Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft
File: Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft (raw, json)
Hash identifier: Yb0MeQUwFoQX8VqlzYu9alqTX5fojy8azw6uBPDlIU8=
Subject key identifier: 66:8C:83:41:97:FD:E2:82:5B:35:2A:C3:CD:FE:7A:E8:B2:6D:EC:D4
Authority key identifier: 53:2E:21:C9:DF:6D:52:FD:AC:4A:E3:B0:C8:73:96:8E:F0:9E:B2:7C
Certificate issuer: /CN=532e21c9df6d52fdac4ae3b0c873968ef09eb27c
Certificate serial: 0199FBEAB91F50380E3532606F20DDF8CD11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uy4hyd9tUv2sSuOwyHOWjvCesnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:01:27 +0000
Manifest this update: Sun 19 Oct 2025 10:01:27 +0000
Manifest next update: Mon 20 Oct 2025 10:01:27 +0000
Files and hashes: 1: Uy4hyd9tUv2sSuOwyHOWjvCesnw.crl (hash: etW0Mtom+/ghYxvZkrlu1qsyWDe2l0CLXseFixfMAm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uy4hyd9tUv2sSuOwyHOWjvCesnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:b9:1f:50:38:0e:35:32:60:6f:20:dd:f8:cd:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=532e21c9df6d52fdac4ae3b0c873968ef09eb27c
Validity
Not Before: Oct 19 10:01:27 2025 GMT
Not After : Oct 20 10:01:27 2025 GMT
Subject: CN=668c834197fde2825b352ac3cdfe7ae8b26decd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1b:3e:01:e6:e1:99:95:57:99:8e:41:04:91:
e2:a1:6f:7a:4a:4b:87:0d:b7:ae:80:14:d0:73:69:
81:f6:93:f1:9d:62:72:63:d0:0f:a5:be:bf:29:2a:
8f:ca:e7:9d:e5:cd:7c:48:46:e6:d3:f9:a2:b6:7d:
b7:ab:3d:c5:bc:b5:47:8c:35:6d:c3:de:25:b3:bb:
19:74:61:0d:f8:b6:fa:dd:54:e7:72:bf:a5:e7:97:
e0:48:f2:ab:f0:f3:40:80:a6:57:34:c8:cb:6f:50:
16:23:50:55:94:f7:9d:75:11:10:25:45:c8:3d:5d:
f1:74:f4:4f:94:7e:99:c0:92:17:48:2e:7f:ec:83:
a8:ff:d7:00:92:9a:d3:a7:20:5f:82:18:b2:27:98:
9e:4c:74:62:1e:55:d6:da:09:00:7f:62:fc:c1:f4:
f5:3c:6c:68:3c:96:dd:ab:78:1f:cd:f2:59:dd:cb:
24:77:d4:4c:21:26:3e:5b:d4:fe:4e:83:36:86:75:
49:d6:78:d0:c0:92:dc:03:9c:0b:bd:31:50:47:84:
46:e5:73:3c:13:69:60:f7:dd:57:7d:38:2c:93:e2:
e3:23:16:4d:1c:62:da:dc:3f:03:bb:65:3f:0d:d3:
9c:dc:33:1d:ce:b5:ef:ba:24:71:36:d2:87:66:23:
52:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8C:83:41:97:FD:E2:82:5B:35:2A:C3:CD:FE:7A:E8:B2:6D:EC:D4
X509v3 Authority Key Identifier:
keyid:53:2E:21:C9:DF:6D:52:FD:AC:4A:E3:B0:C8:73:96:8E:F0:9E:B2:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uy4hyd9tUv2sSuOwyHOWjvCesnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:7c:40:2c:fe:28:e6:ab:cd:e9:c6:a9:82:4f:bd:d7:47:b0:
f7:e2:8f:fe:3d:bc:2e:90:f8:08:98:32:a0:f4:4b:c6:f8:13:
91:62:e1:e2:1d:97:54:46:51:ca:5a:9f:dc:96:a9:ff:31:6c:
bd:b4:63:90:bc:ab:e4:04:63:10:e6:18:56:bc:1c:e4:d1:7a:
2d:d3:8d:77:fc:11:eb:7d:32:e9:9d:40:df:a5:02:99:5f:d2:
ad:c0:fb:4c:22:5e:ef:2b:ac:c4:6d:c3:db:65:11:35:81:30:
8f:ad:58:1c:7c:d8:d2:20:84:44:13:f8:13:2a:0a:83:15:49:
a0:95:32:4d:79:fb:da:43:88:3f:ee:4d:f1:1e:3f:32:70:91:
ae:0c:fd:a0:86:f2:87:10:a2:81:fa:ff:bc:29:4f:25:9c:30:
49:13:c2:9d:ff:67:da:9e:fa:9f:95:5c:ed:d5:f3:a2:1c:cd:
0d:e9:a9:60:4d:c8:14:09:c1:90:02:89:7c:49:63:1d:98:12:
10:9f:9e:b8:9e:89:e7:94:68:47:5b:37:5a:63:7c:03:36:b3:
50:1a:45:a6:12:19:3d:80:4f:5b:b5:46:64:79:36:d3:bb:0b:
92:92:35:e8:1a:25:f4:fe:d8:dd:c0:ae:26:ba:e7:53:dd:ce:
db:e9:d3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:54:09 2025 by rpki-client