Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft
File: UJw4zD6qNVb6OaIvMNwbpINv6J8.mft (raw, json)
Hash identifier: gbLfC4pZkqgzwKuA3xgA7CYEu4KlIPCJKXWkH/aKyM8=
Subject key identifier: 83:C8:3C:F2:AB:4C:8A:D1:6B:4A:58:2C:8D:1C:4F:6B:6F:85:6E:A0
Authority key identifier: 50:9C:38:CC:3E:AA:35:56:FA:39:A2:2F:30:DC:1B:A4:83:6F:E8:9F
Certificate issuer: /CN=509c38cc3eaa3556fa39a22f30dc1ba4836fe89f
Certificate serial: 0199FBEC0FE6DF2970E91C8BA06B57119D87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJw4zD6qNVb6OaIvMNwbpINv6J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:02:55 +0000
Manifest this update: Sun 19 Oct 2025 10:02:55 +0000
Manifest next update: Mon 20 Oct 2025 10:02:55 +0000
Files and hashes: 1: UJw4zD6qNVb6OaIvMNwbpINv6J8.crl (hash: YSX2Ynftwr4CfIt3bxbjue8PP+vz3bpAmarB9cVjPkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJw4zD6qNVb6OaIvMNwbpINv6J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:0f:e6:df:29:70:e9:1c:8b:a0:6b:57:11:9d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509c38cc3eaa3556fa39a22f30dc1ba4836fe89f
Validity
Not Before: Oct 19 10:02:55 2025 GMT
Not After : Oct 20 10:02:55 2025 GMT
Subject: CN=83c83cf2ab4c8ad16b4a582c8d1c4f6b6f856ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b1:bb:6e:cb:fc:a8:aa:2d:4a:c1:e6:bb:60:
d2:5e:26:9f:f3:b0:0e:25:4e:2b:fa:34:39:6c:09:
c3:96:f1:7e:b4:85:d9:73:83:ee:64:ee:25:6b:2f:
7f:91:3e:22:f2:32:da:cc:d3:04:c0:a1:17:f9:dc:
fc:11:bc:70:29:ad:46:ad:13:13:db:42:0d:c8:22:
92:84:a4:52:6a:42:b8:2f:2a:c4:13:3a:24:83:34:
9f:22:f6:92:fb:d7:67:08:ca:f9:a1:c8:c7:60:47:
ed:5f:35:d4:bc:00:3e:2e:ca:27:fd:9f:97:39:fa:
fa:37:13:a2:26:8d:da:ee:7f:0d:1e:84:9f:8a:03:
58:75:15:a7:0a:7b:d3:47:1a:ff:7a:8d:df:01:18:
2d:e0:da:42:b4:15:0f:0d:89:bd:12:fa:31:d0:67:
26:57:c5:37:1b:75:5f:9c:b2:67:08:a4:1b:7f:87:
84:7a:78:57:30:05:28:f8:c1:6b:c9:9a:12:f2:ec:
3b:e8:2c:85:2a:10:cf:cc:72:57:41:28:da:51:58:
12:a3:0e:db:7e:b7:a2:87:15:41:1a:62:47:af:f9:
82:76:0c:6b:1d:53:c1:d6:6d:cd:e4:05:ce:17:f8:
06:7f:cd:a2:4c:91:c0:62:b3:03:1c:c9:25:f2:ff:
ed:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C8:3C:F2:AB:4C:8A:D1:6B:4A:58:2C:8D:1C:4F:6B:6F:85:6E:A0
X509v3 Authority Key Identifier:
keyid:50:9C:38:CC:3E:AA:35:56:FA:39:A2:2F:30:DC:1B:A4:83:6F:E8:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJw4zD6qNVb6OaIvMNwbpINv6J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:4a:d6:b9:f4:ff:ef:23:ca:4a:45:6d:2a:83:54:30:25:cb:
95:54:2a:58:90:1e:7c:47:4c:32:55:60:41:b6:a6:03:02:05:
75:6e:d6:ca:a4:98:75:9f:07:34:b2:7a:e6:52:71:d8:38:81:
a8:5e:f7:f9:57:87:24:42:4c:5b:43:6b:fa:3e:d2:70:25:5d:
06:da:9e:89:cf:5e:52:80:4c:32:24:07:c8:33:d8:10:b3:b5:
ee:61:b2:5b:df:04:72:6a:d7:ca:4c:7b:60:b0:2c:9c:7e:49:
a4:04:d4:ad:51:ab:cd:4a:6f:24:4c:82:b0:c1:d1:87:8f:55:
b5:e3:72:6b:a1:0c:d7:04:a9:9d:55:7c:d8:36:5a:a0:fb:99:
f1:42:73:ce:53:7b:70:98:92:4b:62:70:52:8d:93:1e:63:bd:
c5:ba:15:ce:62:c8:e4:3a:17:ac:96:e4:15:a9:40:63:17:88:
de:a6:e5:59:14:9c:9c:26:e6:e5:da:06:77:07:2e:fe:8b:2a:
d6:51:fb:75:2e:54:32:73:61:70:e1:fe:b0:7c:25:d8:b2:6b:
fd:6b:ba:d7:86:55:b1:59:65:2c:81:27:e6:5a:96:87:27:4a:
a7:ab:f5:dc:27:61:e4:e8:76:81:2c:40:66:66:9f:06:57:ca:
f5:44:6a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:00 2025 by rpki-client