Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/62578b-610b-4758-bbb5-4c9165c7d5e4/1/UyClURbR4jWcx9PivGStEZ4RdbE.mft
File: UyClURbR4jWcx9PivGStEZ4RdbE.mft (raw, json)
Hash identifier: VONA2geFhGNJ4Rg1hKrnOLzxN5PmZCYC9SmMmAg6Tgw=
Subject key identifier: DF:19:AC:43:10:44:23:D1:A3:8B:5D:95:8B:22:7C:8E:9E:4D:E9:2C
Authority key identifier: 53:20:A5:51:16:D1:E2:35:9C:C7:D3:E2:BC:64:AD:11:9E:11:75:B1
Certificate issuer: /CN=5320a55116d1e2359cc7d3e2bc64ad119e1175b1
Certificate serial: 019874F545AE4C5DD91E2C3C6C18DF9F2DDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UyClURbR4jWcx9PivGStEZ4RdbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/62578b-610b-4758-bbb5-4c9165c7d5e4/1/UyClURbR4jWcx9PivGStEZ4RdbE.mft
Manifest number: 0561
Signing time: Mon 04 Aug 2025 12:01:27 +0000
Manifest this update: Mon 04 Aug 2025 12:01:27 +0000
Manifest next update: Tue 05 Aug 2025 12:01:27 +0000
Files and hashes: 1: UyClURbR4jWcx9PivGStEZ4RdbE.crl (hash: Snlzzn8LrXz6ds0wUReQpIcrdcrVOsYaiO5+HGYps2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/62578b-610b-4758-bbb5-4c9165c7d5e4/1/UyClURbR4jWcx9PivGStEZ4RdbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/62578b-610b-4758-bbb5-4c9165c7d5e4/1/UyClURbR4jWcx9PivGStEZ4RdbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UyClURbR4jWcx9PivGStEZ4RdbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f5:45:ae:4c:5d:d9:1e:2c:3c:6c:18:df:9f:2d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5320a55116d1e2359cc7d3e2bc64ad119e1175b1
Validity
Not Before: Aug 4 12:01:27 2025 GMT
Not After : Aug 5 12:01:27 2025 GMT
Subject: CN=df19ac43104423d1a38b5d958b227c8e9e4de92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:28:74:80:94:75:09:4a:4b:f4:5e:9f:37:9e:
db:1c:6b:98:88:a4:93:ec:b7:d3:0f:51:de:79:08:
36:07:40:31:3e:a3:9b:1e:9b:e9:f4:fd:20:ea:18:
6f:5a:5f:9a:11:ac:73:1f:37:de:1e:6b:14:06:04:
40:4d:b9:27:18:0e:ec:ed:7d:74:89:ee:60:6c:ba:
bb:be:ba:d0:0d:26:af:d8:ba:4c:ff:63:01:ad:ca:
a3:63:9c:e8:9d:36:4e:42:58:33:1b:9b:c6:32:55:
2a:8e:5c:86:2f:a3:9c:fb:ed:5e:bb:4f:0e:a2:0f:
93:32:ad:bf:9d:df:1c:25:60:b4:d3:d1:fb:fe:42:
7d:4b:8c:3b:61:61:c9:75:50:8b:9a:14:8b:ec:71:
03:03:c8:e1:4f:db:7b:b4:15:48:46:98:12:24:6a:
be:54:ee:82:5c:d5:75:a2:81:14:88:fc:91:18:f6:
dd:3f:d0:fb:95:72:af:4d:7c:f8:f0:63:3f:71:24:
81:18:6b:a9:77:e8:e4:ed:77:34:70:7c:04:f4:97:
0f:fd:e3:c2:f7:e0:9d:3f:c0:21:a4:e0:6e:86:30:
ca:8d:ea:a6:91:44:be:75:a9:8c:2c:71:90:a3:43:
ab:b5:95:5f:ba:df:e8:b4:c2:3a:f0:76:eb:9b:71:
2d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:19:AC:43:10:44:23:D1:A3:8B:5D:95:8B:22:7C:8E:9E:4D:E9:2C
X509v3 Authority Key Identifier:
keyid:53:20:A5:51:16:D1:E2:35:9C:C7:D3:E2:BC:64:AD:11:9E:11:75:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyClURbR4jWcx9PivGStEZ4RdbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/62578b-610b-4758-bbb5-4c9165c7d5e4/1/UyClURbR4jWcx9PivGStEZ4RdbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/62578b-610b-4758-bbb5-4c9165c7d5e4/1/UyClURbR4jWcx9PivGStEZ4RdbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:53:9c:e1:28:04:a7:af:a6:30:82:0f:2d:b3:70:87:6e:b7:
96:80:71:53:75:2c:91:1c:8e:be:61:e7:1f:6e:86:38:e4:3b:
c0:6f:21:42:81:86:85:37:fa:b2:a2:ad:b3:b4:cb:36:1d:36:
a9:37:06:60:f4:1a:e0:7e:14:be:a5:fc:c9:ec:9c:7a:53:c9:
8d:00:87:5f:f0:91:ef:56:b1:96:55:80:af:23:40:4d:e0:4d:
3d:70:a9:c0:92:10:71:3e:04:60:d4:10:93:38:2d:d4:9b:11:
e8:02:2c:59:22:59:b6:1b:39:60:0e:cb:54:54:29:f4:ad:99:
4e:03:59:9b:14:6c:5e:c0:32:40:ff:22:b4:84:59:18:c5:81:
71:4c:fd:67:d7:80:48:4c:53:dc:c5:ee:26:d2:f8:02:f5:39:
33:e7:5b:52:30:23:70:06:99:26:b8:d2:62:20:58:39:ce:a3:
91:ed:b2:ab:e7:6c:2f:c5:dc:be:4f:7e:49:f7:a6:ca:3c:36:
99:40:f7:0f:a1:16:a7:a5:1a:76:cd:be:9d:28:e1:86:7d:b6:
39:18:28:e3:6d:a4:97:f1:a5:4c:d8:b1:3a:32:ee:42:65:95:
4b:55:f2:98:00:07:40:38:de:d5:d7:51:3d:42:ba:da:94:12:
b1:72:59:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:09:50 2025 by rpki-client