Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft
File: UoUm3npC8eCAkWhA7r85A4uJPRY.mft (raw, json)
Hash identifier: 5LojwQYm8gQ0QYyOi+U977wiECmbYwXlI/f5qHGH4Co=
Subject key identifier: BB:58:03:48:F0:81:A8:1E:F4:49:3B:F9:7A:75:24:A2:7D:10:2D:B8
Authority key identifier: 52:85:26:DE:7A:42:F1:E0:80:91:68:40:EE:BF:39:03:8B:89:3D:16
Certificate issuer: /CN=528526de7a42f1e080916840eebf39038b893d16
Certificate serial: 0199FFC76FD18F00C04A6AF6C9334251A58D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoUm3npC8eCAkWhA7r85A4uJPRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft
Manifest number: 0A69
Signing time: Mon 20 Oct 2025 04:01:24 +0000
Manifest this update: Mon 20 Oct 2025 04:01:24 +0000
Manifest next update: Tue 21 Oct 2025 04:01:24 +0000
Files and hashes: 1: UoUm3npC8eCAkWhA7r85A4uJPRY.crl (hash: 9ISXE9ioZTNOTOOIzWMbHxKjrZhnNxRQVOuU68juYbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UoUm3npC8eCAkWhA7r85A4uJPRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:6f:d1:8f:00:c0:4a:6a:f6:c9:33:42:51:a5:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528526de7a42f1e080916840eebf39038b893d16
Validity
Not Before: Oct 20 04:01:24 2025 GMT
Not After : Oct 21 04:01:24 2025 GMT
Subject: CN=bb580348f081a81ef4493bf97a7524a27d102db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:aa:8a:f7:0e:d9:0e:38:9f:c9:16:86:93:12:
00:ce:29:ba:ef:6c:e4:5d:c2:73:3f:0e:07:6a:0b:
a5:e0:db:92:16:55:04:ce:53:c8:7e:eb:7c:ac:e5:
8c:02:dd:5c:14:1a:dd:63:86:0f:ec:fa:e8:70:c0:
7b:23:ff:ef:d6:50:24:3d:56:bf:dd:77:fb:51:1a:
f8:5c:83:97:85:ae:d0:30:e0:c5:39:9b:90:75:83:
5c:c5:05:51:69:e2:37:ed:76:ca:17:ba:f9:ed:69:
41:16:37:61:2f:d0:88:3d:dc:20:ec:e7:dd:d7:f8:
cc:f7:d7:0e:3c:21:87:47:a5:35:1d:a2:dd:43:b0:
54:3e:fd:3d:1c:0b:24:1c:6d:11:38:eb:b9:e4:9e:
0e:af:eb:e0:be:6d:04:64:0b:03:0a:53:b4:d5:89:
82:bb:a4:69:0b:99:62:58:2d:eb:1e:6d:73:9c:19:
ea:85:70:ca:58:67:48:6d:dd:4d:cb:c4:30:05:60:
85:17:e6:d0:34:27:8e:a6:4e:11:2b:e5:b5:cf:85:
85:7b:fb:82:6d:a3:95:d8:cb:0a:c0:78:3c:8e:e8:
e1:d7:7e:20:7c:9c:13:11:5c:27:02:31:2f:5c:a8:
36:36:f3:b6:a5:e3:81:37:9c:43:d1:9d:d6:16:dc:
28:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:58:03:48:F0:81:A8:1E:F4:49:3B:F9:7A:75:24:A2:7D:10:2D:B8
X509v3 Authority Key Identifier:
keyid:52:85:26:DE:7A:42:F1:E0:80:91:68:40:EE:BF:39:03:8B:89:3D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoUm3npC8eCAkWhA7r85A4uJPRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:63:13:15:07:da:47:f9:87:1c:12:80:f8:07:d2:b2:1f:9e:
67:6e:f2:d2:c7:9d:35:50:c9:ed:c5:a5:7b:73:e3:19:25:3a:
17:78:79:d5:bb:06:5a:f4:f4:ec:69:de:33:ad:96:47:f7:40:
b3:e7:87:13:07:38:a6:4d:50:18:67:ab:9a:6f:b6:07:04:ee:
bc:23:d3:81:50:42:a4:af:e6:44:90:ea:b7:00:44:a7:16:ac:
1b:e9:c0:91:0f:b5:4a:0d:d8:78:1f:af:8f:f4:31:9f:dc:60:
2e:ee:35:2d:eb:9b:91:a0:a2:96:1c:50:61:a4:96:59:ae:da:
f9:ee:2d:1e:c7:b9:7b:d6:f3:be:10:1f:8c:ac:53:0a:b6:55:
d9:3d:7a:02:18:29:70:5c:af:2b:e4:65:d6:5b:9c:26:e7:f3:
b2:64:83:5f:12:f1:c8:62:90:f7:d2:d2:25:7f:45:44:6a:5a:
91:b9:a0:88:3a:1f:ff:c7:31:b4:43:14:5c:7b:89:71:4a:5a:
48:ed:ee:7d:2c:a3:90:36:af:f1:85:e9:8c:a4:bf:50:9a:35:
d8:17:6d:df:00:2e:93:4e:f7:d6:b2:28:9c:8e:4d:6d:c9:49:
d7:c0:38:49:49:91:55:c6:e2:2f:bd:3c:1f:6a:7d:5a:6d:59:
4c:fb:d0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:40:37 2025 by rpki-client