Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft
File: UZxxlGfHXvlxe8YrftrpALovRiU.mft (raw, json)
Hash identifier: zvwXWvGBiB/Tvw+54PAGwAZ1Xe68GYcHsqPQ+Qv+X0A=
Subject key identifier: 88:C3:AC:7F:C2:C4:02:95:96:E4:3E:2A:25:A7:5A:F0:86:C8:52:BA
Authority key identifier: 51:9C:71:94:67:C7:5E:F9:71:7B:C6:2B:7E:DA:E9:00:BA:2F:46:25
Certificate issuer: /CN=519c719467c75ef9717bc62b7edae900ba2f4625
Certificate serial: 0199FBEAD32FACEE595DA885EA5EEA5D6761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZxxlGfHXvlxe8YrftrpALovRiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft
Manifest number: 0118
Signing time: Sun 19 Oct 2025 10:01:34 +0000
Manifest this update: Sun 19 Oct 2025 10:01:34 +0000
Manifest next update: Mon 20 Oct 2025 10:01:34 +0000
Files and hashes: 1: UZxxlGfHXvlxe8YrftrpALovRiU.crl (hash: cAK4hvF3BIiWAKvTk7/bscZvt21F7DhpBgw+9GSrLXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZxxlGfHXvlxe8YrftrpALovRiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d3:2f:ac:ee:59:5d:a8:85:ea:5e:ea:5d:67:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519c719467c75ef9717bc62b7edae900ba2f4625
Validity
Not Before: Oct 19 10:01:34 2025 GMT
Not After : Oct 20 10:01:34 2025 GMT
Subject: CN=88c3ac7fc2c4029596e43e2a25a75af086c852ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:19:34:5e:8d:df:22:29:24:6d:4c:6a:ff:4a:
b8:d0:2e:d6:93:c9:cb:23:94:2c:f5:35:3a:47:a3:
ce:fc:6b:a0:74:cb:ee:c8:57:60:2a:a4:d7:2f:5d:
e2:58:90:2a:57:2d:8f:7e:1b:b0:7f:c5:5d:af:eb:
28:ce:28:7b:fe:ca:32:b8:c5:94:2c:df:c5:67:7d:
2f:9e:c1:80:e3:51:91:ac:8e:4c:9e:62:52:95:5f:
c0:a7:8c:a6:79:77:3a:a2:91:89:d3:eb:a8:8f:3c:
09:f2:38:e4:7a:14:8c:1e:0e:7c:ae:fa:3d:d1:60:
c9:6d:13:d2:17:1c:ac:e3:19:7c:9e:a1:f1:b2:dc:
b4:0d:fc:96:5b:df:e8:3d:a5:8f:28:34:33:3c:dd:
2d:e2:88:a1:5a:80:93:b8:ef:bf:f0:d6:1e:36:e4:
31:35:38:6e:4a:80:4c:bd:02:a2:63:60:fd:50:98:
38:69:98:ae:f9:c4:f7:a2:89:43:44:f7:a4:96:fc:
5a:d4:b9:a5:41:ff:4e:e3:69:86:36:05:fc:9e:53:
93:1c:23:0d:c9:d5:11:88:43:ea:d7:9e:c0:2a:6f:
40:86:49:35:83:db:e7:dd:52:da:21:39:32:04:24:
1a:be:81:3c:21:ad:aa:35:0d:7d:42:26:b4:06:a2:
17:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C3:AC:7F:C2:C4:02:95:96:E4:3E:2A:25:A7:5A:F0:86:C8:52:BA
X509v3 Authority Key Identifier:
keyid:51:9C:71:94:67:C7:5E:F9:71:7B:C6:2B:7E:DA:E9:00:BA:2F:46:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZxxlGfHXvlxe8YrftrpALovRiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:cc:10:d3:3e:c4:1e:b7:7c:2c:84:32:c8:8b:a3:99:37:42:
15:ec:d1:94:e0:f4:a6:54:a4:d4:52:d7:5e:b3:1e:24:e9:46:
ad:f7:96:38:fd:a4:f8:18:77:7c:ed:bb:f6:3a:ff:9a:e9:3d:
78:50:2c:89:db:04:cb:87:1c:c8:56:70:b9:f8:2b:19:89:53:
93:5d:a4:c3:4e:94:68:f7:12:37:c4:6e:7e:9a:47:62:dd:b5:
15:90:94:7b:73:1e:28:2a:c1:5d:0f:15:0e:94:da:d2:ab:9c:
6b:9b:a7:3c:21:aa:cf:6e:d1:6a:68:91:ee:a5:df:3b:cc:57:
88:a8:a7:99:19:d8:73:b1:09:ae:6a:d9:93:00:29:98:0a:6f:
13:4a:e2:8b:96:47:83:29:a5:af:2e:7c:6b:85:ba:4f:cf:8c:
1a:c7:03:86:ee:a5:93:2a:20:c7:27:0b:88:ad:ed:11:f4:70:
97:a1:e8:e9:34:ed:98:d9:04:81:5e:9c:fe:8c:91:7f:0c:23:
b1:45:a3:75:82:95:77:ed:90:be:f1:27:bc:14:65:b0:74:dd:
85:12:65:79:c5:34:87:8c:d8:0e:4b:f3:87:d6:59:89:bb:d3:
49:6b:88:22:ad:60:66:3e:ab:2a:bc:38:ef:f3:d8:00:c0:ba:
e8:0a:da:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:31 2025 by rpki-client