Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.mft
File: UVy9vRam6GjplnW8KRgCaMJY8Ps.mft (raw, json)
Hash identifier: QEax+YlSIldD3xeFhEEL6ugN5igERJpt9bivTBFHYf4=
Subject key identifier: 1D:6D:8B:86:0B:CA:62:1C:44:05:ED:32:00:92:1C:F5:AE:87:37:CA
Authority key identifier: 51:5C:BD:BD:16:A6:E8:68:E9:96:75:BC:29:18:02:68:C2:58:F0:FB
Certificate issuer: /CN=515cbdbd16a6e868e99675bc29180268c258f0fb
Certificate serial: 0199FFC75ECBD2EB79CDB4865C38147716E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVy9vRam6GjplnW8KRgCaMJY8Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.mft
Manifest number: 11CF
Signing time: Mon 20 Oct 2025 04:01:19 +0000
Manifest this update: Mon 20 Oct 2025 04:01:19 +0000
Manifest next update: Tue 21 Oct 2025 04:01:19 +0000
Files and hashes: 1: UVy9vRam6GjplnW8KRgCaMJY8Ps.crl (hash: IR0lg7nbs5CUBTF77h2iNjk/FIBt7UCzAl8D9+J1tjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/UVy9vRam6GjplnW8KRgCaMJY8Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:5e:cb:d2:eb:79:cd:b4:86:5c:38:14:77:16:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=515cbdbd16a6e868e99675bc29180268c258f0fb
Validity
Not Before: Oct 20 04:01:19 2025 GMT
Not After : Oct 21 04:01:19 2025 GMT
Subject: CN=1d6d8b860bca621c4405ed3200921cf5ae8737ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:01:2f:82:16:d7:8f:83:c3:22:a0:c4:b9:ed:
d2:9c:26:63:b0:47:97:f3:10:dd:d0:1e:cd:dc:25:
20:1c:75:6b:47:c3:62:0f:04:38:91:d1:b8:e6:9d:
85:be:79:b1:8b:e7:5d:1d:98:71:51:df:c3:0b:8c:
38:78:7d:e1:77:61:96:89:71:06:6f:18:8b:b0:6d:
66:03:98:1c:7b:ce:fa:f9:bf:e3:cf:9c:32:1b:21:
44:fb:da:b5:63:dc:80:f7:7f:59:cb:5b:ee:ae:52:
56:ef:6d:4f:dc:da:e2:3a:3b:8b:08:d5:c8:62:7b:
9a:18:16:11:7d:cf:1b:2b:af:fd:58:c0:2c:6c:0e:
bd:a2:b0:93:97:ca:f2:84:86:27:93:07:84:c2:4f:
61:c7:c9:37:97:69:e8:0c:2d:2b:22:9c:fd:49:ae:
eb:a3:ef:26:b0:59:bd:12:c1:4f:ab:05:a1:3e:22:
91:d1:85:87:59:6b:e4:54:fe:5c:ed:22:9c:49:6a:
83:32:32:50:db:6a:91:ae:ca:fe:29:24:f0:72:a8:
d8:97:dd:8e:45:f3:f3:be:72:ca:99:01:b1:53:93:
b2:3f:80:c6:d0:76:12:8b:a4:e3:aa:d9:ca:4e:3f:
58:52:e3:5a:3b:1a:0a:c9:37:ea:f5:61:e6:34:49:
fb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6D:8B:86:0B:CA:62:1C:44:05:ED:32:00:92:1C:F5:AE:87:37:CA
X509v3 Authority Key Identifier:
keyid:51:5C:BD:BD:16:A6:E8:68:E9:96:75:BC:29:18:02:68:C2:58:F0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVy9vRam6GjplnW8KRgCaMJY8Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f8:b8:d8:0d:ee:51:84:5b:12:c3:4d:7e:02:e5:62:8a:f3:
cc:7c:c8:e4:9f:49:b5:77:0d:4c:6e:9a:74:e0:10:1e:55:1f:
65:31:fd:b8:fc:21:52:ae:b4:58:a2:53:d9:30:4a:0b:54:21:
6e:81:4c:0c:0e:2c:9a:79:11:6b:b2:aa:8e:65:8c:b8:b8:1d:
a2:37:7b:91:94:e6:21:9c:d0:1c:7d:ef:f8:6a:39:e9:2e:8a:
39:f1:ef:b8:d8:f5:39:96:3c:9d:c9:5a:db:f4:84:41:e1:f5:
f3:1e:29:5d:d4:f1:28:d0:a3:c2:d4:93:4e:dc:a0:e4:26:85:
1e:9c:65:9f:7a:14:38:98:93:00:bd:09:15:02:62:32:3f:27:
d0:81:11:d6:c3:67:c0:3c:e9:70:41:d8:54:5d:43:b4:b4:cc:
b6:f5:1e:08:b6:d5:09:84:72:a8:ea:d3:be:e9:66:ef:14:fb:
11:fc:c7:c8:f0:15:7a:11:6f:73:d2:6f:2e:f6:7e:6c:43:7e:
98:ff:17:bb:c5:f6:10:ed:57:39:28:f8:a3:84:dc:2c:ee:8f:
90:7f:4b:b6:00:fa:82:8e:39:21:9d:b3:57:71:7d:b4:55:19:
28:96:54:f9:40:66:af:31:29:4f:06:f6:1a:d6:b2:16:03:59:
cc:0a:e2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:33 2025 by rpki-client