Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
File: 1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft (raw, json)
Hash identifier: uIP1LPDCN3pW/vDmvGw0BSCYA5UaZAYPlbkxjLi62C4=
Subject key identifier: A0:2F:F1:02:64:29:A9:AE:7E:D0:21:97:E3:DD:82:83:4F:34:C3:09
Authority key identifier: D5:46:8F:54:C0:D4:95:81:F6:9B:54:38:3D:55:73:FF:77:56:20:EC
Certificate issuer: /CN=d5468f54c0d49581f69b54383d5573ff775620ec
Certificate serial: 019A00A2EAE40C04B1CC68316D5734BA009B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
Manifest number: 0ACD
Signing time: Mon 20 Oct 2025 08:01:08 +0000
Manifest this update: Mon 20 Oct 2025 08:01:08 +0000
Manifest next update: Tue 21 Oct 2025 08:01:08 +0000
Files and hashes: 1: 1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl (hash: 3hWyTtonAPI5CpuUM33CojS1POvQpo85LrZ+RZJ4jbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a2:ea:e4:0c:04:b1:cc:68:31:6d:57:34:ba:00:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5468f54c0d49581f69b54383d5573ff775620ec
Validity
Not Before: Oct 20 08:01:08 2025 GMT
Not After : Oct 21 08:01:08 2025 GMT
Subject: CN=a02ff1026429a9ae7ed02197e3dd82834f34c309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ac:a1:be:79:b9:22:12:90:5c:65:97:18:1d:
50:e1:de:87:18:9a:c5:d8:16:e9:80:41:2c:40:fc:
86:2c:69:37:bf:e4:7d:e1:70:ac:53:3a:8b:b7:e3:
4c:df:d9:92:25:11:15:4d:b1:7c:d7:39:2b:fc:c0:
dd:b4:5c:ae:49:52:06:42:da:4c:e1:ac:b0:27:84:
e1:e1:ce:85:95:5b:34:70:07:7f:8f:2e:93:9c:c4:
4a:c9:87:93:09:42:d7:fb:05:50:ad:ed:b5:cb:ad:
d1:ce:97:62:1b:99:a2:fc:11:1b:b5:23:7d:9c:3f:
d3:45:2d:23:d5:0f:ab:eb:4e:c0:42:a4:ec:21:9e:
c7:4e:79:14:7f:5f:1c:8f:c6:02:4f:8e:0a:62:90:
4c:7d:2f:c6:db:5f:c6:66:65:18:92:35:7a:7d:72:
99:2f:76:43:03:70:17:3d:9d:c2:12:2c:7a:2a:55:
79:f8:f2:1a:d2:3d:f5:73:e5:21:7e:50:c6:43:fa:
10:5a:0b:05:54:bd:3c:76:b8:13:d8:d8:45:00:b9:
ee:f0:a0:4f:25:fa:88:83:70:03:b8:f7:01:bf:60:
84:1e:df:31:d2:4e:5f:05:fe:fc:70:f5:0c:ff:02:
ca:42:c7:9c:85:65:ef:31:8e:c8:6b:1c:83:d7:05:
cc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2F:F1:02:64:29:A9:AE:7E:D0:21:97:E3:DD:82:83:4F:34:C3:09
X509v3 Authority Key Identifier:
keyid:D5:46:8F:54:C0:D4:95:81:F6:9B:54:38:3D:55:73:FF:77:56:20:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f0:ad:36:3e:0c:c9:3a:e8:07:2b:fe:ca:e4:f1:6b:86:04:
2f:e0:67:c0:91:8d:26:ad:08:d3:4d:29:5e:10:8c:d1:99:58:
4a:b5:92:b8:f2:2a:c9:41:c8:7f:10:ee:60:c5:95:5c:5a:0c:
ab:7e:9e:95:3a:53:0c:5c:ff:4b:3c:40:38:e0:72:d7:06:ec:
73:15:bc:f9:d9:4b:c6:26:7c:15:29:ea:7f:17:e6:d6:72:27:
42:29:af:ce:6f:a9:86:9b:6a:8f:c1:c3:d4:30:c6:1e:81:c1:
ad:d4:b9:5e:e7:a9:92:4a:01:23:a7:f3:1f:a8:23:7f:09:b2:
13:52:aa:d5:31:2d:37:ef:26:17:81:b0:43:b4:f7:a6:c9:d1:
a0:fc:8f:6a:a4:53:50:5a:d4:38:d0:44:02:78:0d:e6:04:97:
61:4d:f8:d2:b3:64:50:8c:02:28:7f:b7:57:fb:e6:8a:63:2f:
90:1f:c6:3a:35:49:53:11:0f:df:10:41:8d:de:a3:8c:7e:cd:
a9:de:5b:1b:31:71:43:d1:a1:ca:2e:ad:e9:ce:a4:c1:9c:12:
66:dc:ab:37:b6:15:6c:7a:a0:fb:e0:f5:73:b8:8f:87:34:ff:
b9:bf:78:3f:6c:a1:da:be:8e:1b:df:18:dd:83:0e:f5:0c:f2:
fb:7c:93:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:33:13 2025 by rpki-client