Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
File: vUltYJRIpG2YZUJqjp7aWICI0Fc.mft (raw, json)
Hash identifier: h2qEG0A8NQU8GztugRzzCa8kQ9J9Fhor4rcQ1OYZHKI=
Subject key identifier: 4B:21:24:07:3D:1C:F9:17:90:3E:77:AC:7F:42:17:D3:35:8A:76:7F
Authority key identifier: BD:49:6D:60:94:48:A4:6D:98:65:42:6A:8E:9E:DA:58:80:88:D0:57
Certificate issuer: /CN=bd496d609448a46d9865426a8e9eda588088d057
Certificate serial: 0199FBEAF6B2AF27221A9037BB5BCD372F1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
Manifest number: 1316
Signing time: Sun 19 Oct 2025 10:01:43 +0000
Manifest this update: Sun 19 Oct 2025 10:01:43 +0000
Manifest next update: Mon 20 Oct 2025 10:01:43 +0000
Files and hashes: 1: vUltYJRIpG2YZUJqjp7aWICI0Fc.crl (hash: 9xa4GfxMaFhMXhikov0lrM/wiOcdPdt33zR8U98buxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:f6:b2:af:27:22:1a:90:37:bb:5b:cd:37:2f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd496d609448a46d9865426a8e9eda588088d057
Validity
Not Before: Oct 19 10:01:43 2025 GMT
Not After : Oct 20 10:01:43 2025 GMT
Subject: CN=4b2124073d1cf917903e77ac7f4217d3358a767f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:71:f5:61:da:41:ba:7f:2e:f6:a2:2a:d4:1f:
d4:fd:f9:9c:83:7d:5f:10:d1:b1:cd:32:8a:fd:2c:
5c:76:32:be:c5:ff:25:06:78:95:a0:54:d2:a5:35:
ef:e0:a4:d1:23:11:11:df:2a:0a:c8:f0:20:f1:2c:
ea:aa:f0:94:3e:b4:cf:5d:70:51:33:2c:51:32:26:
4b:5e:76:10:37:6d:44:23:ca:52:30:e3:a1:65:7e:
43:90:7f:f4:85:12:18:f5:3a:5e:f8:b0:ff:52:fb:
a3:0d:ae:6a:1b:eb:bf:b3:ca:11:ac:cc:0c:75:d5:
0f:a5:2a:c7:af:4c:0e:e5:35:20:b9:ab:e5:b7:90:
85:29:c7:fd:4d:ce:9e:54:50:3a:d0:aa:c3:5f:30:
33:72:a2:ab:2f:32:83:69:cb:72:7a:c3:e8:fe:a7:
3c:e8:50:d7:82:d6:fe:0b:df:39:a2:97:f4:6a:29:
0f:29:3e:32:c3:83:96:4a:ea:ac:42:38:31:05:2d:
48:0e:ae:cb:f3:88:c9:4f:75:f9:c6:45:d9:6e:51:
42:bc:a7:d7:bf:9f:e9:23:a2:18:7d:2a:14:54:06:
f2:3f:dd:d7:ec:ac:44:a4:72:01:e6:e8:33:c9:13:
4d:b1:a7:44:b5:56:5e:b3:43:62:67:2b:00:4b:3f:
61:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:21:24:07:3D:1C:F9:17:90:3E:77:AC:7F:42:17:D3:35:8A:76:7F
X509v3 Authority Key Identifier:
keyid:BD:49:6D:60:94:48:A4:6D:98:65:42:6A:8E:9E:DA:58:80:88:D0:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b2:a2:ac:a1:05:0d:32:4f:71:ea:2d:bc:4d:af:49:f4:de:
40:16:f1:fa:82:c8:2c:d0:14:b1:34:5e:ce:f2:91:55:41:c8:
ac:c4:29:ba:4d:cd:66:fb:ca:38:6b:9a:fb:3c:38:a7:6b:51:
c7:b1:1b:ed:1f:82:03:02:6f:f8:ea:58:f4:ce:62:a8:82:1b:
b2:46:7b:c6:36:1e:95:78:02:fe:ce:01:66:54:58:a5:d9:6b:
72:c8:08:8a:50:b1:96:c8:a5:e4:aa:c3:99:f9:36:94:d8:01:
aa:4d:34:ca:79:87:cc:29:5d:f3:ed:2e:ff:0f:4b:2f:a6:f8:
7f:53:12:42:0b:1c:75:3d:b6:f3:3f:b6:8c:b0:d8:b4:bb:04:
fa:5d:32:5b:50:df:be:7e:85:f7:00:ed:54:f3:7d:1f:51:3c:
fd:c6:e7:82:3c:34:8d:84:94:05:e8:30:33:82:49:b7:9e:4e:
92:8c:41:59:99:8f:91:2e:c3:03:33:8b:bf:0b:8c:86:a9:bb:
f0:60:ac:80:80:f6:f3:5c:88:ca:1c:9d:3d:e2:dd:77:32:d7:
d4:da:c4:ae:59:fd:18:a8:28:4f:d1:a4:71:fa:75:23:4a:a7:
f1:79:ab:8f:47:3e:10:29:a9:88:ed:19:0b:21:65:2b:d4:e3:
c1:80:77:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:36 2025 by rpki-client