Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft
File: uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft (raw, json)
Hash identifier: C1Ogq8jHVyecitdpuiv78WuSGRCxci83fchvZimEie0=
Subject key identifier: E6:75:3F:0A:8D:DF:20:7E:E3:E5:CB:55:F7:4D:A9:D7:C4:87:6D:72
Authority key identifier: B9:6A:ED:42:6F:B1:A0:63:25:A2:63:79:21:A4:B5:AB:98:A1:A5:94
Certificate issuer: /CN=b96aed426fb1a06325a2637921a4b5ab98a1a594
Certificate serial: 01989336B34961B62B6E49457ACA78C3EF19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uWrtQm-xoGMlomN5IaS1q5ihpZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft
Manifest number: 0CEF
Signing time: Sun 10 Aug 2025 09:01:32 +0000
Manifest this update: Sun 10 Aug 2025 09:01:32 +0000
Manifest next update: Mon 11 Aug 2025 09:01:32 +0000
Files and hashes: 1: uWrtQm-xoGMlomN5IaS1q5ihpZQ.crl (hash: WUXkFOYbykz/iGaiCHKIU8svEvP1VKWYAlpI7uOx46Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uWrtQm-xoGMlomN5IaS1q5ihpZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 09:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:b3:49:61:b6:2b:6e:49:45:7a:ca:78:c3:ef:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b96aed426fb1a06325a2637921a4b5ab98a1a594
Validity
Not Before: Aug 10 09:01:32 2025 GMT
Not After : Aug 11 09:01:32 2025 GMT
Subject: CN=e6753f0a8ddf207ee3e5cb55f74da9d7c4876d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a6:28:d5:0b:bb:36:44:13:ec:ff:43:5f:bf:
56:8c:41:47:2b:eb:c2:04:ef:45:d6:a1:aa:35:fd:
83:e1:76:18:e4:ab:6a:3d:8b:73:2e:c3:56:47:10:
4a:9a:d0:c8:f0:b7:8d:2c:41:58:a3:4c:9a:34:fe:
62:9f:99:fa:4f:f0:b0:d6:80:fe:cf:7d:8c:71:7a:
8d:9c:b5:47:39:1b:c3:08:ae:9e:60:91:e6:d3:4e:
ac:7e:13:f8:4f:09:16:4b:76:8c:34:4a:8c:1b:96:
97:03:b2:1d:3a:52:61:d2:d3:37:35:fe:c5:a4:45:
f7:14:8c:9b:51:b8:2e:ef:39:c3:35:c5:0e:a1:61:
72:a1:c7:85:5c:d5:b8:81:ab:90:f7:e2:c3:1c:84:
4e:c1:94:0f:43:0e:3b:3f:3b:32:c3:af:d2:49:96:
99:90:dd:28:eb:68:51:8c:39:26:d0:77:ac:15:56:
f3:8e:34:ef:5e:a5:03:c7:ac:49:fa:41:00:81:60:
a0:fb:e9:75:2e:cc:64:6d:09:f4:cb:1d:b8:d2:01:
b6:32:12:0b:b0:35:ab:e8:d9:5d:2e:81:89:eb:9c:
cd:7e:51:df:7b:c8:7a:03:42:c0:c4:64:34:5d:f0:
25:7e:9e:e4:6b:aa:43:a3:ff:e0:3e:37:c9:41:7f:
55:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:75:3F:0A:8D:DF:20:7E:E3:E5:CB:55:F7:4D:A9:D7:C4:87:6D:72
X509v3 Authority Key Identifier:
keyid:B9:6A:ED:42:6F:B1:A0:63:25:A2:63:79:21:A4:B5:AB:98:A1:A5:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWrtQm-xoGMlomN5IaS1q5ihpZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:65:78:bb:0d:d1:9d:08:94:e4:ef:2f:64:7f:94:7c:52:c5:
03:c9:49:ea:94:ae:43:61:cd:63:d3:3d:85:55:a4:76:ae:45:
b5:04:84:10:be:03:97:7a:44:8b:1c:e4:50:a6:ef:7e:3f:c9:
ac:7d:99:6f:5f:6c:65:99:7a:dc:33:ac:6b:1f:28:4d:f8:dc:
c4:54:0f:7a:3f:91:9f:ca:c5:20:94:f7:29:ab:4e:7b:0b:af:
0f:1c:50:00:00:12:71:6a:f1:4b:fe:f6:f8:d7:33:30:13:f4:
b8:a4:29:ad:f3:27:49:8a:d4:8e:7e:db:d9:9b:fb:fa:86:0a:
65:0e:18:b9:a2:9b:3f:16:5a:eb:37:e7:b4:75:65:0e:e3:c1:
ac:dc:c4:bf:f2:c6:f9:8b:13:0c:1e:a8:b6:fe:6f:3d:fa:4e:
55:43:00:ae:39:00:cf:55:5b:60:85:1b:72:ee:c5:88:15:8c:
a3:3e:0f:7b:31:9f:00:39:6c:54:ed:d3:08:cd:38:e1:84:02:
f8:f5:2c:f9:28:e6:e8:d2:ce:38:ed:56:ed:0c:dc:d7:a8:f9:
b5:1c:c7:a7:e4:49:bc:ae:6a:d6:45:37:4a:3a:da:89:6f:15:
5d:2b:70:14:02:77:01:13:1f:78:cc:37:4d:d7:19:a7:72:20:
1a:32:77:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:28 2025 by rpki-client