Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
File: g-ULKlHI9a25N7IqkMcg9rBPKXM.mft (raw, json)
Hash identifier: cw1sDXqiDuC140Jpi8LFxhv1Q1dAmrdV8RMYkvLx84Y=
Subject key identifier: 47:A7:48:73:12:5F:A1:99:9B:9F:4E:63:F3:EA:3F:FA:4C:48:90:6B
Authority key identifier: 83:E5:0B:2A:51:C8:F5:AD:B9:37:B2:2A:90:C7:20:F6:B0:4F:29:73
Certificate issuer: /CN=83e50b2a51c8f5adb937b22a90c720f6b04f2973
Certificate serial: 0199FC590F7375E5F306D631ED4F96FBC616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
Manifest number: 14F5
Signing time: Sun 19 Oct 2025 12:01:58 +0000
Manifest this update: Sun 19 Oct 2025 12:01:58 +0000
Manifest next update: Mon 20 Oct 2025 12:01:58 +0000
Files and hashes: 1: g-ULKlHI9a25N7IqkMcg9rBPKXM.crl (hash: 7LXv20TnQaiEKYK4SisG4FFN9X/D2hN8IO6NNx42SPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:0f:73:75:e5:f3:06:d6:31:ed:4f:96:fb:c6:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e50b2a51c8f5adb937b22a90c720f6b04f2973
Validity
Not Before: Oct 19 12:01:58 2025 GMT
Not After : Oct 20 12:01:58 2025 GMT
Subject: CN=47a74873125fa1999b9f4e63f3ea3ffa4c48906b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5f:c3:4d:77:68:fd:9a:2d:d6:a7:19:3c:1a:
5a:b4:18:31:f9:3e:34:0c:ca:46:ed:03:96:79:c4:
2c:39:c3:07:11:3b:40:49:22:c3:a0:e9:24:e5:0c:
cb:7a:b9:fa:16:bb:15:f1:ae:21:d1:17:f2:47:50:
4c:1c:73:50:16:a2:3c:6a:95:6b:a6:5c:eb:7e:42:
ea:3b:92:ac:0e:e1:fa:ef:b8:ea:c5:e5:71:fd:d3:
0c:2a:5a:54:6c:d5:89:1f:4e:1e:65:e3:ca:cd:af:
28:d3:95:b8:3b:4e:9f:54:05:af:6d:51:a9:f0:98:
26:87:d9:a7:07:f3:48:2f:45:a0:03:2e:2d:0c:5a:
4b:be:c1:37:a0:11:f5:56:b4:18:ec:ac:7e:76:ee:
0c:87:34:28:01:5a:af:5c:d3:df:d9:ff:91:e6:c6:
d3:0c:f8:06:ba:9b:82:50:88:20:bb:89:da:a2:b8:
d7:ab:3c:f2:6a:89:15:31:91:ec:8a:58:47:a8:79:
73:8d:4f:ae:71:bd:02:4d:6e:d9:ca:97:76:1b:b7:
83:00:90:80:75:8c:28:68:6a:e3:cd:ae:64:86:09:
70:12:e9:3d:dc:04:31:49:7c:0b:91:ea:b6:40:44:
f1:e1:a5:d8:0d:7f:58:af:b3:07:90:48:9d:ce:ac:
f6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A7:48:73:12:5F:A1:99:9B:9F:4E:63:F3:EA:3F:FA:4C:48:90:6B
X509v3 Authority Key Identifier:
keyid:83:E5:0B:2A:51:C8:F5:AD:B9:37:B2:2A:90:C7:20:F6:B0:4F:29:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e7:d2:a6:16:4e:5d:fe:6f:be:d2:a1:67:f0:a7:4a:b7:71:
c5:80:54:66:c3:36:54:61:a0:6a:0f:e8:f0:64:bd:3c:8e:eb:
df:91:09:5b:1e:49:9e:bc:06:91:10:8e:07:a0:7f:bd:69:3c:
c4:98:ee:2f:f8:1e:79:4c:bb:e6:d5:29:e0:ac:b5:4d:ea:c9:
ca:20:92:1f:19:eb:25:11:1f:50:b7:4d:0a:d2:6b:f0:b3:a6:
a4:09:a4:12:b1:e5:09:c1:6f:b2:7c:38:44:ba:1c:0e:e6:bc:
69:58:86:ce:89:d8:10:3e:ec:80:2e:cf:3a:0e:1b:6d:4e:94:
a6:b2:71:f2:c6:24:98:79:ba:a9:26:09:de:1a:a1:75:d7:7a:
ad:24:f3:7c:cf:88:a6:66:69:d1:94:05:97:56:b3:ac:9a:3a:
a6:44:8e:e3:52:18:75:86:3c:d0:16:f5:73:f6:f1:c1:b9:68:
81:df:d7:f0:27:0b:b5:1a:86:7d:26:b5:a6:65:9d:ef:d5:92:
37:f2:fb:f9:f5:bb:8b:0e:ab:4d:50:22:72:a0:aa:72:d8:99:
9c:fd:eb:a7:00:df:8c:de:c1:70:b0:10:a9:e1:5b:70:ad:9d:
35:18:00:26:58:61:7e:51:47:51:ee:42:34:9d:69:11:71:c4:
04:95:f8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:01:46 2025 by rpki-client