Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
File: UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft (raw, json)
Hash identifier: MxOKcgMZRJeINypQOVcx65HQlwfj10uQ+Pn9M1EqLus=
Subject key identifier: 0F:31:0A:D9:37:10:00:84:64:ED:5B:BC:BD:7F:C2:0C:DE:65:56:78
Authority key identifier: 50:1B:52:02:A0:ED:46:F6:41:1E:1E:DA:7C:7B:59:DD:8C:C6:CD:87
Certificate issuer: /CN=501b5202a0ed46f6411e1eda7c7b59dd8cc6cd87
Certificate serial: 0199FB4604A6B3CAFB679404217974715ECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
Manifest number: 1434
Signing time: Sun 19 Oct 2025 07:01:33 +0000
Manifest this update: Sun 19 Oct 2025 07:01:33 +0000
Manifest next update: Mon 20 Oct 2025 07:01:33 +0000
Files and hashes: 1: UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl (hash: y5e/cCP5D5j37lNXhK6YhborcltGOtWdbLvA0vw57Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:04:a6:b3:ca:fb:67:94:04:21:79:74:71:5e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501b5202a0ed46f6411e1eda7c7b59dd8cc6cd87
Validity
Not Before: Oct 19 07:01:33 2025 GMT
Not After : Oct 20 07:01:33 2025 GMT
Subject: CN=0f310ad93710008464ed5bbcbd7fc20cde655678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4a:d6:39:e0:cc:7f:82:a1:af:9e:19:56:45:
30:25:c2:09:03:06:90:78:0e:0d:b3:d8:d6:c0:da:
26:92:e8:60:38:6c:59:8f:ed:1a:34:29:11:d5:bd:
d3:2f:e1:bc:de:16:78:a2:d3:d6:ce:01:dc:d7:94:
b6:13:d0:50:d3:60:a8:d4:35:a6:c1:ea:4a:89:27:
b3:47:9e:53:20:95:53:63:02:70:9f:f6:dd:c1:88:
2d:48:1d:4e:2d:13:8f:d9:3d:fc:bd:73:1b:33:73:
17:fa:24:fe:0a:f9:ed:60:7f:f7:86:7a:26:bb:02:
ac:d9:2a:61:fd:7b:af:dd:a0:63:8c:c2:a5:26:1b:
a4:e4:c9:e7:58:e1:a2:92:74:dc:fc:78:78:db:a4:
96:78:17:5b:ad:83:b9:4d:f2:e3:19:b4:8a:1f:b8:
b5:47:bc:2d:7a:a3:a8:98:2b:93:eb:5e:a4:59:ed:
96:de:7f:e1:16:dc:9a:ee:8c:70:4b:80:0b:c7:c7:
54:f5:7c:88:58:15:b4:a3:cb:de:39:ff:0a:75:d0:
16:60:95:ae:6d:14:56:e8:18:4c:6b:4c:2a:de:9e:
ff:e7:17:97:41:09:50:93:af:eb:9a:a9:10:97:d5:
e4:74:4a:0d:cc:66:ae:dc:22:ca:35:b0:5d:8f:24:
9c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:31:0A:D9:37:10:00:84:64:ED:5B:BC:BD:7F:C2:0C:DE:65:56:78
X509v3 Authority Key Identifier:
keyid:50:1B:52:02:A0:ED:46:F6:41:1E:1E:DA:7C:7B:59:DD:8C:C6:CD:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:17:c6:17:92:04:41:fa:e7:17:e4:ba:86:21:23:33:2e:80:
59:a9:70:20:35:e3:90:e6:76:98:7b:89:d8:64:f1:9b:72:fa:
31:b0:dc:0b:2b:fa:bb:fd:a0:c6:80:ba:9f:e2:a1:1c:74:af:
ee:a9:ed:2a:26:df:bc:1b:bb:7a:65:7f:6a:ce:e2:f2:66:a5:
c9:d7:ba:c1:1c:91:bd:b4:f9:ce:46:be:35:db:1e:ba:3f:55:
af:c2:57:fb:14:c4:f5:34:f3:24:76:e7:ad:e5:6f:25:b6:8c:
87:f5:58:4e:40:70:36:a9:57:be:90:41:74:82:72:41:e5:8d:
03:47:1a:14:40:8e:7f:a1:98:23:38:b6:71:90:1c:82:1b:ec:
cc:a2:f0:05:25:0f:19:d5:c0:6b:52:cf:1e:6a:a7:81:c3:76:
28:3c:ef:c3:7f:22:e2:3f:79:60:41:65:dc:79:6f:92:3d:f7:
27:ea:04:06:ea:20:96:b4:1c:f2:dd:cc:f5:20:99:e5:8f:06:
bb:22:e0:17:f0:17:46:2c:44:19:8b:3d:2a:96:ac:e3:39:d5:
47:93:98:04:41:a8:d5:56:a2:c5:33:14:0f:b0:ee:47:7f:25:
3b:e1:d0:36:ca:40:cc:1b:9e:3f:80:56:a8:2c:1b:04:37:d1:
7c:cb:a7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:12 2025 by rpki-client