Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
File: ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft (raw, json)
Hash identifier: U4IUpfWP0PZjcQ3+zvQUmGvvGw65Szzb6MUGKXblGf8=
Subject key identifier: FE:7C:E9:64:8D:AA:25:11:56:36:69:98:55:13:34:7F:86:A9:D1:C7
Authority key identifier: BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E
Certificate issuer: /CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e
Certificate serial: 019896A541CB1A484E16D88FCD0C2CCF1978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
Manifest number: 0FE6
Signing time: Mon 11 Aug 2025 01:01:09 +0000
Manifest this update: Mon 11 Aug 2025 01:01:09 +0000
Manifest next update: Tue 12 Aug 2025 01:01:09 +0000
Files and hashes: 1: ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl (hash: xN2uTDQ8NJC+wZEaK09FfHZz3/3vCDvTTfpEfIQ7wc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:41:cb:1a:48:4e:16:d8:8f:cd:0c:2c:cf:19:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e
Validity
Not Before: Aug 11 01:01:09 2025 GMT
Not After : Aug 12 01:01:09 2025 GMT
Subject: CN=fe7ce9648daa2511563669985513347f86a9d1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:70:d5:c5:1f:b1:4d:30:db:69:e8:03:0d:e9:
fd:97:09:d8:c7:cc:da:45:67:67:77:33:c4:1e:f3:
6f:2c:d8:5f:7b:32:6b:2e:c6:65:f1:9b:ab:3a:47:
47:b6:d0:5e:27:a1:71:c6:47:a0:72:00:e2:2f:3e:
33:c4:c1:e3:34:50:57:72:c7:26:03:89:e3:51:a7:
74:f6:ae:cc:99:f7:0d:99:e9:8e:8b:f3:e4:83:90:
36:51:1c:ed:84:a1:52:0c:d3:0e:a0:65:32:90:0d:
28:74:da:9e:a6:43:b0:1a:f9:b3:f0:6d:d7:4b:9f:
21:e6:96:5b:5c:36:09:86:cf:15:7b:04:d4:ed:86:
96:ec:8c:6f:d5:e0:89:75:05:a1:be:d5:79:d3:2a:
da:aa:6e:2f:94:82:36:99:88:94:f8:66:4e:f7:af:
27:8f:15:d9:68:ca:a0:3f:4d:6e:f7:28:31:4c:b0:
66:ea:0a:b7:ac:c0:9f:26:62:68:91:7f:bc:60:0d:
48:ad:27:df:90:c0:eb:94:3d:02:c9:85:f2:c6:66:
bd:04:f8:de:eb:43:01:87:cf:09:6c:28:c2:48:2b:
5c:78:2c:c0:37:9e:ae:cf:aa:9d:36:04:38:3c:43:
a6:cf:e4:4f:4a:4f:8c:b1:d1:15:66:95:5c:0b:0b:
ed:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7C:E9:64:8D:AA:25:11:56:36:69:98:55:13:34:7F:86:A9:D1:C7
X509v3 Authority Key Identifier:
keyid:BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:93:01:33:f9:a0:ca:9e:1f:8b:7f:0f:e5:42:6e:e2:40:7e:
7e:eb:dd:9b:02:5d:70:9f:f6:7d:e0:f5:e0:f0:29:f2:5a:26:
80:e7:e7:61:ba:bc:d0:87:73:78:2e:f3:c1:81:86:d7:62:52:
33:19:34:29:5a:f5:77:51:76:37:9f:f0:0f:60:2b:35:22:e8:
5c:09:6e:66:1c:22:d0:1c:b6:d5:55:e6:50:44:7d:cc:e0:7d:
6e:6d:8a:d1:01:ed:d8:ee:64:9f:97:41:0d:76:29:c4:dc:f1:
ca:db:ca:5e:23:4e:82:fd:eb:f1:dd:af:b6:74:75:6a:8e:97:
6e:19:af:93:0b:71:34:74:b0:6f:75:91:3c:1a:2b:49:7a:ad:
65:23:51:4d:de:1f:e1:ea:78:95:8e:c0:8b:69:a3:5b:65:0a:
a1:4e:79:8b:ab:29:43:25:5c:e8:3e:9b:a3:85:b1:af:53:c4:
85:16:65:98:20:88:0d:c5:b1:64:c6:ce:89:8c:b2:14:76:c0:
5c:1a:3f:84:45:f3:67:4e:62:2f:7c:5c:f1:9f:c7:f0:66:a1:
cb:70:b5:ca:77:d3:39:64:01:df:06:dc:e7:71:b2:0f:cd:ae:
74:b7:27:b3:b4:bd:65:b5:bb:0d:91:9e:6b:3d:f2:76:94:95:
ac:e2:77:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:37:01 2025 by rpki-client