Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
File: uji5p2P2XAJ6o92th8GI2nikvZc.mft (raw, json)
Hash identifier: QF/Z2gb0nrfN5rp/NKMuYiu1piPAXRt2eGvVvz8TRsI=
Subject key identifier: 19:AB:A4:03:9F:7D:0A:34:0E:4A:C1:B2:55:E9:CD:53:3F:65:09:F8
Authority key identifier: BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97
Certificate issuer: /CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97
Certificate serial: 0199FC58F2E384DDC03C49C5C64774DB0584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 12:01:51 +0000
Manifest this update: Sun 19 Oct 2025 12:01:51 +0000
Manifest next update: Mon 20 Oct 2025 12:01:51 +0000
Files and hashes: 1: uji5p2P2XAJ6o92th8GI2nikvZc.crl (hash: j/yCLtzRVQgLVQIUSjC28iM5mj2wR6FRL1Ivl/xYAjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:f2:e3:84:dd:c0:3c:49:c5:c6:47:74:db:05:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97
Validity
Not Before: Oct 19 12:01:51 2025 GMT
Not After : Oct 20 12:01:51 2025 GMT
Subject: CN=19aba4039f7d0a340e4ac1b255e9cd533f6509f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:10:9b:3f:e4:ce:9e:c3:e3:bd:95:51:b8:63:
44:d1:ce:e8:e4:46:1e:fe:a1:74:87:0b:3d:4c:a9:
94:ff:7d:30:76:09:47:6f:21:17:3b:be:b2:32:3d:
2f:90:83:95:c8:08:4d:04:98:d1:b4:5b:6d:f6:10:
73:86:38:4d:aa:82:40:1e:85:e7:33:bb:da:3d:9d:
59:a7:36:48:a1:f7:a2:6f:7d:74:81:19:0a:f5:73:
ce:84:3d:06:da:89:4d:33:04:fc:e6:86:8f:a7:40:
56:3e:c8:4b:32:92:8a:1d:e9:b8:87:46:7e:73:3d:
d8:e1:2e:ae:55:7c:5d:31:0a:c6:3d:03:fd:60:7f:
29:58:68:3f:5b:8a:98:b7:ed:c9:29:8c:0d:cc:e9:
98:da:c5:8d:6f:4f:c8:f3:c7:e2:4f:9a:28:65:1d:
20:79:02:69:ac:2f:97:e0:85:7f:78:70:df:70:78:
bc:85:73:70:9b:40:8b:5e:bf:cd:e3:a5:00:31:d9:
27:4f:ef:8a:19:1b:e4:22:0e:30:55:5f:47:07:bc:
bc:3d:7b:d8:6d:ee:fd:df:ce:f1:3c:96:a6:69:ce:
f1:7c:ba:03:7a:b6:de:fa:b5:b9:93:46:aa:ad:01:
4f:3e:b1:47:00:74:48:74:40:e2:76:25:7b:5c:ae:
8c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AB:A4:03:9F:7D:0A:34:0E:4A:C1:B2:55:E9:CD:53:3F:65:09:F8
X509v3 Authority Key Identifier:
keyid:BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:4a:df:09:e8:04:58:e6:25:b2:7a:d5:3a:66:0f:d3:54:d4:
9a:40:0d:0d:29:a1:4f:64:e2:95:4e:fe:3d:e9:97:e8:4d:d7:
f0:0a:bd:75:83:54:bb:01:fa:38:d4:d1:c7:26:e0:3a:ee:1a:
f7:01:5a:09:ac:19:5b:ce:94:5b:7e:2e:2e:fd:8d:df:b0:db:
23:6d:d6:34:fe:87:82:ad:c0:54:76:a8:a6:42:62:a5:b6:bf:
c3:79:0e:40:89:b4:91:d5:b9:ee:58:ec:6e:15:2f:d8:76:63:
30:63:eb:be:91:ba:fa:f0:fe:38:04:d2:e3:4e:c2:a4:d2:99:
00:cd:53:38:6e:eb:3e:42:10:74:71:43:1e:bb:1e:6b:b0:d6:
96:ff:53:b6:ab:36:83:57:7b:41:8f:33:33:ad:ce:9a:05:05:
0f:8d:60:7f:26:6d:54:5f:d8:a1:76:9b:5a:fa:76:d6:f1:eb:
8b:56:bb:d8:a8:a7:3e:7b:2f:20:d2:f9:86:b6:52:32:db:0b:
4c:e4:7b:6c:be:d1:9b:d3:4d:78:fd:56:b7:90:9d:8e:84:1f:
56:55:f1:d1:08:6c:ae:df:09:31:0a:d8:68:59:b3:d2:ae:9d:
3e:b7:56:14:d2:3f:92:65:31:a1:c5:50:b6:bf:2e:e5:39:f8:
4b:72:f3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:34 2025 by rpki-client