Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft
File: U5UGCcqN1_bG-jzsrHeUIexsAQA.mft (raw, json)
Hash identifier: igPQvM3eGE6+vWwCZ1VVy5uee0USZA1xWkwytD7Ddc0=
Subject key identifier: B9:56:F7:39:95:91:57:40:63:51:5B:F8:07:A9:D2:4A:0C:2C:C0:98
Authority key identifier: 53:95:06:09:CA:8D:D7:F6:C6:FA:3C:EC:AC:77:94:21:EC:6C:01:00
Certificate issuer: /CN=53950609ca8dd7f6c6fa3cecac779421ec6c0100
Certificate serial: 019A71499E2726EB27E59FAF0BA7C923E31E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5UGCcqN1_bG-jzsrHeUIexsAQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft
Manifest number: 05E0
Signing time: Tue 11 Nov 2025 05:00:41 +0000
Manifest this update: Tue 11 Nov 2025 05:00:41 +0000
Manifest next update: Wed 12 Nov 2025 05:00:41 +0000
Files and hashes: 1: U5UGCcqN1_bG-jzsrHeUIexsAQA.crl (hash: M+EYcevYU8YSFyASvMyOeoO0BJM7zc1MyzxGulKdgfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5UGCcqN1_bG-jzsrHeUIexsAQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:9e:27:26:eb:27:e5:9f:af:0b:a7:c9:23:e3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53950609ca8dd7f6c6fa3cecac779421ec6c0100
Validity
Not Before: Nov 11 05:00:41 2025 GMT
Not After : Nov 12 05:00:41 2025 GMT
Subject: CN=b956f7399591574063515bf807a9d24a0c2cc098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5a:50:cb:ea:a1:17:12:31:8a:cb:c3:f3:2b:
cb:11:8f:10:4a:6d:e9:9c:8e:ee:70:96:07:63:91:
5a:5d:6b:8f:24:98:d0:a8:f2:6a:82:87:4d:b9:fe:
c6:9f:0c:9f:78:e4:eb:59:07:2f:7d:b8:3d:a4:7f:
53:4d:10:37:72:3e:e0:5c:5c:0f:93:8b:e5:e3:0b:
47:97:e8:dc:03:60:6d:e3:53:1e:e9:18:05:a2:92:
92:c9:02:40:8e:64:d2:45:06:3e:48:ee:5c:c4:19:
c9:84:93:d4:5c:af:66:74:ac:80:95:7a:31:75:9a:
59:09:b2:1b:e3:c4:89:8e:29:83:db:56:7d:7c:17:
74:5e:fc:c2:aa:bd:5b:b7:2d:0e:33:67:7e:68:ee:
db:97:da:93:e3:9a:6f:86:39:73:c7:38:20:c1:b5:
a5:28:01:5e:a9:57:84:ca:d6:22:4f:15:8b:1d:98:
5a:7f:ec:21:0b:02:3f:6b:54:5b:ce:6b:a9:df:39:
54:b7:19:02:e3:1f:5b:38:24:43:a0:5b:cd:f6:8f:
3d:ff:03:d8:30:e1:9a:da:52:75:54:04:87:ef:d7:
dd:bf:2e:5d:c4:c8:0d:24:8d:69:39:b2:a4:84:d8:
71:c8:64:7d:48:78:00:6d:e3:63:00:3a:d8:c7:52:
0e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:56:F7:39:95:91:57:40:63:51:5B:F8:07:A9:D2:4A:0C:2C:C0:98
X509v3 Authority Key Identifier:
keyid:53:95:06:09:CA:8D:D7:F6:C6:FA:3C:EC:AC:77:94:21:EC:6C:01:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5UGCcqN1_bG-jzsrHeUIexsAQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:aa:cc:4a:05:2f:2f:61:f8:7a:ec:c8:5a:5b:47:2d:b1:18:
8d:c3:ec:64:64:90:cd:91:b4:97:86:42:bf:8f:3d:c5:6c:05:
2a:5d:3c:be:a1:92:fb:a1:ec:0e:9b:a8:3a:ad:6a:6d:1c:c6:
b1:51:9e:e0:19:c3:b8:02:b2:b9:21:a9:e1:d0:be:3a:da:3b:
32:70:0f:25:43:17:28:13:0a:60:18:53:0d:b9:69:37:63:c0:
c2:d8:41:a1:61:72:95:7b:c4:a8:77:9f:47:ff:7d:54:8d:a4:
0c:93:c5:43:d6:58:13:c2:fc:1f:e9:b4:8d:ba:ca:7d:dc:0e:
2b:b0:67:89:22:9a:43:c1:48:a6:7a:f1:60:6e:67:71:80:b4:
49:8a:54:48:64:c3:0c:15:eb:52:8d:a3:de:7c:8d:45:0d:5b:
22:b5:7d:d3:92:22:a8:4e:60:73:54:96:d1:6b:5c:2a:f6:e5:
8e:39:68:6a:7c:82:a2:aa:e9:7c:94:8f:45:9a:2f:4c:cd:b2:
06:58:ec:12:6c:79:6f:f8:ae:20:bf:3c:95:c0:5a:a4:60:a2:
58:05:25:fa:99:96:27:a5:5b:85:95:d7:d3:28:54:59:10:ad:
2d:c9:55:33:33:3f:5e:50:6d:d1:1b:3c:37:81:c9:63:95:f7:
2e:6f:96:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:15 2025 by rpki-client