Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft
File: Uuopd4vrKAAYKU4jlcv6AELI94o.mft (raw, json)
Hash identifier: Jbe1ctNrBVCw5HVw6yU/TU1eznfYOrScfErZR2Y3GL4=
Subject key identifier: 6D:ED:2A:D7:E8:0F:C4:D6:CE:EA:FF:F5:BD:63:80:3B:86:AC:01:78
Authority key identifier: 52:EA:29:77:8B:EB:28:00:18:29:4E:23:95:CB:FA:00:42:C8:F7:8A
Certificate issuer: /CN=52ea29778beb280018294e2395cbfa0042c8f78a
Certificate serial: 0199FBEAAB85A46A8242AA83E7E939F8CEA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uuopd4vrKAAYKU4jlcv6AELI94o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft
Manifest number: 090A
Signing time: Sun 19 Oct 2025 10:01:24 +0000
Manifest this update: Sun 19 Oct 2025 10:01:24 +0000
Manifest next update: Mon 20 Oct 2025 10:01:24 +0000
Files and hashes: 1: Uuopd4vrKAAYKU4jlcv6AELI94o.crl (hash: cBti7362zJBu6wXW2aptA7fBLrocwMI1B7ymBygcb3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uuopd4vrKAAYKU4jlcv6AELI94o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ab:85:a4:6a:82:42:aa:83:e7:e9:39:f8:ce:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ea29778beb280018294e2395cbfa0042c8f78a
Validity
Not Before: Oct 19 10:01:24 2025 GMT
Not After : Oct 20 10:01:24 2025 GMT
Subject: CN=6ded2ad7e80fc4d6ceeafff5bd63803b86ac0178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b8:b8:df:f8:c5:ac:8a:4b:1b:fa:00:8a:6c:
55:0c:b7:dd:ca:1f:60:2d:4e:df:72:f2:8c:db:d1:
86:7f:4e:7b:92:38:e1:3a:32:2e:04:5b:10:43:a2:
7d:3a:a8:86:68:d1:ca:45:9a:84:2d:47:c0:04:8e:
b9:c3:61:8d:e5:42:b2:a7:c4:a1:23:4d:b5:53:3f:
b0:65:9a:a1:9c:cf:c2:7a:8e:53:e1:97:31:52:da:
f8:78:b3:cc:58:78:78:b5:cc:af:3c:01:75:66:bc:
17:80:ee:4b:9c:ea:1c:e4:fb:9c:ca:0e:6a:33:fe:
24:f3:bd:c3:9d:ce:5e:2b:6a:5f:e7:b2:c7:5a:37:
c1:c6:61:1f:e3:23:07:30:a1:3a:ef:ae:ca:85:43:
90:a4:32:79:d2:6e:56:5d:cc:ee:89:dd:a3:73:ae:
eb:a0:8a:93:6e:1c:f4:cd:54:71:21:83:1a:f7:4f:
36:94:dd:4d:dc:bd:1d:fa:92:61:ad:95:3e:8a:7c:
e2:3a:66:6a:d1:08:80:9f:a8:b5:e9:e5:75:71:92:
08:20:8e:34:7b:3d:b7:6c:59:dc:f5:a3:cb:58:1c:
0b:94:9c:0f:d4:d3:c6:82:0a:11:4e:71:f0:32:87:
f9:11:25:99:61:0d:a2:94:c1:98:4f:f3:9a:79:df:
03:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:ED:2A:D7:E8:0F:C4:D6:CE:EA:FF:F5:BD:63:80:3B:86:AC:01:78
X509v3 Authority Key Identifier:
keyid:52:EA:29:77:8B:EB:28:00:18:29:4E:23:95:CB:FA:00:42:C8:F7:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uuopd4vrKAAYKU4jlcv6AELI94o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:92:1c:a3:24:08:b8:a2:37:e5:7d:11:31:17:10:83:b2:a0:
e9:56:99:56:09:35:d3:5d:2f:06:db:f8:87:3e:a4:17:2f:84:
4f:11:11:04:34:a9:27:d8:3e:8a:2b:71:b8:d8:9a:96:46:f5:
e3:f4:76:9b:e3:9f:2f:e6:b8:84:b8:57:5a:00:03:c7:d6:39:
e1:50:3c:0b:3e:aa:ea:3d:c1:a5:57:9b:c8:02:cf:53:a1:cb:
83:12:e8:99:06:37:00:14:f6:0b:79:ee:c3:7e:d3:79:52:f3:
30:63:4c:19:fd:d1:38:84:aa:b0:e5:32:d0:5c:71:42:5e:84:
8f:b1:af:22:ff:70:c8:bc:36:e4:36:7a:b9:1a:94:d4:4d:a5:
09:f4:51:6c:89:0b:74:1d:bc:43:c7:50:6a:52:23:0c:8f:02:
6d:86:f5:2c:00:6c:5d:89:d6:8b:c3:c6:03:ea:8e:ae:c8:d2:
35:45:e5:be:f7:36:6c:c6:82:aa:c7:6a:77:6e:12:1f:2f:26:
ee:bc:d6:54:16:2c:59:a2:66:24:60:2c:04:8f:a5:ba:83:84:
d9:44:5e:a4:a0:d4:53:0f:70:88:10:67:d4:e4:9a:3f:4d:a7:
5b:52:05:da:6b:97:49:92:35:22:92:25:cf:41:e4:6e:7b:3a:
91:8e:e4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:51 2025 by rpki-client