Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.mft
File: URG_0pCvtSDrpBT3ijl1C36Z9MU.mft (raw, json)
Hash identifier: AMkSawaTTlo/lvvoBHmG59BZbRRnCYPNI0ZEUtkVcWs=
Subject key identifier: 65:35:4B:3A:A2:65:8D:15:18:5D:83:3B:1C:77:42:61:18:FD:FD:35
Authority key identifier: 51:11:BF:D2:90:AF:B5:20:EB:A4:14:F7:8A:39:75:0B:7E:99:F4:C5
Certificate issuer: /CN=5111bfd290afb520eba414f78a39750b7e99f4c5
Certificate serial: 0199FCC6C5C03EC57307CF4197B546E1A81A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/URG_0pCvtSDrpBT3ijl1C36Z9MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.mft
Manifest number: 03EF
Signing time: Sun 19 Oct 2025 14:01:49 +0000
Manifest this update: Sun 19 Oct 2025 14:01:49 +0000
Manifest next update: Mon 20 Oct 2025 14:01:49 +0000
Files and hashes: 1: URG_0pCvtSDrpBT3ijl1C36Z9MU.crl (hash: bQyybJQDg482zU8LEWluhPNtXG30MzP2oec5thjDLM4=)
2: zVUl367uAuWMVUPRoi840j0jiPg.roa (hash: qS11jDGkCNzMKbCIBI9UQyUrb/zBjJR7FmPuRC9w0J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.mft
rsync://rpki.ripe.net/repository/DEFAULT/URG_0pCvtSDrpBT3ijl1C36Z9MU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:c5:c0:3e:c5:73:07:cf:41:97:b5:46:e1:a8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5111bfd290afb520eba414f78a39750b7e99f4c5
Validity
Not Before: Oct 19 14:01:49 2025 GMT
Not After : Oct 20 14:01:49 2025 GMT
Subject: CN=65354b3aa2658d15185d833b1c77426118fdfd35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ad:31:70:a5:6d:37:22:a4:26:6f:24:08:ff:
0a:95:8f:02:80:ef:83:30:b6:99:52:5e:0b:33:5a:
5c:8d:d7:6a:da:fb:f4:29:2c:00:f5:f3:e1:13:e0:
39:07:88:fc:33:e2:8e:d5:48:be:37:61:db:e0:ed:
66:19:0b:f6:c6:50:b5:ed:08:23:a1:a6:53:ce:12:
0c:5e:31:31:8a:6b:3d:28:8d:6c:a9:7b:55:cd:73:
71:48:5c:57:f2:d0:b7:a3:64:fb:9c:7a:f8:87:03:
d5:f9:f2:19:da:00:f2:44:18:0a:18:41:92:26:79:
f0:68:c9:0a:b2:77:f3:66:40:23:53:04:83:ca:cb:
4b:1f:28:58:54:93:2e:10:64:27:2d:24:87:3e:5b:
1f:00:8c:ab:df:ee:08:f2:e0:dd:db:55:ef:0a:61:
5a:39:24:bf:26:fd:f8:ac:97:f0:d5:05:17:8c:92:
ab:25:8f:9d:9b:eb:4e:b2:e9:76:56:1a:ee:9d:e9:
48:18:f6:22:6c:aa:60:c9:1a:e7:8f:16:f0:a4:7f:
04:f7:9e:9e:44:02:5d:35:e2:a4:54:24:ca:e1:05:
8b:ac:d1:ea:fb:dd:91:c0:43:03:fe:30:3d:ab:62:
fd:c3:d3:45:2f:be:7e:ce:af:f1:8f:41:97:78:98:
25:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:35:4B:3A:A2:65:8D:15:18:5D:83:3B:1C:77:42:61:18:FD:FD:35
X509v3 Authority Key Identifier:
keyid:51:11:BF:D2:90:AF:B5:20:EB:A4:14:F7:8A:39:75:0B:7E:99:F4:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/URG_0pCvtSDrpBT3ijl1C36Z9MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:2e:d1:a0:3e:bc:ff:fb:b7:c4:de:25:70:ac:50:69:b2:17:
31:48:90:dd:25:cd:9b:7e:30:02:ed:ab:13:16:5b:fc:b1:b9:
b8:30:5f:b6:cb:b7:df:47:19:9d:c6:08:65:59:83:45:4d:78:
2f:29:eb:7b:9c:e1:14:7c:71:9a:65:1d:46:64:33:e5:3c:41:
80:11:7d:a6:a0:0b:40:7f:b7:b0:c5:8c:a8:b2:72:26:16:25:
d2:be:b5:21:c8:32:92:99:09:fe:0c:a9:7f:c6:7f:b2:22:07:
b0:11:1c:65:d0:d6:bf:b4:bd:f7:0e:97:6e:8f:29:dc:b1:a9:
18:a4:8d:0a:b0:fc:c4:84:1a:21:0a:05:45:ac:0b:83:d2:a1:
07:09:d3:09:ba:dd:7f:59:bf:10:69:d6:9f:b4:4b:5e:5c:4d:
7f:af:c9:3e:e8:8a:35:00:e0:f7:b6:50:9d:b4:6a:ca:2c:6a:
d9:b3:4c:37:c3:fa:5f:06:f4:b0:2d:63:5b:18:01:52:11:93:
04:d7:a4:7c:db:d6:77:d3:8f:95:b7:02:b1:a4:8f:45:36:0f:
ea:57:fc:e3:e7:58:a0:f5:24:5b:c5:a2:96:3f:2a:bb:e1:ab:
23:65:c2:3d:eb:df:89:6d:ed:97:21:80:7e:ba:f4:62:b5:df:
25:f1:d1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:41 2025 by rpki-client