Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft
File: Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft (raw, json)
Hash identifier: Q6sDQQgN4Dvll0FbsrP4/XBubWueYLdoMQXJEzFozXA=
Subject key identifier: D8:B9:12:B7:1B:8D:06:AE:DE:7E:56:C0:AE:5F:53:25:01:06:E1:C7
Authority key identifier: 52:EF:F3:85:D4:B4:82:15:D8:05:B5:88:A2:70:58:29:D4:62:11:71
Certificate issuer: /CN=52eff385d4b48215d805b588a2705829d4621171
Certificate serial: 0199FBEBB9EC2801B356AB9D81FD3BC4A9E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uu_zhdS0ghXYBbWIonBYKdRiEXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft
Manifest number: 0A8B
Signing time: Sun 19 Oct 2025 10:02:33 +0000
Manifest this update: Sun 19 Oct 2025 10:02:33 +0000
Manifest next update: Mon 20 Oct 2025 10:02:33 +0000
Files and hashes: 1: Uu_zhdS0ghXYBbWIonBYKdRiEXE.crl (hash: 4vEfbfvUUwSrihqRboj2l+/teKGeVmOqnSKiRA9tecY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uu_zhdS0ghXYBbWIonBYKdRiEXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b9:ec:28:01:b3:56:ab:9d:81:fd:3b:c4:a9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52eff385d4b48215d805b588a2705829d4621171
Validity
Not Before: Oct 19 10:02:33 2025 GMT
Not After : Oct 20 10:02:33 2025 GMT
Subject: CN=d8b912b71b8d06aede7e56c0ae5f53250106e1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:11:e6:fe:3a:64:67:82:ef:52:54:52:b6:ae:
d0:a8:84:b4:b2:fb:8e:98:d7:ad:83:23:82:e8:e6:
a6:33:7a:52:25:06:a7:d1:5b:f7:2b:99:37:9c:6e:
6b:be:3e:25:6b:83:77:29:4e:2d:28:f0:f2:7c:f6:
65:3e:f2:93:65:14:c6:34:f0:69:47:75:1b:d7:6a:
61:dc:97:71:7a:d8:ad:6e:70:6c:2a:bb:2c:6a:26:
66:6c:8e:1e:c5:6f:83:10:e3:9b:79:cb:93:1b:14:
d0:ac:39:14:4c:8d:c9:2f:d9:98:40:9f:a7:48:39:
44:96:ac:ad:21:d7:cc:77:cd:b3:69:8c:e2:b2:34:
c3:4d:dc:9c:53:14:4b:19:d4:99:1f:a7:b8:5b:e6:
c4:3f:9d:6c:03:f0:a8:e8:a2:80:23:7a:2f:62:54:
db:b3:5d:63:68:2d:20:8d:b6:b2:22:46:cf:b7:da:
86:0f:a1:25:a6:f7:b8:4a:a2:fe:e0:95:2d:82:b0:
fa:cd:eb:80:35:65:30:c2:2f:75:7b:72:92:1a:8a:
b7:35:c9:d3:f0:3c:9f:92:39:18:b2:b1:8f:6f:fa:
a1:c4:c0:b1:40:e8:ab:8e:bb:ef:0a:ee:41:81:2b:
73:dc:8d:d8:81:89:1b:db:d9:a1:61:6f:1b:ec:8d:
fb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B9:12:B7:1B:8D:06:AE:DE:7E:56:C0:AE:5F:53:25:01:06:E1:C7
X509v3 Authority Key Identifier:
keyid:52:EF:F3:85:D4:B4:82:15:D8:05:B5:88:A2:70:58:29:D4:62:11:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uu_zhdS0ghXYBbWIonBYKdRiEXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:1b:1c:39:dc:cc:5c:0a:12:4f:3b:7b:7c:ef:e7:08:0b:8d:
a8:a5:41:dc:f3:dc:89:fa:0b:73:d2:8f:1f:89:24:17:1b:c8:
b3:3c:b6:ce:4d:64:b6:72:cb:8c:03:84:94:31:a0:ee:69:15:
60:1a:cb:39:08:aa:d1:dc:a1:08:9d:08:11:7d:30:87:08:1d:
50:c2:4d:98:c1:ee:75:f9:9f:d7:4c:4a:65:b3:fb:cf:74:6a:
a1:0e:01:90:15:a2:78:8d:e4:8c:80:53:96:c0:b2:94:f3:7f:
15:07:e4:10:75:d6:5f:13:3f:a7:4e:d5:76:5f:18:bc:5a:b1:
08:b6:74:86:b7:67:55:13:f5:8e:6d:b9:de:2e:38:a0:35:84:
14:18:e9:d4:d1:17:2b:57:62:e9:a7:ba:96:cd:33:ac:70:6c:
57:70:72:37:71:9a:0d:19:01:31:65:f8:10:5d:e9:11:21:1c:
96:d8:b3:f9:92:cd:fc:16:7f:d4:e2:33:c4:f2:c2:8f:94:aa:
b9:ab:76:75:3f:b3:8a:a0:d0:d2:54:9a:e4:f6:e9:59:2b:4a:
09:cc:1d:4b:a7:a2:c5:35:17:08:ca:52:b0:7b:eb:2c:8e:59:
50:b9:f4:e7:b5:08:38:24:f8:c4:93:4d:7b:89:ce:3b:4a:09:
d3:51:0b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:20 2025 by rpki-client