Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft
File: UoUm3npC8eCAkWhA7r85A4uJPRY.mft (raw, json)
Hash identifier: 9gYE8Fi8psHCXlWJrgX1R1nyjY7QvJrNht89B9JlxsY=
Subject key identifier: E6:FE:BA:DF:62:B3:7E:54:6A:9F:DF:82:31:A2:65:F1:16:B9:3B:DF
Authority key identifier: 52:85:26:DE:7A:42:F1:E0:80:91:68:40:EE:BF:39:03:8B:89:3D:16
Certificate issuer: /CN=528526de7a42f1e080916840eebf39038b893d16
Certificate serial: 01989E5E860783900C55FB190243B7BCAC21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoUm3npC8eCAkWhA7r85A4uJPRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft
Manifest number: 09B2
Signing time: Tue 12 Aug 2025 13:00:51 +0000
Manifest this update: Tue 12 Aug 2025 13:00:51 +0000
Manifest next update: Wed 13 Aug 2025 13:00:51 +0000
Files and hashes: 1: UoUm3npC8eCAkWhA7r85A4uJPRY.crl (hash: dIK1zG4omjB7noFQgS9ASVbXwQfyeBs69F5B8NW3rXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UoUm3npC8eCAkWhA7r85A4uJPRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:5e:86:07:83:90:0c:55:fb:19:02:43:b7:bc:ac:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528526de7a42f1e080916840eebf39038b893d16
Validity
Not Before: Aug 12 13:00:51 2025 GMT
Not After : Aug 13 13:00:51 2025 GMT
Subject: CN=e6febadf62b37e546a9fdf8231a265f116b93bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1e:2a:01:85:5d:75:f3:3b:0f:4a:1e:25:90:
16:19:59:47:ed:c8:7e:29:5b:e0:ab:82:7e:12:f1:
28:fd:af:84:69:0d:70:28:a8:0d:b7:4f:e1:0f:91:
30:78:36:b8:e4:11:2d:db:ec:c9:75:f7:88:8e:c7:
56:95:43:c9:0d:f2:97:5c:fe:f1:ca:3d:ff:56:2f:
e5:73:64:de:63:1b:6b:97:ed:d1:71:2a:69:8e:0b:
67:e0:50:2e:7b:58:97:e2:4c:02:8b:04:ef:99:66:
c3:58:a2:00:e5:ba:8e:03:e3:be:56:e3:63:ef:3b:
d9:86:ef:45:69:ee:32:9b:dc:2a:5b:2a:74:71:da:
ab:60:d3:74:f5:55:32:8f:67:21:26:b7:8a:a8:ad:
a7:ab:6a:71:44:32:53:e0:19:be:bc:81:b5:b4:93:
47:71:7b:58:48:a6:b8:6c:95:d3:bd:27:38:1d:3a:
90:10:78:76:33:58:07:8d:46:23:2b:c0:b8:df:70:
06:80:4c:89:9c:4b:ab:10:3b:86:b1:be:ed:e5:5b:
93:fe:4d:19:0b:e6:0c:c4:5a:26:03:07:ce:e3:e6:
4b:46:6d:df:fe:01:da:3b:b7:30:fa:7d:5d:a6:21:
b2:7e:a7:48:13:0a:d7:e0:ab:d6:82:f4:0a:cb:0a:
6f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FE:BA:DF:62:B3:7E:54:6A:9F:DF:82:31:A2:65:F1:16:B9:3B:DF
X509v3 Authority Key Identifier:
keyid:52:85:26:DE:7A:42:F1:E0:80:91:68:40:EE:BF:39:03:8B:89:3D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoUm3npC8eCAkWhA7r85A4uJPRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:05:fb:59:49:1f:14:48:90:46:cd:3c:23:ea:56:95:38:1d:
b0:b9:ae:ec:9f:f1:c6:cc:7d:a0:71:d8:fa:6b:e0:8b:b8:be:
fb:e7:db:12:e3:d6:af:83:f9:57:ab:ed:17:8c:3f:42:e6:82:
b3:93:48:11:cb:7f:54:ad:0a:d7:45:89:b1:8f:67:cb:63:0c:
f1:5c:28:5b:d5:af:db:fa:d0:b0:9d:d0:82:eb:ff:1c:83:e7:
96:86:1b:c1:cf:58:cd:51:bf:cd:4b:ea:2a:50:aa:65:31:f0:
88:fa:8f:f9:a4:ec:3a:23:e7:21:e4:85:ec:8e:ab:cd:aa:2f:
32:11:42:17:f7:e7:35:14:1a:57:80:cd:48:3d:77:a2:a5:91:
01:74:a7:68:1d:36:98:16:e1:1f:f1:6e:83:a0:a4:6f:b8:cf:
b2:bd:94:06:37:d0:77:51:39:73:4c:a4:39:a0:c1:07:c8:c0:
38:6b:b7:79:34:eb:8a:7b:79:c6:fe:a1:84:7f:77:7e:2d:96:
e7:d7:f3:46:26:e4:df:76:af:55:af:27:0e:4f:fc:c2:6b:88:
b1:f7:bc:76:b4:b0:fe:4a:1d:1a:7c:f3:7b:ad:be:42:a5:6e:
b4:08:1d:f3:77:cc:a8:1f:d4:3e:84:ea:58:fe:a4:fc:ac:87:
36:0a:64:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:24:38 2025 by rpki-client