Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft
File: sUgIa40dx_EOND_RZXGSOadVvTQ.mft (raw, json)
Hash identifier: lx7lRnS3UC9GLNPz53olFzMk77g1kN/BfDal0O3/Iv8=
Subject key identifier: 14:18:CD:CF:CD:B8:D9:4C:40:7E:44:63:39:3A:D2:34:34:C2:4D:68
Authority key identifier: B1:48:08:6B:8D:1D:C7:F1:0E:34:3F:D1:65:71:92:39:A7:55:BD:34
Certificate issuer: /CN=b148086b8d1dc7f10e343fd165719239a755bd34
Certificate serial: 019A72260DA8F7573E7BE952D322549DDA7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUgIa40dx_EOND_RZXGSOadVvTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft
Manifest number: 109B
Signing time: Tue 11 Nov 2025 09:01:27 +0000
Manifest this update: Tue 11 Nov 2025 09:01:27 +0000
Manifest next update: Wed 12 Nov 2025 09:01:27 +0000
Files and hashes: 1: sUgIa40dx_EOND_RZXGSOadVvTQ.crl (hash: 96nlNpE+/vDbvofuVZ6PVPxBgXo4ZyFwHmlZ6sWEn48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUgIa40dx_EOND_RZXGSOadVvTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:0d:a8:f7:57:3e:7b:e9:52:d3:22:54:9d:da:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b148086b8d1dc7f10e343fd165719239a755bd34
Validity
Not Before: Nov 11 09:01:27 2025 GMT
Not After : Nov 12 09:01:27 2025 GMT
Subject: CN=1418cdcfcdb8d94c407e4463393ad23434c24d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cd:c8:e4:d6:5c:7a:86:08:02:c2:53:c6:23:
58:99:39:a4:6d:1c:ab:ba:00:3a:f0:38:c2:6d:70:
56:0c:ae:f9:19:7b:f0:a9:8f:bd:17:72:a8:2c:30:
e6:ac:d2:b5:4b:16:20:3e:ca:85:3a:90:2e:90:ba:
a2:18:7f:e7:e7:8d:28:02:65:99:c0:63:7e:98:be:
df:a5:c6:b1:2f:56:1a:00:a6:f4:13:60:c1:18:e0:
92:bc:c4:39:9a:30:82:fa:15:cb:75:89:08:f5:af:
4c:b1:b7:78:bb:07:3b:6b:f2:58:52:d1:1a:f4:f6:
87:ca:81:7f:92:47:b8:90:00:1f:d5:41:08:96:b9:
9c:76:f7:18:03:c2:cc:bc:f1:93:03:a3:46:a1:8b:
36:f7:6e:c0:2a:4b:0f:8b:01:ad:bb:e7:d1:2c:05:
27:a9:0c:40:12:3c:3d:1b:6f:4d:da:38:87:29:69:
33:7d:b7:4d:b0:54:92:28:6b:17:56:96:fa:61:48:
d2:40:e9:92:c7:60:4c:56:c9:e0:fa:b6:ca:3d:1f:
b3:ca:a0:bd:a4:d2:a6:53:c5:6c:c8:ff:e6:f0:8c:
44:58:82:7e:c3:c9:b5:a9:da:ce:c5:de:dc:07:20:
a5:ee:1e:5a:15:21:9d:6a:36:6d:15:ff:8c:68:d7:
91:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:18:CD:CF:CD:B8:D9:4C:40:7E:44:63:39:3A:D2:34:34:C2:4D:68
X509v3 Authority Key Identifier:
keyid:B1:48:08:6B:8D:1D:C7:F1:0E:34:3F:D1:65:71:92:39:A7:55:BD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUgIa40dx_EOND_RZXGSOadVvTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:85:87:03:b6:8c:40:d9:45:d8:39:67:f5:ab:bd:af:a4:1a:
77:9a:35:e5:20:38:96:9d:84:54:27:ab:c3:34:5d:55:40:17:
ac:4b:f2:14:09:4a:75:54:af:b3:f2:60:a6:3e:e0:d0:60:60:
97:b8:d2:2b:93:d2:b7:68:63:bb:94:f4:76:53:1f:e1:23:77:
c5:8f:4b:5c:86:b6:58:74:ab:b8:7b:13:31:ed:0f:21:03:d4:
48:2b:b8:b0:14:43:f2:02:be:3a:6c:c9:36:a3:41:2f:2d:87:
26:25:3a:12:42:4b:89:e6:6c:be:82:1d:2b:79:87:b7:60:65:
81:90:a0:4c:35:88:d9:10:67:1a:62:6c:f8:95:28:a6:75:04:
b3:2d:6e:54:79:7b:5e:85:ce:22:d1:44:a4:54:14:98:57:e3:
e2:c7:62:83:f3:b4:b7:81:97:68:70:69:b9:f5:69:b5:a4:9a:
fc:55:66:35:3d:dd:0e:26:4a:12:8f:26:92:ed:48:fc:1a:0d:
49:38:f7:2b:f1:9c:80:c6:ae:42:d6:ff:cf:f2:76:b9:bd:30:
67:8c:98:63:cc:d1:94:8f:95:55:a5:ec:22:bb:3c:dd:87:81:
8b:34:f6:d1:0d:bf:be:85:08:ac:60:3c:52:1e:c1:d3:99:e1:
2a:10:e5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:19 2025 by rpki-client