Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft
File: UgO7TxlYEfjXcjygGgsv-963Whs.mft (raw, json)
Hash identifier: eg6qKY3P/pWkdVWLlpVX7QcHzUzKHZi0SYcQtrAcCAQ=
Subject key identifier: 60:27:08:96:AE:99:51:68:8E:92:2E:ED:00:D0:01:B4:9A:37:1F:C4
Authority key identifier: 52:03:BB:4F:19:58:11:F8:D7:72:3C:A0:1A:0B:2F:FB:DE:B7:5A:1B
Certificate issuer: /CN=5203bb4f195811f8d7723ca01a0b2ffbdeb75a1b
Certificate serial: 0199FE46BD06FC52878128C18B9B92D64DE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgO7TxlYEfjXcjygGgsv-963Whs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft
Manifest number: 0318
Signing time: Sun 19 Oct 2025 21:01:12 +0000
Manifest this update: Sun 19 Oct 2025 21:01:12 +0000
Manifest next update: Mon 20 Oct 2025 21:01:12 +0000
Files and hashes: 1: UgO7TxlYEfjXcjygGgsv-963Whs.crl (hash: M5z9BYJIsj0kU3UdD4fJT3MsyfgNBD+gogoDV77B+gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UgO7TxlYEfjXcjygGgsv-963Whs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:bd:06:fc:52:87:81:28:c1:8b:9b:92:d6:4d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5203bb4f195811f8d7723ca01a0b2ffbdeb75a1b
Validity
Not Before: Oct 19 21:01:12 2025 GMT
Not After : Oct 20 21:01:12 2025 GMT
Subject: CN=60270896ae9951688e922eed00d001b49a371fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2b:8b:6e:29:36:22:e0:d2:54:c1:9f:b7:38:
b0:1d:8d:15:6d:28:7e:fa:a0:ad:8c:99:ba:80:89:
e5:fd:8e:c1:4a:db:b7:26:db:d9:51:21:6a:ab:d3:
9f:0d:49:a4:8b:b2:10:e3:12:ca:30:f2:fc:66:c5:
72:c3:83:e9:e7:51:27:49:b0:4a:a9:4a:d6:05:20:
c4:c3:28:d7:f2:6a:33:3d:4c:8f:a9:2a:3c:3e:43:
43:1c:0a:c3:59:7b:a5:91:86:74:48:31:3e:8b:ee:
9b:d8:69:f4:a7:a5:43:3e:50:08:bc:34:1a:23:32:
59:7f:7a:22:6c:a1:7d:ee:0f:c7:b3:04:38:4e:7e:
89:47:f3:70:b6:14:3e:8c:d6:d2:e3:70:29:9c:c7:
b7:08:9c:85:8a:d7:52:ac:71:fa:f3:93:8f:f6:98:
73:49:f7:49:6d:1a:85:6f:14:73:1b:ec:35:e9:a0:
6b:67:0c:fd:2d:5f:e2:73:0d:c9:87:5f:57:e3:57:
e3:12:2b:cd:ef:5e:d3:ef:ec:8a:c8:7a:ab:f4:6e:
c1:fb:e0:32:ec:8b:99:78:d0:e4:0c:25:ea:31:f9:
a8:2b:bf:c2:d0:5a:ca:5a:00:34:e5:cf:cf:bc:37:
39:f0:b0:57:08:66:2e:20:11:d6:a5:d7:35:ca:d7:
40:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:27:08:96:AE:99:51:68:8E:92:2E:ED:00:D0:01:B4:9A:37:1F:C4
X509v3 Authority Key Identifier:
keyid:52:03:BB:4F:19:58:11:F8:D7:72:3C:A0:1A:0B:2F:FB:DE:B7:5A:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgO7TxlYEfjXcjygGgsv-963Whs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:4a:5c:5a:e3:87:d6:e3:86:c3:e3:35:79:c4:ed:ea:bc:95:
e5:d3:f2:cc:f2:88:18:3c:58:ca:6f:9c:cd:3c:a5:6e:20:41:
39:dd:af:ba:2c:c5:3f:78:47:e3:c4:f5:c2:00:84:de:0b:de:
61:a7:2a:f3:d9:b0:c1:52:dd:22:ed:07:52:92:05:63:21:b7:
6e:75:40:f6:09:34:79:a4:56:50:91:9b:0d:35:3a:65:e5:1e:
d5:18:84:f9:34:c5:c7:4b:26:72:f4:ae:52:67:52:5f:3c:07:
7a:24:e2:98:23:45:bd:fc:a1:01:41:67:4e:71:c2:69:92:54:
e2:c9:3a:08:7d:43:d6:bd:ad:b0:fb:d6:e0:43:ec:41:ca:47:
30:61:d2:83:71:42:30:d0:67:23:fb:cf:83:b5:54:b3:03:44:
75:40:49:4e:d7:98:ca:78:e7:4d:cf:58:ca:31:69:9e:0f:2a:
a1:15:2b:93:26:17:05:21:be:ba:2f:4a:2e:f0:9c:7d:54:ba:
02:45:6a:53:83:31:9b:db:ec:7d:37:01:8d:e6:00:97:d3:38:
12:34:83:02:19:6b:e2:89:3d:27:6a:e7:42:06:e3:da:c2:b2:
09:cf:c1:d7:9b:24:bf:9c:80:12:5f:f9:40:54:fb:12:2c:87:
89:21:d0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:15:05 2025 by rpki-client