Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft
File: uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft (raw, json)
Hash identifier: ehPKENPtwTOWw0FezvyUf5bhcO1epi2w8mGQtXPIrjI=
Subject key identifier: 5C:FD:80:08:49:2E:6C:61:44:83:68:03:B8:75:EA:74:DD:23:2C:2F
Authority key identifier: B9:6A:ED:42:6F:B1:A0:63:25:A2:63:79:21:A4:B5:AB:98:A1:A5:94
Certificate issuer: /CN=b96aed426fb1a06325a2637921a4b5ab98a1a594
Certificate serial: 0199FA6A38A4454184DFC38A3CA0489066AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uWrtQm-xoGMlomN5IaS1q5ihpZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft
Manifest number: 0DA9
Signing time: Sun 19 Oct 2025 03:01:29 +0000
Manifest this update: Sun 19 Oct 2025 03:01:29 +0000
Manifest next update: Mon 20 Oct 2025 03:01:29 +0000
Files and hashes: 1: uWrtQm-xoGMlomN5IaS1q5ihpZQ.crl (hash: M24WbdRpnMrkxWejOmDYs5B+d7l34p/BVrhtU+nd7ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uWrtQm-xoGMlomN5IaS1q5ihpZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:38:a4:45:41:84:df:c3:8a:3c:a0:48:90:66:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b96aed426fb1a06325a2637921a4b5ab98a1a594
Validity
Not Before: Oct 19 03:01:29 2025 GMT
Not After : Oct 20 03:01:29 2025 GMT
Subject: CN=5cfd8008492e6c6144836803b875ea74dd232c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fc:e2:9a:13:57:b7:63:20:24:75:6b:57:9f:
93:b7:05:73:ce:09:47:95:ed:ee:96:c2:9d:46:96:
8b:2c:9b:ea:c9:cb:40:a1:1a:43:50:e4:e6:0c:15:
b2:7c:ab:ca:5e:ee:f6:40:44:f1:07:60:89:3a:97:
95:28:46:44:2d:aa:da:8a:63:56:a7:09:68:98:c4:
e6:90:c7:03:ed:4f:19:2e:ca:d3:3f:70:0d:06:2f:
61:6a:b1:d1:3e:2b:7d:ca:e5:0a:8d:77:f8:81:71:
e5:09:97:c4:fd:16:f0:6e:af:85:85:36:ab:b2:be:
3e:0a:be:a6:47:f8:4c:ed:35:57:bb:fc:d3:66:64:
93:bf:eb:eb:75:42:c9:26:d7:cc:62:2b:b1:b4:50:
7b:9f:ab:99:a3:13:d4:a0:ee:d9:68:b6:65:a0:37:
67:3f:9a:1c:93:7e:b8:2b:27:c6:bd:73:08:16:06:
ad:93:f7:c8:78:a0:8c:2e:76:16:c8:8a:b4:4c:8d:
87:f6:a8:32:f2:e6:e1:4c:e9:33:e2:93:0c:3e:e9:
79:70:fe:2e:60:74:9d:4a:83:e8:c7:75:37:4d:c3:
26:11:90:9d:72:1c:42:1c:75:19:4b:b9:c0:38:03:
e9:3f:15:ee:07:bd:2d:49:e0:59:44:d2:29:88:6b:
a1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FD:80:08:49:2E:6C:61:44:83:68:03:B8:75:EA:74:DD:23:2C:2F
X509v3 Authority Key Identifier:
keyid:B9:6A:ED:42:6F:B1:A0:63:25:A2:63:79:21:A4:B5:AB:98:A1:A5:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWrtQm-xoGMlomN5IaS1q5ihpZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:8b:86:b4:a1:b6:87:24:7d:fd:86:a9:58:2a:47:6b:10:3e:
6c:1f:00:5b:df:6e:3a:0d:c6:c3:09:4b:5f:e7:b9:d4:ee:30:
e2:c1:28:58:43:29:8c:15:f6:5b:b5:50:c2:3e:d5:12:56:a1:
2e:77:ce:b1:b6:36:8e:60:a1:23:8f:1c:2d:17:e8:c8:f5:82:
ff:fd:f8:5a:80:59:b0:54:40:6e:1b:03:51:7d:e6:d2:37:5d:
51:52:fb:6b:ca:47:f2:85:d7:9a:2d:fb:7c:57:f7:53:f9:02:
d2:9b:0a:e5:77:3c:e9:39:ce:a1:78:f4:2d:02:e1:bc:43:56:
17:25:a1:b5:31:33:33:37:de:74:8c:16:6b:c2:fc:da:96:e7:
1b:eb:79:0b:83:c6:56:4a:b5:b4:88:92:24:4a:32:29:35:8e:
c0:a2:80:71:89:5b:95:c8:38:19:b7:21:73:1d:be:8a:d3:8d:
89:69:07:d4:0a:aa:6f:e2:f3:62:46:82:91:dc:bb:fc:9f:2a:
a3:e0:65:80:12:ad:42:69:29:2d:d7:26:b6:82:a9:21:63:4d:
6e:95:85:8f:70:8b:2f:8e:04:47:d6:2a:cf:88:21:03:dd:17:
c3:6f:fd:62:72:6e:f7:aa:bc:25:5d:d7:e3:83:b7:6f:56:28:
4e:44:1d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:14 2025 by rpki-client