Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
File: u_D5EC2y6-GvHQdRaEQ4anlj71w.mft (raw, json)
Hash identifier: JwZ154DBNndcIlQzWtdzY1DfHxa3mfmeKgdBMwZO3YM=
Subject key identifier: 72:CF:15:AB:7C:65:FC:04:D0:32:5C:7F:3D:16:47:D0:8A:4E:89:F3
Authority key identifier: BB:F0:F9:10:2D:B2:EB:E1:AF:1D:07:51:68:44:38:6A:79:63:EF:5C
Certificate issuer: /CN=bbf0f9102db2ebe1af1d07516844386a7963ef5c
Certificate serial: 0199FCFD520F75AF1B3AB25FC091BE506DBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
Manifest number: 05E3
Signing time: Sun 19 Oct 2025 15:01:23 +0000
Manifest this update: Sun 19 Oct 2025 15:01:23 +0000
Manifest next update: Mon 20 Oct 2025 15:01:23 +0000
Files and hashes: 1: u_D5EC2y6-GvHQdRaEQ4anlj71w.crl (hash: mtV7yi5S1QahMd0coCYur/ro8wDsB2MEaDC7ohbuLxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:52:0f:75:af:1b:3a:b2:5f:c0:91:be:50:6d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf0f9102db2ebe1af1d07516844386a7963ef5c
Validity
Not Before: Oct 19 15:01:23 2025 GMT
Not After : Oct 20 15:01:23 2025 GMT
Subject: CN=72cf15ab7c65fc04d0325c7f3d1647d08a4e89f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:35:5f:73:a1:d5:1a:72:01:fa:3e:56:0c:0b:
4f:23:01:d3:ea:c4:66:03:89:30:64:e0:9a:03:17:
44:39:98:69:5b:8d:ec:a4:b1:4e:ed:ff:48:44:83:
d9:3d:01:79:47:28:eb:2e:0f:17:cd:f5:a0:be:cd:
27:46:88:d8:73:0a:b4:89:1e:2f:13:a3:8b:71:01:
80:e0:0b:64:5b:09:0b:83:de:2e:78:8c:c0:71:c2:
61:1a:24:11:f6:a9:2f:68:2c:c5:3e:70:bb:89:59:
75:57:58:bb:ef:4a:41:f3:80:f6:19:f7:c0:9d:fb:
39:5d:4c:26:1f:0c:ea:88:4c:be:80:f4:92:5a:a1:
6f:75:e5:eb:13:d8:b3:ee:e4:0e:24:27:07:28:ed:
57:b4:b0:7f:f6:ce:48:d0:94:b0:7a:00:7c:a0:d3:
15:13:ca:5c:0a:9c:5f:db:24:2d:2d:4d:de:c8:47:
2a:e1:70:d8:99:fe:9a:47:73:63:de:50:8d:ce:a5:
1e:40:e9:8f:06:42:b2:16:78:20:5e:44:d9:80:23:
50:7e:67:10:3c:8c:98:97:75:1f:29:d9:27:53:5b:
c0:4c:3a:e7:ba:0e:05:58:6f:8a:05:6d:01:42:df:
87:60:2b:67:62:db:32:25:ca:61:e9:cf:24:d6:12:
93:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CF:15:AB:7C:65:FC:04:D0:32:5C:7F:3D:16:47:D0:8A:4E:89:F3
X509v3 Authority Key Identifier:
keyid:BB:F0:F9:10:2D:B2:EB:E1:AF:1D:07:51:68:44:38:6A:79:63:EF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ea:70:7c:3f:89:11:f4:c7:66:00:37:0b:42:38:9a:02:21:
07:f2:ca:a0:8e:16:6e:03:1a:19:93:6a:b4:33:44:7e:7e:b3:
4c:69:fc:e7:af:71:a1:22:00:10:00:6c:89:e8:da:6b:94:eb:
2c:d5:e7:49:be:17:62:55:ba:fc:ee:c9:cd:46:d9:ba:4e:e2:
81:6f:d9:22:37:b6:44:53:41:2a:3b:5b:c8:5d:f0:5e:4e:ba:
64:6a:c5:a4:99:9c:d2:81:43:20:9d:52:5a:66:71:3f:07:20:
b4:9b:78:74:f2:ba:96:4d:5b:18:8f:f8:fd:7e:02:79:1c:b5:
3b:63:2a:ad:75:e0:55:c7:69:e2:2b:38:c1:27:80:3b:e1:35:
76:de:0c:0c:c4:1e:6f:c1:43:1c:80:58:41:fb:86:4b:5a:cf:
99:38:78:55:d2:9c:13:ae:08:3b:81:5a:3b:88:f4:ec:c7:b7:
2f:ff:f1:c2:f5:af:53:a4:7c:90:5f:5d:85:bb:f9:f2:1a:92:
bd:3b:5b:f4:54:56:a4:5d:bf:e0:9e:0b:a5:a7:b4:d5:84:98:
ec:06:d1:2c:81:ec:9e:c5:f5:23:bc:93:a4:06:ce:7b:2d:2b:
16:58:33:2b:08:57:4c:d1:b2:dd:a8:7e:32:e2:83:e2:89:a6:
2b:cd:a1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:24 2025 by rpki-client