Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
File: 0ur89N6SC5zmRdbmlt8IqosFUZs.mft (raw, json)
Hash identifier: Z1rFpO678QNFRU6n7ip1Zd17ClfEJjGLm0HcDRBYbbw=
Subject key identifier: 46:50:58:5E:D8:7F:1B:46:CD:A6:29:85:C5:88:63:A7:09:32:BF:F2
Authority key identifier: D2:EA:FC:F4:DE:92:0B:9C:E6:45:D6:E6:96:DF:08:AA:8B:05:51:9B
Certificate issuer: /CN=d2eafcf4de920b9ce645d6e696df08aa8b05519b
Certificate serial: 019A0290FF23610967A56C28117060E8C9B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
Manifest number: 13E7
Signing time: Mon 20 Oct 2025 17:00:48 +0000
Manifest this update: Mon 20 Oct 2025 17:00:48 +0000
Manifest next update: Tue 21 Oct 2025 17:00:48 +0000
Files and hashes: 1: 0ur89N6SC5zmRdbmlt8IqosFUZs.crl (hash: ANyq6aWXv5ERbUq6E8/6OMK3a28JOFRkQinnN25664s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 15:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:90:ff:23:61:09:67:a5:6c:28:11:70:60:e8:c9:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2eafcf4de920b9ce645d6e696df08aa8b05519b
Validity
Not Before: Oct 20 17:00:48 2025 GMT
Not After : Oct 21 17:00:48 2025 GMT
Subject: CN=4650585ed87f1b46cda62985c58863a70932bff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8a:c6:56:b0:ba:44:73:0d:46:b2:4a:f1:e7:
de:9f:6a:4a:29:bb:70:b0:d3:ba:b0:ae:b5:92:9e:
3a:51:cb:a8:77:b9:66:9e:67:e9:c9:2a:6d:2b:25:
6d:40:59:03:23:0e:62:14:f4:5c:e9:ff:72:ef:92:
b5:ac:1c:de:7b:78:84:6a:ab:fa:2c:2d:c8:5d:b4:
8a:e7:cd:73:f2:21:7c:d0:0d:d7:57:2b:5a:74:4d:
2b:c6:50:71:8c:49:30:3c:cc:de:10:25:7a:0b:b1:
cc:db:47:2b:d4:ac:30:3a:b6:4b:a1:72:f1:21:0d:
57:01:58:79:38:79:33:33:93:e9:69:8c:41:bf:5d:
78:d9:0a:8d:b8:82:8d:d8:e0:8f:1d:af:93:8d:61:
15:6c:cb:22:f5:91:64:a6:fb:8c:99:01:b7:d5:f2:
e2:1d:45:f0:d1:3d:5e:c9:b8:ee:df:ad:ac:f9:00:
2f:ac:56:26:77:5e:90:3c:a0:1b:7b:30:21:c9:09:
25:a6:cf:4a:07:c7:ac:f3:d4:98:c0:ad:c9:52:ce:
7c:77:84:c1:75:7f:9e:1b:af:95:e8:0c:bc:31:35:
7b:7e:d4:51:4f:04:04:14:64:7c:e1:7d:bf:03:89:
cd:c2:be:c4:33:2a:05:38:7d:f7:49:c8:06:ac:9d:
28:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:50:58:5E:D8:7F:1B:46:CD:A6:29:85:C5:88:63:A7:09:32:BF:F2
X509v3 Authority Key Identifier:
keyid:D2:EA:FC:F4:DE:92:0B:9C:E6:45:D6:E6:96:DF:08:AA:8B:05:51:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f7:ba:fe:dd:69:7d:e9:9c:ec:87:de:ab:6b:7c:77:83:e1:
6f:7c:34:e7:83:c7:06:26:33:9c:e7:7a:69:39:50:48:5f:6f:
94:23:58:2c:f9:e6:02:88:a4:a6:99:36:8f:31:9e:77:f2:3a:
0b:7e:1a:6c:04:6f:6e:5d:7f:70:04:47:38:8d:d1:95:e9:6d:
6e:63:b7:42:bd:42:54:71:97:29:59:6f:2c:7a:c1:ff:59:9c:
13:8d:0d:6e:db:5f:de:6c:fe:96:27:d4:e4:28:f0:c2:2f:e5:
4a:25:e0:74:65:76:92:dd:3a:e3:64:85:fd:b7:70:a9:10:34:
24:55:b2:a4:a9:70:0f:29:32:00:cd:b9:5d:8c:4b:44:72:5a:
65:4a:8e:b6:90:97:fb:89:64:c6:35:d5:1d:bc:ec:a9:ad:6a:
3a:76:85:2a:96:0a:ce:f9:db:61:47:4a:e6:2b:56:84:97:b1:
18:1c:d5:0b:b4:67:1c:09:89:c3:19:b9:28:e0:51:dc:72:81:
ce:55:e9:6d:00:f2:05:37:83:d4:79:17:64:7b:81:55:ab:95:
e6:7c:7b:95:36:73:8c:f1:88:8b:69:82:c9:79:4a:81:fe:8a:
d3:d4:41:24:53:5a:33:c4:1c:4b:5c:30:d4:b0:0b:47:f0:b5:
36:14:e1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:41:26 2025 by rpki-client