Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
File: UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft (raw, json)
Hash identifier: RhgezSMirBQi1ZRM87lmAO4+39PHuqkBlcmvMXToErI=
Subject key identifier: 4F:BD:4F:55:78:A4:2B:69:66:97:C5:4C:2E:39:0C:87:BA:C7:79:A3
Authority key identifier: 51:C3:CC:54:41:4F:B4:42:BE:39:D6:E1:A4:AF:72:4C:FF:EE:EE:FF
Certificate issuer: /CN=51c3cc54414fb442be39d6e1a4af724cffeeeeff
Certificate serial: 0199FFC7AAE1B19F4981245071542AA3223F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UcPMVEFPtEK-OdbhpK9yTP_u7v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
Manifest number: 15E9
Signing time: Mon 20 Oct 2025 04:01:39 +0000
Manifest this update: Mon 20 Oct 2025 04:01:39 +0000
Manifest next update: Tue 21 Oct 2025 04:01:39 +0000
Files and hashes: 1: UcPMVEFPtEK-OdbhpK9yTP_u7v8.crl (hash: HutWk+yH9FNpKi/dqFGuIE/Np95Wejj+J1OFord2lig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UcPMVEFPtEK-OdbhpK9yTP_u7v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:aa:e1:b1:9f:49:81:24:50:71:54:2a:a3:22:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51c3cc54414fb442be39d6e1a4af724cffeeeeff
Validity
Not Before: Oct 20 04:01:39 2025 GMT
Not After : Oct 21 04:01:39 2025 GMT
Subject: CN=4fbd4f5578a42b696697c54c2e390c87bac779a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7d:58:7f:95:90:a6:eb:49:2b:cc:5e:fd:a7:
28:e3:26:94:94:11:3d:dc:7d:eb:db:81:2d:9b:5f:
f4:70:6e:c1:a4:ac:bb:57:09:c5:b0:b2:98:62:bc:
09:51:30:ac:e2:18:cb:e0:38:94:3a:78:d7:94:88:
a5:c3:7f:91:96:d1:d4:6d:35:13:bf:31:69:d2:3f:
22:d8:07:f6:a1:49:35:50:81:c6:ce:69:b3:56:4b:
e5:52:fb:61:ca:c1:c3:99:39:81:22:12:70:6b:44:
8b:14:e8:c8:05:70:74:2a:05:56:bd:d1:6c:3d:28:
f7:d9:ee:85:91:8f:3e:40:88:c6:51:05:5d:8d:a6:
20:ce:54:1e:1a:9f:2c:81:49:ee:3d:1e:c2:59:89:
dc:59:2f:42:4c:36:85:88:44:40:33:36:70:44:a1:
cd:e6:7f:e3:d0:60:54:7c:99:1c:3f:f0:bb:88:dd:
25:66:42:85:df:b5:8d:ad:1c:ee:84:56:f4:62:1f:
ac:9e:d4:7b:69:d1:d2:f8:8a:4d:8b:c5:97:f3:6f:
aa:16:59:b6:67:a9:cc:c9:c6:3d:4f:39:4b:d1:17:
12:40:82:3f:25:b0:dd:85:22:b3:56:e7:38:04:5a:
23:01:21:32:9b:d4:a5:b9:a2:5b:af:c8:64:ac:32:
2e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BD:4F:55:78:A4:2B:69:66:97:C5:4C:2E:39:0C:87:BA:C7:79:A3
X509v3 Authority Key Identifier:
keyid:51:C3:CC:54:41:4F:B4:42:BE:39:D6:E1:A4:AF:72:4C:FF:EE:EE:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UcPMVEFPtEK-OdbhpK9yTP_u7v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:cb:e3:aa:b6:c1:a2:01:e8:3c:ea:a1:30:7b:c1:ec:f6:ea:
c4:20:73:ad:55:a3:51:6f:df:f9:be:54:f9:c7:a5:fd:cb:23:
b2:f7:fa:2e:97:89:33:c5:03:ed:68:e3:38:33:f2:c2:93:a1:
b4:ed:e9:5e:9f:3e:93:85:1c:97:28:d3:92:b4:27:3f:04:53:
bd:db:50:d5:38:f2:fb:13:02:d4:6a:2b:ec:a3:f1:d5:a4:54:
65:a0:f1:07:1c:53:a5:92:6a:d2:45:b9:53:27:6d:ec:72:36:
c9:ba:99:0d:41:0c:fa:47:e7:2a:da:2f:b5:96:5b:af:c1:b4:
9c:02:a1:6b:ef:1d:51:75:0d:ab:ed:87:73:c0:2b:75:90:b4:
37:c4:76:b0:bd:2e:f3:39:95:be:89:a7:7c:cc:49:8b:fd:6e:
60:26:b0:2d:9c:fe:7d:8d:0f:03:91:8f:6d:9f:c6:04:aa:28:
86:3e:e7:cf:dc:24:5d:4e:f3:6b:d2:8d:52:d3:02:e8:20:70:
e2:c6:24:b2:aa:d1:12:34:8f:96:20:fc:6d:1d:b5:7b:c2:2b:
86:be:c6:d6:e5:df:0c:9d:3c:0e:96:d9:37:5e:52:d0:8e:d1:
08:ce:25:54:85:61:c1:e1:de:dc:19:05:45:3b:78:06:ea:23:
c0:4f:03:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:09:07 2025 by rpki-client