Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
File: UrDyNFHcBfp-z50etB3T0TdWRTs.mft (raw, json)
Hash identifier: 5PL2vTHXyuSUKhP4NmIWO27A/QgbjSiS7EBkE84oYV4=
Subject key identifier: A7:66:B8:BE:D6:C8:4B:47:E3:FE:99:62:E8:0A:3C:8D:AD:38:98:15
Authority key identifier: 52:B0:F2:34:51:DC:05:FA:7E:CF:9D:1E:B4:1D:D3:D1:37:56:45:3B
Certificate issuer: /CN=52b0f23451dc05fa7ecf9d1eb41dd3d13756453b
Certificate serial: 0199FC5917A93A1D770EDB6AF3206892D962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 12:02:01 +0000
Manifest this update: Sun 19 Oct 2025 12:02:01 +0000
Manifest next update: Mon 20 Oct 2025 12:02:01 +0000
Files and hashes: 1: UrDyNFHcBfp-z50etB3T0TdWRTs.crl (hash: Knm1puNZVlPWBuVZrLlRaEyK4VzA8/3wDP9g6WdMjUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:17:a9:3a:1d:77:0e:db:6a:f3:20:68:92:d9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b0f23451dc05fa7ecf9d1eb41dd3d13756453b
Validity
Not Before: Oct 19 12:02:01 2025 GMT
Not After : Oct 20 12:02:01 2025 GMT
Subject: CN=a766b8bed6c84b47e3fe9962e80a3c8dad389815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e0:68:ee:3d:b6:76:20:6b:49:ed:6b:d8:38:
1c:7d:e4:d6:16:4f:5f:7b:47:ad:cd:b7:16:0d:5b:
d7:cc:8d:cd:6d:dc:5c:a7:45:19:6b:9b:b8:b2:ef:
d9:e5:81:b7:93:e5:11:78:3d:d7:9f:2e:a6:a7:68:
04:42:f1:28:1b:36:3b:6c:ce:6c:47:62:d4:3a:89:
a8:71:d3:ce:29:02:cd:c8:a7:12:0e:75:51:c6:08:
b4:99:98:d0:71:1b:67:12:2f:b2:36:ea:99:39:44:
2c:aa:b5:67:dc:60:c3:8d:7c:4f:07:2e:67:6c:1d:
16:66:47:b2:db:bc:b5:12:92:05:25:46:38:c7:45:
cc:e4:c8:d2:f6:4b:9e:52:67:d4:df:18:1f:0c:9b:
7a:1c:a5:53:41:3a:fb:d1:d7:d6:05:c3:02:28:dc:
5c:15:82:15:ab:aa:f3:46:9b:70:6c:36:5d:22:f2:
35:a1:29:75:d3:54:7d:b6:d7:4c:45:06:a6:aa:a2:
a5:b9:8a:45:31:b3:2d:7c:4d:42:72:bd:b1:4a:42:
2f:e6:8a:e1:4d:ae:81:19:5c:83:5a:46:51:fc:61:
da:81:03:46:c5:18:a9:b6:e4:08:a2:22:7c:82:cc:
6c:a9:14:22:0f:31:61:ef:da:04:55:59:d2:b7:e4:
52:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:66:B8:BE:D6:C8:4B:47:E3:FE:99:62:E8:0A:3C:8D:AD:38:98:15
X509v3 Authority Key Identifier:
keyid:52:B0:F2:34:51:DC:05:FA:7E:CF:9D:1E:B4:1D:D3:D1:37:56:45:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b8:ff:29:cb:48:ce:92:7e:62:bb:21:0f:0d:8c:4d:09:a6:
af:ff:32:90:c8:9f:8d:db:8e:ac:ee:06:b6:68:1e:68:2f:0f:
ee:0b:fc:7b:b9:09:ff:7e:91:11:2e:f1:5d:f5:ed:41:37:3c:
c1:6c:ba:6d:99:7a:86:42:75:4a:40:ea:f7:ca:47:5a:03:58:
d3:d2:04:9c:86:f1:5b:62:8d:27:9c:fa:23:3a:2e:1a:25:ad:
12:d6:7d:19:39:a5:85:bd:04:92:84:bd:91:a9:6a:a7:4d:81:
d0:a8:6f:39:09:2b:59:e6:35:48:3f:5a:dd:c1:99:fd:37:ec:
ac:1b:cd:d9:16:1a:15:30:9e:d7:53:7d:2e:57:4d:de:5a:5f:
59:d5:f4:6f:c4:78:41:71:30:6e:21:ed:fe:2d:6d:21:7f:b4:
cd:0f:6a:19:7e:66:ef:49:22:a7:cd:f6:b5:bb:f2:f2:9c:9b:
9d:26:a8:b2:01:47:d2:77:58:7d:91:49:57:70:6e:4b:63:75:
c8:69:80:ae:05:89:88:e8:c6:62:cb:f8:09:27:ce:a4:a8:87:
0a:63:ad:9a:b9:af:15:3f:2d:6f:da:52:76:ae:12:ba:47:ec:
79:fb:68:b4:05:43:77:a0:5e:4f:0d:f8:8c:9a:d4:2b:08:e9:
54:73:e3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:48 2025 by rpki-client