Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7e7154-c3aa-45b6-8fb0-191d534c97b9/1/uI_4bEcX4ONm8pDNDWKK_Eajjw0.mft
File: uI_4bEcX4ONm8pDNDWKK_Eajjw0.mft (raw, json)
Hash identifier: vn9vC2FP6fEhnETpD0phd7cqGTIMdtcXmrd3cG0vads=
Subject key identifier: D6:79:9D:1D:CF:44:B0:8C:8C:27:56:F0:9A:99:52:70:DA:CF:26:D3
Authority key identifier: B8:8F:F8:6C:47:17:E0:E3:66:F2:90:CD:0D:62:8A:FC:46:A3:8F:0D
Certificate issuer: /CN=b88ff86c4717e0e366f290cd0d628afc46a38f0d
Certificate serial: 019A71B7763A0A30A4A6173535092FFF91D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uI_4bEcX4ONm8pDNDWKK_Eajjw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7e7154-c3aa-45b6-8fb0-191d534c97b9/1/uI_4bEcX4ONm8pDNDWKK_Eajjw0.mft
Manifest number: 1085
Signing time: Tue 11 Nov 2025 07:00:39 +0000
Manifest this update: Tue 11 Nov 2025 07:00:39 +0000
Manifest next update: Wed 12 Nov 2025 07:00:39 +0000
Files and hashes: 1: uI_4bEcX4ONm8pDNDWKK_Eajjw0.crl (hash: CPOuAadvVNi00qC6KW4tesnl7ye3mJuZx/irj6fUOwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7e7154-c3aa-45b6-8fb0-191d534c97b9/1/uI_4bEcX4ONm8pDNDWKK_Eajjw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7e7154-c3aa-45b6-8fb0-191d534c97b9/1/uI_4bEcX4ONm8pDNDWKK_Eajjw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uI_4bEcX4ONm8pDNDWKK_Eajjw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:76:3a:0a:30:a4:a6:17:35:35:09:2f:ff:91:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b88ff86c4717e0e366f290cd0d628afc46a38f0d
Validity
Not Before: Nov 11 07:00:39 2025 GMT
Not After : Nov 12 07:00:39 2025 GMT
Subject: CN=d6799d1dcf44b08c8c2756f09a995270dacf26d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d4:18:c8:5e:5f:e5:d5:6d:91:60:c5:6a:f4:
57:ed:88:bf:27:3b:e7:9c:c0:ae:c8:34:8e:3c:a6:
81:25:32:f3:be:fe:67:03:65:3e:f4:c2:94:ec:69:
e3:22:f1:4e:36:47:c3:86:1a:3a:cb:56:35:5d:10:
15:d3:bf:91:11:3e:f6:22:6c:b7:59:07:9f:d0:ec:
9e:d0:39:d9:aa:fa:3c:22:63:7a:58:45:42:d9:40:
18:0a:0e:f4:1c:4e:7a:fe:35:42:79:2a:33:26:fb:
b5:07:0c:d3:03:4c:56:5a:0b:af:12:33:93:5b:63:
1b:54:e1:55:43:97:81:31:e2:9b:34:87:22:4d:0d:
8c:5d:ac:83:89:75:7f:f2:cc:db:cf:c5:00:75:a9:
e0:8f:7a:34:72:73:93:67:e1:4f:84:0e:a0:57:99:
41:6b:9d:2c:3e:c8:a6:e9:79:cd:15:32:c5:b6:a9:
b2:81:64:a4:2e:b7:a7:41:d7:b9:dc:6b:8a:6b:d0:
e2:dd:f3:8d:07:b4:1a:22:29:48:12:3c:22:8c:59:
ef:37:f9:21:eb:42:0b:63:51:dd:93:2f:78:bf:a6:
0c:11:ea:a6:6a:6d:eb:16:24:55:93:f2:b8:01:58:
41:1a:cb:4e:1c:8b:48:36:e5:5a:8d:be:35:85:0a:
a8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:79:9D:1D:CF:44:B0:8C:8C:27:56:F0:9A:99:52:70:DA:CF:26:D3
X509v3 Authority Key Identifier:
keyid:B8:8F:F8:6C:47:17:E0:E3:66:F2:90:CD:0D:62:8A:FC:46:A3:8F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uI_4bEcX4ONm8pDNDWKK_Eajjw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7e7154-c3aa-45b6-8fb0-191d534c97b9/1/uI_4bEcX4ONm8pDNDWKK_Eajjw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7e7154-c3aa-45b6-8fb0-191d534c97b9/1/uI_4bEcX4ONm8pDNDWKK_Eajjw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:38:60:a4:86:ec:59:60:9e:df:3a:d2:c3:7b:ff:9e:eb:be:
3e:4f:20:81:7b:6a:69:5b:74:62:67:a8:92:ad:e0:48:71:f4:
af:e8:9a:e5:99:ac:fc:3b:7c:15:09:3a:a7:4a:d8:f5:a8:61:
7c:28:10:8e:91:c4:88:81:80:c8:b2:0f:8f:f2:97:3c:58:28:
c1:8b:dc:db:47:64:aa:a2:27:46:6e:52:80:fb:b5:48:da:0e:
28:4b:a5:a0:46:98:61:81:62:7f:3f:96:99:7d:f2:0f:4c:4e:
c4:d5:0a:dd:35:c0:82:82:41:4e:0d:14:99:87:9f:2c:31:cf:
08:e1:f1:be:b0:85:f4:bc:7d:da:7b:90:4e:63:86:08:f2:d4:
69:c6:2a:53:ff:f5:46:c5:44:c0:e3:9f:b1:78:9e:2b:7c:32:
bc:75:7c:6d:49:b7:76:cd:1b:92:b8:a9:71:11:19:36:f6:d5:
bf:e9:d8:0a:f6:d8:e3:c4:20:f6:d3:08:b7:b1:02:64:ff:9e:
b1:5c:85:05:f6:8e:db:c7:96:a4:29:f6:25:4f:16:4c:f4:54:
2c:92:5e:ef:75:00:f4:0d:4d:5a:9f:8b:c3:f3:59:e8:eb:28:
06:04:bd:8c:50:09:13:fa:4c:32:42:b4:82:1a:11:3b:8c:dd:
8f:81:10:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:55:52 2025 by rpki-client