Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
File: ulnZ9a887kQgFLc1lhxzuWkmDhk.mft (raw, json)
Hash identifier: HHLx4yHOkKK4Qbq+BS/ytOyXTdpL1kMLvk+oaYD292I=
Subject key identifier: B1:52:50:18:31:84:3C:93:F9:D7:DB:E9:4A:22:06:61:80:02:E7:A3
Authority key identifier: BA:59:D9:F5:AF:3C:EE:44:20:14:B7:35:96:1C:73:B9:69:26:0E:19
Certificate issuer: /CN=ba59d9f5af3cee442014b735961c73b969260e19
Certificate serial: 0199FBEC30268D2DEE48C233E874EFDE4ACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
Manifest number: 16DD
Signing time: Sun 19 Oct 2025 10:03:03 +0000
Manifest this update: Sun 19 Oct 2025 10:03:03 +0000
Manifest next update: Mon 20 Oct 2025 10:03:03 +0000
Files and hashes: 1: ulnZ9a887kQgFLc1lhxzuWkmDhk.crl (hash: wXT9S7F0Dh1q8XZ/0349bGmSMqfvsCc2rqyc6Wu5D88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:30:26:8d:2d:ee:48:c2:33:e8:74:ef:de:4a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba59d9f5af3cee442014b735961c73b969260e19
Validity
Not Before: Oct 19 10:03:03 2025 GMT
Not After : Oct 20 10:03:03 2025 GMT
Subject: CN=b152501831843c93f9d7dbe94a2206618002e7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:da:b7:1c:df:ca:93:fb:08:df:2f:b0:fb:d4:
e5:69:35:4d:c6:9c:43:a6:5a:69:1b:f9:e0:29:39:
d5:07:ca:aa:09:e8:9e:14:42:9f:7d:58:e3:73:4a:
10:ba:ba:1b:46:73:95:c2:80:3f:cc:d8:a5:01:bd:
82:4b:c6:de:63:b7:c4:ed:fb:3c:68:c1:f0:e5:99:
33:a3:ed:db:80:5d:02:d6:50:7d:57:91:02:fa:42:
85:7b:e2:90:6b:09:95:dc:af:15:08:12:37:19:a8:
6e:78:7a:32:e0:9b:b3:d0:77:d7:31:ae:fc:70:0f:
2a:67:65:4d:3a:d4:b9:33:a2:ed:a5:49:d8:7e:f1:
95:d4:76:cb:41:4c:2f:dd:d1:39:c4:a0:15:45:30:
a3:dc:8f:76:0b:a8:2c:21:85:cd:a9:ff:29:02:5f:
41:57:ca:a0:18:81:61:45:a2:22:e2:13:84:08:7b:
55:29:b1:0e:c7:87:59:92:40:ad:d5:06:ae:2f:61:
87:d5:9d:0c:fa:b7:4d:34:ed:6d:c4:65:03:30:5b:
42:ab:3e:15:3d:3d:4e:fb:a1:de:71:b9:4e:fd:c5:
00:3a:f7:5f:9f:7f:ee:94:3a:90:fb:69:bc:f5:0f:
3f:a8:f4:39:1c:42:a5:ad:b8:2e:1d:35:f8:cd:5e:
37:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:52:50:18:31:84:3C:93:F9:D7:DB:E9:4A:22:06:61:80:02:E7:A3
X509v3 Authority Key Identifier:
keyid:BA:59:D9:F5:AF:3C:EE:44:20:14:B7:35:96:1C:73:B9:69:26:0E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:53:eb:46:15:ff:36:7c:0e:09:a8:aa:a5:d1:58:6d:0e:21:
e0:21:ba:ce:78:72:3d:25:7f:2b:07:3d:34:83:74:5a:65:05:
7d:9f:75:11:72:b3:87:35:c6:0b:09:04:45:c4:ce:2f:ec:a7:
3a:c4:6d:02:36:13:3a:37:62:a3:fc:6b:e6:1d:a6:94:dc:f4:
67:ab:65:81:d8:bc:2c:ab:e2:f6:a1:c7:e4:ae:2b:d6:b0:e4:
b1:23:a3:de:ed:a2:c2:5b:7b:3e:3b:3d:27:ab:28:5e:be:99:
36:b8:0e:7e:be:78:d7:a1:7b:de:4d:a2:4f:d2:8e:62:5b:07:
f1:9a:19:8b:12:2c:8c:e3:b5:bf:a9:b0:d8:5e:7a:dd:ae:60:
8d:4b:b5:a7:bf:a3:61:e6:ea:e7:2e:50:b7:be:8a:3f:0d:d3:
9d:ef:13:c4:25:f8:7f:d3:0f:2d:57:6c:d9:83:81:80:ae:70:
19:92:17:79:5b:1f:03:d7:07:e5:22:04:72:7e:e2:ca:48:61:
f2:e3:cc:6a:6b:f9:8b:08:a4:f3:a4:b9:e1:1b:b0:12:62:af:
3e:ff:5d:0b:c7:e8:e6:f5:d3:9f:39:8b:ff:15:2b:f9:10:a0:
f8:20:f1:52:55:67:d1:65:22:32:a2:9b:e4:27:f0:55:42:f4:
88:52:4a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:12 2025 by rpki-client