Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft
File: UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft (raw, json)
Hash identifier: DwT9ErWiih4qJQu97IvLqFMjjCgViHov1SVpp3OaYDk=
Subject key identifier: C3:CE:89:64:A9:3C:1B:4E:E8:C2:01:8A:15:42:48:03:CB:A6:46:6B
Authority key identifier: 50:09:7F:B5:8C:6F:6A:44:1D:8E:D7:50:00:77:3B:4D:09:85:67:46
Certificate issuer: /CN=50097fb58c6f6a441d8ed75000773b4d09856746
Certificate serial: 0199FCFD35F14455DF962B1C181DC3721F6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft
Manifest number: 0B04
Signing time: Sun 19 Oct 2025 15:01:16 +0000
Manifest this update: Sun 19 Oct 2025 15:01:16 +0000
Manifest next update: Mon 20 Oct 2025 15:01:16 +0000
Files and hashes: 1: UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl (hash: Aqh9u+bOYN/GpyET7D63xZmGSbP9Th8R3a47NBaY/GE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:35:f1:44:55:df:96:2b:1c:18:1d:c3:72:1f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50097fb58c6f6a441d8ed75000773b4d09856746
Validity
Not Before: Oct 19 15:01:16 2025 GMT
Not After : Oct 20 15:01:16 2025 GMT
Subject: CN=c3ce8964a93c1b4ee8c2018a15424803cba6466b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b6:23:f1:01:ed:92:0c:77:76:cd:ca:2c:f5:
80:91:e1:9c:3a:c0:0e:f6:e8:f5:d3:3e:8d:64:b8:
8b:f6:f1:f5:07:42:4a:7c:2e:25:71:63:64:06:1d:
c9:f1:cc:30:4a:4a:64:04:3e:c3:46:ae:cd:c7:b6:
86:da:61:c2:36:63:4f:a3:c7:8e:55:3d:28:c1:3e:
5b:23:09:b2:1e:98:96:ec:06:ba:43:b4:a7:c0:ce:
d3:20:4e:cc:7e:19:11:0e:16:f3:ef:2c:cc:51:18:
05:e2:36:f9:5f:c7:e2:f7:6c:31:88:0e:15:ee:ec:
67:b6:4d:68:f4:3c:2e:63:e6:15:66:ec:20:f5:6b:
8a:53:e5:85:80:cd:58:3f:ee:ee:e4:44:4c:20:b5:
ba:f7:76:a4:b8:8a:ff:62:83:18:58:7f:6a:1c:63:
4b:a3:5a:35:b9:cb:32:da:79:b5:09:45:1e:ed:99:
64:16:0e:e3:80:77:3e:2f:ca:19:fc:6d:6e:f1:a5:
85:e7:b2:d8:ca:20:3b:01:ca:66:41:9a:01:65:72:
94:a4:8a:88:b6:d2:52:f3:97:bc:23:fe:f5:88:c5:
bc:d8:5d:5d:5f:ca:96:13:1b:71:74:66:7a:e1:65:
0a:ad:ac:06:1b:12:1e:c8:80:5b:d2:b7:84:b2:2b:
e6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CE:89:64:A9:3C:1B:4E:E8:C2:01:8A:15:42:48:03:CB:A6:46:6B
X509v3 Authority Key Identifier:
keyid:50:09:7F:B5:8C:6F:6A:44:1D:8E:D7:50:00:77:3B:4D:09:85:67:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2e:ee:91:ba:40:82:2d:85:ee:24:ee:74:a7:29:c4:f0:99:
89:fa:3e:83:79:1f:50:b8:70:00:12:4c:b4:24:ce:21:0b:3c:
7e:6a:98:43:76:ab:f9:3f:a1:29:61:81:57:f9:eb:28:45:e7:
82:6d:31:d1:75:32:15:4c:05:21:71:d0:7c:2c:19:1a:0e:91:
6e:7a:66:de:07:9c:54:81:97:e1:c6:7a:6d:15:17:c4:1d:85:
ec:32:74:49:2c:2c:41:10:b4:2e:f6:e1:e0:ec:30:73:b3:62:
fb:7e:11:5d:d7:30:12:fe:ff:ba:5a:36:58:aa:c4:89:b3:b2:
41:6b:00:b5:26:f9:8d:75:24:f3:7c:09:c5:87:a6:3d:b2:ac:
25:5d:aa:b7:4a:e4:0e:f2:ba:1d:ce:89:13:de:e7:8f:1a:37:
68:e1:7a:ba:fc:ac:bc:2c:e6:ea:6a:e8:6f:ca:28:4b:d8:f7:
b1:fd:45:72:3a:f9:69:db:23:9a:e5:4c:23:f7:9e:d5:33:88:
25:43:bf:6c:2b:a7:7a:14:29:76:6a:88:c8:3c:ca:c5:ee:10:
64:70:46:ce:e4:ee:e1:fa:c5:81:3b:29:63:cf:85:97:e0:ff:
c0:bd:c2:f9:de:4b:26:cb:ab:4b:24:0f:2d:84:23:3b:55:4c:
d3:c7:55:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:40 2025 by rpki-client