Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft
File: U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft (raw, json)
Hash identifier: YrfJpAwZbdwaO1WeZRzj9XdL10xIksQRWfzj/+1AfrA=
Subject key identifier: 43:C0:FC:B5:AD:05:C5:FB:F3:C1:2A:5D:0A:EE:46:99:D2:A8:5C:52
Authority key identifier: 53:65:83:DE:83:6F:CC:28:E7:0B:F6:6E:AD:B8:D3:8F:3F:64:F4:E1
Certificate issuer: /CN=536583de836fcc28e70bf66eadb8d38f3f64f4e1
Certificate serial: 019A73012CCE9C7CB70E302F5D3301C18548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U2WD3oNvzCjnC_ZurbjTjz9k9OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 13:00:48 +0000
Manifest this update: Tue 11 Nov 2025 13:00:48 +0000
Manifest next update: Wed 12 Nov 2025 13:00:48 +0000
Files and hashes: 1: U2WD3oNvzCjnC_ZurbjTjz9k9OE.crl (hash: XRTvF8Gzy/p2foWkZ5k659h1h/qO/8JDEp8oAfmMG/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U2WD3oNvzCjnC_ZurbjTjz9k9OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:2c:ce:9c:7c:b7:0e:30:2f:5d:33:01:c1:85:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=536583de836fcc28e70bf66eadb8d38f3f64f4e1
Validity
Not Before: Nov 11 13:00:48 2025 GMT
Not After : Nov 12 13:00:48 2025 GMT
Subject: CN=43c0fcb5ad05c5fbf3c12a5d0aee4699d2a85c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:37:d3:8d:4e:17:b8:b0:60:2d:03:f8:88:59:
77:3e:36:0e:1d:2d:43:10:24:80:c7:91:73:ab:b9:
54:22:de:31:37:a2:51:aa:f6:69:80:34:cb:67:3c:
9a:13:dc:c3:b9:43:46:d5:24:12:89:60:cc:38:a3:
dc:68:69:41:7b:f7:4d:16:f0:a3:b1:be:95:a3:4e:
a9:d8:b1:d0:11:88:15:21:fe:3d:fe:03:da:d6:cb:
2a:30:9e:80:ed:eb:75:1b:21:5b:b9:d8:ea:5a:24:
7b:01:9f:3f:a6:ba:05:04:52:c7:7c:f7:e2:e1:30:
82:3f:35:05:86:9c:ff:d3:dd:82:1b:35:6b:cd:0d:
ca:a9:eb:a1:f5:60:62:89:14:2e:86:f0:13:1e:e4:
28:66:82:61:4d:11:11:a8:2d:87:f5:52:b0:b3:21:
95:a0:53:20:ca:3e:98:2d:a3:94:07:9e:76:c1:3c:
eb:f7:29:14:be:95:a8:c4:eb:2e:01:73:8e:35:1a:
cc:4f:a4:15:00:c5:f4:a6:f6:0e:63:05:11:3b:9d:
3e:4d:71:d9:2f:d4:e4:fa:13:68:57:0e:34:ae:68:
d9:ea:d8:2b:3e:60:77:4c:d9:81:e4:c3:14:8b:3e:
81:b8:e6:8b:74:a8:8f:cc:77:b1:4d:2c:ac:08:ad:
bc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C0:FC:B5:AD:05:C5:FB:F3:C1:2A:5D:0A:EE:46:99:D2:A8:5C:52
X509v3 Authority Key Identifier:
keyid:53:65:83:DE:83:6F:CC:28:E7:0B:F6:6E:AD:B8:D3:8F:3F:64:F4:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U2WD3oNvzCjnC_ZurbjTjz9k9OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ed:09:75:d9:3a:db:c6:0c:b7:1a:e4:45:60:cc:17:bf:63:
28:80:89:d1:f0:62:c0:d1:f7:89:cd:94:21:6d:54:8e:23:0b:
ea:ac:4e:7a:6f:44:8c:a5:0f:01:48:0d:fe:8c:bf:51:d3:d6:
4c:a2:f4:c5:cb:ab:7e:16:35:1b:63:31:6c:39:9f:45:94:a3:
81:70:0e:cd:10:b3:55:35:19:79:e9:af:32:89:9d:d7:27:68:
de:63:87:fe:c9:7b:a4:c8:2a:5d:1c:ea:ae:2d:22:17:57:d0:
22:b8:3d:bb:7a:03:31:86:c0:12:19:7b:19:f3:a5:16:6a:0e:
33:24:a2:82:dc:96:39:0e:2d:a4:ea:96:3f:f2:dc:50:32:49:
c9:6c:1c:5a:f4:09:27:d1:00:f3:19:09:0a:a8:32:8c:e7:38:
b7:cd:48:b6:12:98:73:8f:77:d6:1c:f6:8f:37:22:48:ec:84:
86:d0:35:b6:6a:c5:ea:c6:03:5d:e3:b3:f8:14:0b:a8:c9:8f:
88:f7:d3:7b:62:ff:8d:af:64:40:53:a8:5e:ed:15:7b:08:83:
0f:48:25:c0:db:08:81:7f:cf:af:9b:ba:dc:6d:dc:70:a6:c5:
43:5f:39:d3:18:64:5e:5c:43:5a:52:96:a6:36:3f:cd:01:ea:
38:18:f2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:45 2025 by rpki-client