
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.mft
File: uU8woHaUohE5ZIclom6zTOSha6s.mft (raw, json)
Hash identifier: C4jJFd9DkDD8NPRIek8IqYm4P4g1inLaHsxNw0iB4+s=
Subject key identifier: 30:9B:82:08:CB:1D:9A:50:F1:2D:3A:65:B4:DA:4C:7E:3E:BB:A0:3D
Authority key identifier: B9:4F:30:A0:76:94:A2:11:39:64:87:25:A2:6E:B3:4C:E4:A1:6B:AB
Certificate issuer: /CN=b94f30a07694a21139648725a26eb34ce4a16bab
Certificate serial: 01988BEA65E6671C95056F2D2F5A6BB8F01D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uU8woHaUohE5ZIclom6zTOSha6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.mft
Manifest number: 02B7
Signing time: Fri 08 Aug 2025 23:00:51 +0000
Manifest this update: Fri 08 Aug 2025 23:00:51 +0000
Manifest next update: Sat 09 Aug 2025 23:00:51 +0000
Files and hashes: 1: uU8woHaUohE5ZIclom6zTOSha6s.crl (hash: mpukdhE51EOQT79rHkuIDBZ88rAGX9fbUQB4KKgb1iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uU8woHaUohE5ZIclom6zTOSha6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:65:e6:67:1c:95:05:6f:2d:2f:5a:6b:b8:f0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b94f30a07694a21139648725a26eb34ce4a16bab
Validity
Not Before: Aug 8 23:00:51 2025 GMT
Not After : Aug 9 23:00:51 2025 GMT
Subject: CN=309b8208cb1d9a50f12d3a65b4da4c7e3ebba03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:67:e3:7c:da:52:49:93:92:62:69:9d:98:7f:
43:1b:1f:9a:42:e6:e9:34:b9:f6:38:10:15:8f:b3:
94:8b:58:67:56:48:44:0d:36:df:25:c1:0c:21:b3:
0e:f6:b2:78:99:32:0b:37:28:2a:fb:c1:f4:35:61:
84:d0:21:7c:d9:dd:53:33:1d:4c:e6:37:ee:95:a9:
62:1c:c1:1f:54:b2:da:4e:3d:7b:ad:af:67:cb:ee:
d4:16:6c:89:da:0b:be:ba:3e:9f:f3:08:e3:e1:28:
84:86:c2:f2:80:38:50:18:68:a2:42:60:79:03:81:
d5:eb:92:a1:d0:21:ac:7d:d6:4e:46:84:1e:48:83:
38:91:49:39:8e:cf:22:2c:c5:9d:10:c8:c6:f0:90:
1e:9f:06:3e:65:f7:2c:3e:4b:d3:b6:52:70:40:dd:
f3:e1:a5:c4:f3:8c:bc:e6:d2:bd:63:4b:16:a6:2a:
d1:ae:1a:fa:67:b9:25:0d:d3:87:a2:3a:17:2b:48:
78:a6:95:c4:c8:f3:51:13:f8:9a:d0:ea:64:62:7b:
aa:fe:34:ea:26:52:69:df:52:ba:5e:43:ad:02:73:
6c:d1:34:41:38:63:d9:41:de:5f:c4:b7:b6:d4:72:
23:d5:f0:ba:28:45:b3:9f:05:77:25:64:47:42:82:
b1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9B:82:08:CB:1D:9A:50:F1:2D:3A:65:B4:DA:4C:7E:3E:BB:A0:3D
X509v3 Authority Key Identifier:
keyid:B9:4F:30:A0:76:94:A2:11:39:64:87:25:A2:6E:B3:4C:E4:A1:6B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uU8woHaUohE5ZIclom6zTOSha6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a3:a3:49:a7:ed:ea:c7:c4:02:c8:e2:aa:13:52:da:8c:53:
f2:5a:d4:d7:67:62:b7:8f:f0:9a:2f:8a:48:de:0d:36:26:43:
a7:6f:da:7f:c0:24:7a:d1:f8:17:4f:4a:9d:69:a5:3a:52:61:
e4:05:3b:ee:8c:95:45:1a:e1:a9:11:e9:d6:92:65:cc:db:35:
ff:06:b6:e8:d1:db:a3:45:d2:54:ed:85:ba:cb:69:68:52:26:
ec:a0:40:ad:f5:4b:ba:a6:7e:79:c4:63:4a:d1:b4:73:c0:1d:
5d:fe:0d:7c:48:45:ea:50:0d:93:49:b5:3e:ad:b7:e9:e6:cf:
03:03:11:d7:88:2a:10:24:cb:63:e1:4a:ca:77:e3:d1:f8:ba:
f6:5a:d1:b4:17:b9:3d:1d:db:fc:f4:bc:d5:bb:51:78:98:f3:
65:8e:ff:34:1c:3f:4f:48:33:92:45:a8:42:4f:ed:93:46:39:
76:b4:90:9c:58:b7:f3:72:d1:ef:a7:17:d3:bd:4f:1a:13:27:
d4:9d:a1:a8:4f:d9:01:f3:7f:8e:6b:4d:ce:d0:50:37:38:8c:
6f:9c:8a:14:ea:95:a8:4b:95:39:7d:9f:40:f3:f2:76:5e:e0:
72:39:50:e1:c0:38:a1:0b:07:d2:5d:37:70:ce:b5:a3:34:ed:
eb:bc:33:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:22 2025 by rpki-client