Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
File: UlkVtMckB6-3lB5b4pSscTOxB7M.mft (raw, json)
Hash identifier: tYKUWz4ioLohlyfm4GCV01E9ItMkVce7WIffmbsFc7w=
Subject key identifier: 78:0B:89:57:09:C0:14:53:E2:97:9C:4A:AF:B0:C6:72:E0:2A:03:99
Authority key identifier: 52:59:15:B4:C7:24:07:AF:B7:94:1E:5B:E2:94:AC:71:33:B1:07:B3
Certificate issuer: /CN=525915b4c72407afb7941e5be294ac7133b107b3
Certificate serial: 019A71EEED6747268538ECB4A45B964E23B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
Manifest number: 1410
Signing time: Tue 11 Nov 2025 08:01:14 +0000
Manifest this update: Tue 11 Nov 2025 08:01:14 +0000
Manifest next update: Wed 12 Nov 2025 08:01:14 +0000
Files and hashes: 1: UlkVtMckB6-3lB5b4pSscTOxB7M.crl (hash: FZ4vb1mhcBnj8KAKPZivf/OgAOn/wQ7XaLMUq1H0PPM=)
2: ci7D-gavzkR5lRu-Y8rw6gTVt8k.roa (hash: e5+WwJtdUyHAODWheWNyNbbf9/GmybmxPgwjpdHpaL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ed:67:47:26:85:38:ec:b4:a4:5b:96:4e:23:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525915b4c72407afb7941e5be294ac7133b107b3
Validity
Not Before: Nov 11 08:01:14 2025 GMT
Not After : Nov 12 08:01:14 2025 GMT
Subject: CN=780b895709c01453e2979c4aafb0c672e02a0399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c5:04:c1:ee:d0:be:f7:3a:46:66:94:94:02:
f4:df:2d:98:d6:f3:e1:40:ec:6c:2e:d8:eb:75:cf:
e7:61:81:8f:a1:e1:8e:56:d6:35:a4:ea:40:af:55:
d3:dc:48:67:7b:cb:b5:2b:14:19:19:86:3d:2e:b8:
a5:7e:08:e4:25:5e:7a:b8:49:fa:2a:93:2e:66:d3:
53:e5:b7:d3:57:fa:9a:d0:82:a5:60:ef:b7:14:60:
0a:c5:5a:bc:29:7d:fd:55:29:90:3c:a7:04:54:b2:
06:68:de:ed:0f:a6:b5:cc:4e:16:03:86:86:bb:cb:
74:68:b9:bb:ed:56:05:4d:4b:db:bf:b2:8a:36:cb:
ac:c4:08:64:b7:23:b8:ad:a7:83:b6:7c:78:2b:d3:
f5:dd:8f:19:02:e0:51:c0:4f:dd:1d:6a:b0:5d:7d:
a2:9f:63:49:b6:ca:8b:0c:d6:5b:48:9d:fb:73:7e:
3a:39:07:81:0e:2b:d2:08:63:a7:43:ea:c2:42:2e:
4a:2e:c8:ee:f1:5d:dd:cf:0e:70:3c:34:a6:0d:84:
b9:19:bb:11:c8:1e:19:58:8a:fc:7d:c3:f9:b3:d3:
eb:7e:e9:62:87:f0:e0:cc:d8:d9:25:b0:a7:0e:d7:
ab:bb:c5:08:39:79:1f:73:b2:da:17:8f:ec:3d:ca:
bf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0B:89:57:09:C0:14:53:E2:97:9C:4A:AF:B0:C6:72:E0:2A:03:99
X509v3 Authority Key Identifier:
keyid:52:59:15:B4:C7:24:07:AF:B7:94:1E:5B:E2:94:AC:71:33:B1:07:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:cc:c0:cc:5c:24:62:b7:18:66:6f:6b:39:ee:f6:71:04:cd:
b5:ea:1b:dd:9d:c4:29:da:f6:59:6d:87:f7:53:11:d7:bf:6a:
8c:d6:9d:b3:da:eb:de:89:03:64:d6:f9:22:1a:80:be:76:ff:
38:b3:b0:ca:71:e6:09:72:f4:50:7f:51:29:9f:de:b0:3f:29:
42:43:a9:06:89:db:04:2e:f6:bd:9d:a2:c2:cc:df:4e:97:61:
ca:30:91:ba:58:10:ed:95:8e:8f:75:3c:42:d2:82:23:07:66:
3f:9e:32:f8:6e:d2:68:ca:8a:f8:c4:ab:df:c6:1f:4a:37:3c:
2e:06:67:5f:ec:0e:c7:8b:81:d5:d8:62:07:80:9e:1d:11:e6:
93:dd:85:26:7c:d1:fa:97:6f:a5:9b:44:e7:e3:57:38:e7:dc:
2b:47:13:a4:00:1f:67:46:69:56:e6:22:ef:50:eb:20:c6:e2:
8c:ea:d3:fe:e0:b6:0f:b8:fc:6d:48:87:0d:78:f8:7d:9e:b3:
9c:8b:0b:20:48:bd:94:1c:8b:ef:a2:0a:12:39:c3:76:c0:3b:
c3:0a:30:a8:99:d4:19:b8:a3:25:37:11:46:32:1a:73:7a:86:
d7:73:0f:8f:f0:1c:34:16:29:44:e2:cb:b9:a6:6d:90:69:e1:
26:20:0d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:45:12 2025 by rpki-client