
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/931702-c2dc-409e-b3ec-f3ba742d5040/1/_uXfTWBHvAq-eZp3LAhSusWN9Dg.mft
File: _uXfTWBHvAq-eZp3LAhSusWN9Dg.mft (raw, json)
Hash identifier: rraHgv1b37UJaza575IeUVIBWypGURGJCsnW+24NQ8Y=
Subject key identifier: BF:63:BB:BC:15:4B:DF:C0:06:DD:DA:36:C2:22:76:A5:48:76:85:B6
Authority key identifier: FE:E5:DF:4D:60:47:BC:0A:BE:79:9A:77:2C:08:52:BA:C5:8D:F4:38
Certificate issuer: /CN=fee5df4d6047bc0abe799a772c0852bac58df438
Certificate serial: 0199FD6B6493EF7B4C47ABE9B0340EB440A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_uXfTWBHvAq-eZp3LAhSusWN9Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/931702-c2dc-409e-b3ec-f3ba742d5040/1/_uXfTWBHvAq-eZp3LAhSusWN9Dg.mft
Manifest number: BA
Signing time: Sun 19 Oct 2025 17:01:37 +0000
Manifest this update: Sun 19 Oct 2025 17:01:37 +0000
Manifest next update: Mon 20 Oct 2025 17:01:37 +0000
Files and hashes: 1: _uXfTWBHvAq-eZp3LAhSusWN9Dg.crl (hash: s3ph9nWEpEXwgB8KZ9T4t4sV5RdSzwa4MWW43RqaDM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/931702-c2dc-409e-b3ec-f3ba742d5040/1/_uXfTWBHvAq-eZp3LAhSusWN9Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/931702-c2dc-409e-b3ec-f3ba742d5040/1/_uXfTWBHvAq-eZp3LAhSusWN9Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_uXfTWBHvAq-eZp3LAhSusWN9Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:64:93:ef:7b:4c:47:ab:e9:b0:34:0e:b4:40:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fee5df4d6047bc0abe799a772c0852bac58df438
Validity
Not Before: Oct 19 17:01:37 2025 GMT
Not After : Oct 20 17:01:37 2025 GMT
Subject: CN=bf63bbbc154bdfc006ddda36c22276a5487685b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f3:5d:22:c8:d9:91:36:a0:4e:f6:c5:13:95:
59:40:e6:85:6d:dd:68:39:b9:05:fc:f6:ce:60:1e:
74:ed:36:a1:d8:c5:75:53:1b:38:66:30:df:78:60:
ff:22:8c:20:19:2d:1b:58:2f:25:9e:6d:95:f3:c5:
2b:fb:5f:24:3b:6e:0a:e9:7d:8b:e9:d6:47:0e:da:
a3:80:80:9a:22:9e:49:96:7c:9f:2e:b9:60:9e:eb:
1d:ce:f0:77:12:ec:76:76:ac:43:1e:c0:0b:8e:51:
f7:cd:21:f5:56:e2:92:f0:d4:bc:d2:69:3a:ca:cd:
92:a0:2e:e2:62:16:39:98:97:e0:d4:9d:b6:bc:63:
38:d2:b0:42:cc:18:2e:43:b3:56:4f:82:22:dc:43:
53:7a:25:aa:5b:76:69:72:bb:e9:74:c2:9e:f9:f6:
fc:6d:df:1b:6c:1c:da:9b:31:bd:b0:6c:4e:70:1b:
f0:08:c2:0e:e9:1d:87:d2:81:c1:58:4e:f5:00:38:
40:7b:33:4c:03:c7:ea:a3:a5:f4:ac:46:10:34:03:
bc:67:5f:61:3d:5f:9e:3d:a3:5d:44:9e:8d:73:43:
eb:e2:50:67:3f:4c:b7:87:88:ca:19:c8:0b:12:0e:
56:2b:ef:0d:a1:40:da:f8:b9:06:a3:f2:53:f0:9a:
d6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:63:BB:BC:15:4B:DF:C0:06:DD:DA:36:C2:22:76:A5:48:76:85:B6
X509v3 Authority Key Identifier:
keyid:FE:E5:DF:4D:60:47:BC:0A:BE:79:9A:77:2C:08:52:BA:C5:8D:F4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_uXfTWBHvAq-eZp3LAhSusWN9Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/931702-c2dc-409e-b3ec-f3ba742d5040/1/_uXfTWBHvAq-eZp3LAhSusWN9Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/931702-c2dc-409e-b3ec-f3ba742d5040/1/_uXfTWBHvAq-eZp3LAhSusWN9Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b5:cd:7d:4d:6a:bd:8e:1d:36:0b:fc:d5:4a:42:3d:67:9c:
7e:0d:70:4b:21:9f:25:8c:bb:5f:29:7b:cb:7b:26:19:76:e9:
69:40:44:4f:26:6d:e7:00:38:76:5d:cc:33:37:95:c3:8b:c6:
0f:7e:a7:16:34:b8:be:d6:04:c7:c6:a8:22:d0:08:e9:32:bb:
31:42:9b:9c:87:ac:62:c6:40:64:71:ad:99:5d:8f:99:6d:f2:
96:40:61:fc:28:50:85:2c:59:eb:b1:79:38:f6:3e:68:cb:21:
dd:c7:a4:e0:ac:26:11:55:1a:35:08:71:96:6f:fc:31:39:c2:
f0:fa:6c:3a:60:01:8c:30:2f:e3:0a:ac:4b:bd:f1:12:49:ec:
99:cd:6f:3f:8a:2b:07:62:c7:a6:73:92:39:3a:2f:2a:c4:59:
c9:b2:b8:81:5a:89:1f:e9:9b:6f:10:a9:47:d4:9f:a4:39:39:
61:33:46:8e:fa:7a:d3:c3:6b:e0:74:5f:17:96:6f:3d:af:63:
6f:a8:a0:de:bd:58:37:90:a2:b9:93:96:be:2f:1c:1c:b6:46:
c7:16:77:7b:3e:d9:39:ae:35:d6:99:ab:41:19:0b:63:7f:f4:
35:67:13:4b:a3:1c:7a:82:cf:52:c1:28:bd:45:98:d0:70:d1:
c0:59:94:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:53:02 2025 by rpki-client