00:
77:70:d9:ac:d6:25:be:a6:c7:53:89:dd:4e:b9:98:54:3c:06:
ab:bf:8e:9f:8f:fe:1e:40:03:f6:d9:ad:9a:c3:79:6d:8b:4f:
76:50:74:d5:1b:a0:7a:39:68:60:f9:58:83:0a:b7:6a:72:85:
cb:84:6f:6c:fd:b6:d3:22:d3:cd:bc:94:06:0f:35:21:10:08:
bd:00:7b:eb:bd:26:fa:87:32:49:c5:6d:59:7b:fd:24:e7:d2:
dd:6d:04:c3:f9:d1:1d:4f:6f:c5:b4:44:13:9c:a5:4d:b3:2e:
4f:79:c6:02:58:8e:e3:3d:7c:0b:f6:b6:f1:b8:4c:fc:f6:ff:
df:98:10:cd:f5:ac:f2:03:0e:35:08:2c:41:d7:31:eb:f0:ad:
db:4a:9d:4b:4c:76:eb:99:4f:e4:6e:ce:e1:80:74:c4:5c:08:
63:9b:35:72:36:8d:7e:19:75:3b:75:bc:86:4b:e8:a7:40:51:
d5:8c:96:ce:5e:a5:b6:21:7e:f3:44:24:32:4f:d1:6a:3e:e9:
12:a1:9e:28:bf:b9:8c:57:a8:b0:5f:25:d4:93:dc:05:e9:51:
81:32:2a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:00 2025 by rpki-client