Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
File: UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft (raw, json)
Hash identifier: Oe8ZYBzAGk99SNz1rSqY/mwSOKveviyJNLINcUC+9E0=
Subject key identifier: F1:C5:D3:1D:15:AF:61:63:A2:CA:97:B2:5B:C1:5F:99:94:77:99:72
Authority key identifier: 50:1B:52:02:A0:ED:46:F6:41:1E:1E:DA:7C:7B:59:DD:8C:C6:CD:87
Certificate issuer: /CN=501b5202a0ed46f6411e1eda7c7b59dd8cc6cd87
Certificate serial: 01988C5856735E7B0A80F1AAB8F8BE68BFC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
Manifest number: 1376
Signing time: Sat 09 Aug 2025 01:00:56 +0000
Manifest this update: Sat 09 Aug 2025 01:00:56 +0000
Manifest next update: Sun 10 Aug 2025 01:00:56 +0000
Files and hashes: 1: UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl (hash: e2HURSKE81HLBZvbjJ5mDyNhWt0CGmmSQCCn82Fe7O4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:58:56:73:5e:7b:0a:80:f1:aa:b8:f8:be:68:bf:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501b5202a0ed46f6411e1eda7c7b59dd8cc6cd87
Validity
Not Before: Aug 9 01:00:56 2025 GMT
Not After : Aug 10 01:00:56 2025 GMT
Subject: CN=f1c5d31d15af6163a2ca97b25bc15f9994779972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a4:14:ba:9c:dd:45:1f:42:87:f0:cc:cc:87:
2d:f4:fa:2a:dc:a9:32:8c:19:31:14:d5:f8:f7:d5:
7d:57:d4:70:6b:6f:0d:0f:3d:be:86:e6:fd:97:ae:
ef:06:bb:ce:4d:27:4c:8e:17:c8:b9:c0:4f:08:ff:
99:0c:41:7d:7e:59:e9:26:04:cf:64:05:26:4f:16:
f8:ca:ba:d0:d6:9e:5e:b4:25:c3:b4:2b:56:52:d7:
50:a6:e0:82:18:80:cf:c8:c9:1f:d7:5a:ce:08:58:
90:2e:da:81:d5:dd:d3:1b:e5:80:2b:38:39:e2:b1:
33:9e:e5:85:86:96:ca:a7:81:5d:f6:4c:4a:97:0d:
5f:c5:31:d5:61:e9:0d:9c:cf:93:fe:b3:d5:25:cd:
26:8d:1e:c5:1a:57:6f:11:6b:e0:0e:6f:92:ec:f3:
2d:7e:48:23:dc:dd:f8:5d:72:31:48:ad:bc:a2:77:
21:e8:36:e5:4e:64:49:8a:80:82:8e:04:c7:4a:3f:
e9:0e:ae:a0:af:81:ae:b0:15:92:16:5d:0a:10:01:
7c:ce:79:fb:ef:3d:c1:5b:cb:db:34:e9:99:f0:7d:
53:c4:1f:32:8c:aa:13:8d:82:a2:0d:7c:f6:71:aa:
90:f3:3d:4a:22:c2:bf:74:e2:d3:1e:7b:74:09:3e:
9d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C5:D3:1D:15:AF:61:63:A2:CA:97:B2:5B:C1:5F:99:94:77:99:72
X509v3 Authority Key Identifier:
keyid:50:1B:52:02:A0:ED:46:F6:41:1E:1E:DA:7C:7B:59:DD:8C:C6:CD:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:2c:3b:02:3f:10:ba:f3:d5:fe:7d:84:11:61:a4:2f:f6:9d:
83:37:b4:42:d8:ac:e4:72:ea:b6:b0:ec:69:bd:bc:c1:c2:7b:
63:5f:c2:05:4f:fb:07:c2:cb:94:b6:21:91:6c:b0:f0:9a:28:
62:e9:20:f1:dc:c7:69:a8:85:a1:e1:0d:fd:d2:fd:e3:17:de:
8e:3c:ef:12:9a:ad:04:07:26:dd:3d:ce:e0:65:d1:ff:d2:40:
be:49:96:ed:14:9d:e4:08:8f:b7:1d:cf:4c:2d:18:ca:5c:d3:
1c:9e:7d:dc:76:36:9a:3c:ce:55:38:83:42:03:13:37:5b:21:
d3:4d:50:73:73:4b:80:fa:e3:0d:c8:d1:d7:42:45:8e:68:35:
e2:55:62:a2:63:f3:04:1b:49:33:21:ae:4b:22:2f:3f:76:ea:
aa:ae:e1:94:6f:99:66:69:88:d3:7d:c3:f8:43:6a:39:25:cb:
46:de:34:12:99:69:d1:87:79:24:1a:04:6f:1b:e5:9d:3a:f0:
82:4b:e3:4e:0c:0f:95:d5:74:e5:e4:6a:1a:5b:13:da:c8:2d:
59:4f:e6:72:6c:cc:7b:c8:e0:59:71:8a:fd:ec:34:ed:b5:0e:
f4:00:b5:c0:7d:90:98:41:0e:6f:6f:5e:d0:24:ec:5a:b6:59:
77:e6:7e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:35 2025 by rpki-client