Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
File: Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft (raw, json)
Hash identifier: Iro9+T64eH2Jh/r4XdbCweGTfYkswQvDMQ0iDKpwbiI=
Subject key identifier: A5:33:56:FB:55:28:CF:7A:A9:18:9C:5A:E1:BD:25:E2:F9:85:67:03
Authority key identifier: 51:FE:4D:48:AA:01:3D:40:E0:6C:31:2F:F7:10:48:9B:20:DF:E0:7F
Certificate issuer: /CN=51fe4d48aa013d40e06c312ff710489b20dfe07f
Certificate serial: 0199FBEA9689BBFC9C658CEB03ECCE99DDA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
Manifest number: 0DC7
Signing time: Sun 19 Oct 2025 10:01:19 +0000
Manifest this update: Sun 19 Oct 2025 10:01:19 +0000
Manifest next update: Mon 20 Oct 2025 10:01:19 +0000
Files and hashes: 1: Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl (hash: 0luXZgMo5z4oHSK7u2lWImCTiKPscNvCr/nnZ9UzlHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:96:89:bb:fc:9c:65:8c:eb:03:ec:ce:99:dd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51fe4d48aa013d40e06c312ff710489b20dfe07f
Validity
Not Before: Oct 19 10:01:19 2025 GMT
Not After : Oct 20 10:01:19 2025 GMT
Subject: CN=a53356fb5528cf7aa9189c5ae1bd25e2f9856703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:70:25:aa:38:b6:2b:b6:1c:fd:a5:b6:12:3a:
e0:73:a1:b1:99:db:44:3a:ca:a9:49:29:23:b4:b7:
46:ef:d4:09:8f:fd:fe:24:ae:02:62:88:ec:8f:1e:
b0:bc:e2:f9:44:67:cd:fd:0f:1f:bf:6e:b0:e4:c5:
89:56:cf:72:f9:ee:01:3c:61:96:8b:c1:f2:e1:25:
33:d7:b9:3c:17:ee:8f:c7:f1:f8:37:02:f2:94:a5:
bf:f4:ae:e0:f6:1a:d8:1c:60:43:37:e4:c3:24:09:
9f:af:e9:74:27:06:bd:e6:36:55:f6:83:79:b8:3d:
b4:31:d5:3b:f8:87:ea:7e:6a:28:86:e2:ba:e2:d5:
92:23:2d:eb:6e:93:1e:ff:2d:f6:ef:19:40:3d:15:
93:26:79:dc:8f:a6:19:6d:9b:31:b9:fc:34:a5:67:
53:76:5a:f0:f9:65:ae:89:d9:22:4e:10:61:74:8b:
48:4e:97:bb:6c:ac:f0:3f:e0:fa:52:fd:a5:4a:41:
f6:d0:1e:67:94:62:d7:f4:2b:cd:5a:32:83:db:1c:
ef:57:7d:c7:48:31:2c:e7:af:4a:9e:56:b4:78:2c:
6a:12:6f:d2:30:d2:1b:66:b9:f5:a2:2b:dc:f3:d0:
c7:cc:b9:10:0e:2f:b8:a9:aa:7f:fe:cf:30:bc:d7:
c6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:33:56:FB:55:28:CF:7A:A9:18:9C:5A:E1:BD:25:E2:F9:85:67:03
X509v3 Authority Key Identifier:
keyid:51:FE:4D:48:AA:01:3D:40:E0:6C:31:2F:F7:10:48:9B:20:DF:E0:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:40:23:97:fa:00:5f:0c:9e:4b:25:63:f2:2b:83:9b:50:97:
19:ee:68:b2:2b:27:e9:a8:eb:55:b6:33:ac:cb:c2:0b:d4:52:
13:23:4b:fd:2a:16:f2:52:8d:b2:54:6f:bb:c4:51:b6:5b:79:
9a:1e:03:7a:6b:7b:c5:af:5d:6f:03:b8:6b:75:65:0a:0c:b0:
6b:eb:c6:0b:54:73:80:20:2e:d1:0d:2f:fe:4d:41:0b:60:af:
21:1b:a0:93:b3:7d:57:fc:11:74:87:20:8f:df:8a:68:94:57:
3b:bb:76:13:93:d6:ee:ee:37:85:6d:23:95:fc:f0:02:e9:18:
52:e2:48:b3:d4:fc:03:d6:53:a6:1d:16:6c:0c:3c:7c:81:d0:
c0:89:9a:81:a9:92:8b:ea:61:11:69:9a:23:13:3e:9d:35:09:
1e:12:87:f2:4b:85:aa:9f:98:34:73:3d:39:c3:5f:2b:97:23:
63:0c:e2:d8:af:eb:c3:f8:05:78:fd:b7:cc:3d:8f:1f:61:a3:
71:58:f8:ac:f6:b7:b2:1d:a7:1f:fe:0a:93:7e:cb:81:84:a5:
96:6f:b0:ea:9e:d3:0d:d4:10:aa:f7:d1:85:31:d6:ac:6a:46:
21:5d:71:2b:70:c0:77:84:fd:7f:c0:0d:89:3a:be:ed:4b:09:
fd:37:e5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:42 2025 by rpki-client