
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.mft
File: UVy9vRam6GjplnW8KRgCaMJY8Ps.mft (raw, json)
Hash identifier: /0QMD+fSLP1fI3UH1R8sNJdqvwk7xfsQ5V14KuakktE=
Subject key identifier: 22:AF:FA:7F:98:1E:23:1B:9E:9B:F5:0A:03:CC:7E:F6:BC:98:BF:8F
Authority key identifier: 51:5C:BD:BD:16:A6:E8:68:E9:96:75:BC:29:18:02:68:C2:58:F0:FB
Certificate issuer: /CN=515cbdbd16a6e868e99675bc29180268c258f0fb
Certificate serial: 019879AD5A87F61D00CFF313194DAB997BC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVy9vRam6GjplnW8KRgCaMJY8Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.mft
Manifest number: 1105
Signing time: Tue 05 Aug 2025 10:01:00 +0000
Manifest this update: Tue 05 Aug 2025 10:01:00 +0000
Manifest next update: Wed 06 Aug 2025 10:01:00 +0000
Files and hashes: 1: UVy9vRam6GjplnW8KRgCaMJY8Ps.crl (hash: LyzVo1pVdwAnCUgij5xPUBBtFwc6KcDwqLF/bfvFsnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/UVy9vRam6GjplnW8KRgCaMJY8Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ad:5a:87:f6:1d:00:cf:f3:13:19:4d:ab:99:7b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=515cbdbd16a6e868e99675bc29180268c258f0fb
Validity
Not Before: Aug 5 10:01:00 2025 GMT
Not After : Aug 6 10:01:00 2025 GMT
Subject: CN=22affa7f981e231b9e9bf50a03cc7ef6bc98bf8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9a:8e:f7:1c:51:64:32:25:f3:a9:a5:6c:92:
68:10:6e:28:6f:71:42:d9:47:f8:19:4d:dd:82:ac:
62:15:29:ad:1c:20:cc:1a:cb:fb:da:b8:71:85:31:
9c:ca:f5:65:2b:01:c6:6e:d5:0c:fc:28:d3:d3:3b:
f7:25:09:55:8c:db:7a:27:a5:eb:3f:4c:f6:a7:eb:
46:85:57:07:4d:d5:7f:91:c0:f8:67:f5:2e:ce:73:
49:d2:50:9d:35:c9:a2:f5:b7:a7:69:eb:16:49:59:
9b:23:f8:b2:23:d5:3a:78:20:3f:62:4c:08:61:38:
c7:11:9f:ee:78:fb:71:4d:a5:ca:c0:53:12:ac:44:
15:fa:7b:07:6a:c0:60:ce:a6:43:9b:9b:f4:2b:f8:
2d:09:9e:69:6b:b0:03:9f:58:b3:13:3e:b3:ab:11:
98:94:9e:ff:51:64:4c:f7:85:ac:2b:44:06:1d:40:
b7:d6:68:01:ab:30:c7:16:67:ba:f2:40:8c:90:67:
8c:00:e8:0c:2b:e8:f6:b9:b2:2f:a9:98:2a:af:d5:
f5:20:8c:91:cb:5e:ad:46:27:e3:1b:60:36:bb:4c:
52:01:3c:43:82:66:ba:fb:36:94:d1:7a:d7:fb:91:
85:dc:96:5a:e0:f6:a8:69:c2:c5:30:80:d5:92:2f:
08:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AF:FA:7F:98:1E:23:1B:9E:9B:F5:0A:03:CC:7E:F6:BC:98:BF:8F
X509v3 Authority Key Identifier:
keyid:51:5C:BD:BD:16:A6:E8:68:E9:96:75:BC:29:18:02:68:C2:58:F0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVy9vRam6GjplnW8KRgCaMJY8Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a6:7d:65:31:bc:d8:40:c5:6b:83:04:8b:5f:f9:e8:66:54:
0b:ca:53:b8:da:b1:ce:b1:e9:fb:00:29:05:6c:dc:70:d4:93:
0b:5d:f3:4e:65:d4:f8:36:a4:77:37:d5:b6:a9:4f:c5:b9:73:
28:fc:66:c8:05:43:af:1d:99:c0:5e:38:b2:7b:28:f1:ef:cd:
77:fb:13:69:cc:1b:f7:93:41:54:3c:8e:35:33:b5:74:c7:9e:
e4:13:19:da:6a:46:15:0c:21:74:dc:9e:17:a0:fc:40:29:d4:
03:b0:a0:97:0d:c5:38:4b:f4:2f:0f:48:af:61:2c:ea:7f:78:
cd:9c:67:81:72:b6:13:5d:f2:59:b8:69:56:75:7b:f5:c1:42:
47:37:6d:59:74:4b:bb:35:57:66:73:22:70:3b:78:2d:82:4d:
e8:6d:76:62:cb:b0:98:2a:1e:e4:c2:e3:09:90:9a:a5:b8:6b:
74:9c:15:37:14:ae:c4:e3:d6:da:ce:16:01:2f:ab:ec:f3:f7:
4f:f0:9a:d6:99:d7:02:83:61:1c:9a:c7:9d:ac:aa:5e:54:bc:
1d:33:dd:01:31:10:ad:7b:79:5c:85:18:fc:1d:dd:f3:07:39:
01:a3:48:b3:75:33:84:4b:9d:1f:6c:cc:69:69:5e:15:f8:e7:
3d:ce:24:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:23:16 2025 by rpki-client