Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e6ccc7-d1e5-4f07-8dab-506a4934cad5/1/UNlf0yarPwj3bczGVrs-Hia03Fc.mft
File: UNlf0yarPwj3bczGVrs-Hia03Fc.mft (raw, json)
Hash identifier: uCow8Lun0NLqyKVSvlQ5vv1ObCEw04hCqhNyh/4yCrM=
Subject key identifier: 3D:47:CD:41:55:AE:3B:B3:00:B2:DA:2E:28:A8:B5:5D:33:18:F0:83
Authority key identifier: 50:D9:5F:D3:26:AB:3F:08:F7:6D:CC:C6:56:BB:3E:1E:26:B4:DC:57
Certificate issuer: /CN=50d95fd326ab3f08f76dccc656bb3e1e26b4dc57
Certificate serial: 01988B7CD370AE934CEC6B53F64B485BC1F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNlf0yarPwj3bczGVrs-Hia03Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e6ccc7-d1e5-4f07-8dab-506a4934cad5/1/UNlf0yarPwj3bczGVrs-Hia03Fc.mft
Manifest number: 01CA
Signing time: Fri 08 Aug 2025 21:01:10 +0000
Manifest this update: Fri 08 Aug 2025 21:01:10 +0000
Manifest next update: Sat 09 Aug 2025 21:01:10 +0000
Files and hashes: 1: UNlf0yarPwj3bczGVrs-Hia03Fc.crl (hash: gHNcXkzbxesQBMGrNPryUfbyeUd2nVRQrIO/bjCa6Y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e6ccc7-d1e5-4f07-8dab-506a4934cad5/1/UNlf0yarPwj3bczGVrs-Hia03Fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e6ccc7-d1e5-4f07-8dab-506a4934cad5/1/UNlf0yarPwj3bczGVrs-Hia03Fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNlf0yarPwj3bczGVrs-Hia03Fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:d3:70:ae:93:4c:ec:6b:53:f6:4b:48:5b:c1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d95fd326ab3f08f76dccc656bb3e1e26b4dc57
Validity
Not Before: Aug 8 21:01:10 2025 GMT
Not After : Aug 9 21:01:10 2025 GMT
Subject: CN=3d47cd4155ae3bb300b2da2e28a8b55d3318f083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:11:3a:29:65:79:bf:71:44:73:2e:bc:a2:b2:
26:60:b4:ed:07:ed:aa:8f:d6:af:d6:96:9e:a7:45:
b8:bb:c0:54:0c:7a:4e:20:3a:58:75:62:9f:92:ae:
50:04:9d:81:64:f0:03:b6:c9:8d:cb:61:50:e6:8f:
c3:41:1f:63:c3:e9:67:89:93:03:64:9f:c4:0f:32:
48:eb:b1:cb:4a:da:4d:47:7e:d2:31:92:bb:42:3a:
47:68:fe:fa:f8:11:c2:92:ff:44:44:5b:9d:14:93:
c9:e3:4f:4c:e2:19:a5:52:9b:1e:c2:0f:64:6c:6a:
9f:98:e8:08:90:14:1e:89:93:34:21:04:c5:58:b4:
b7:3f:6d:86:d7:e1:1d:db:98:de:20:67:c4:65:03:
e3:ef:a8:42:4c:a0:f4:5c:7b:5b:d6:64:c3:37:01:
ac:38:df:91:d2:9a:95:a7:80:6a:cc:77:b6:ed:87:
57:05:00:08:2f:7d:a4:3b:2e:d9:6e:2c:fc:38:b2:
a7:41:31:69:3e:e6:f4:34:2d:54:ed:86:ee:84:96:
fc:e7:20:9c:04:da:2a:08:c8:57:fa:a2:93:2f:22:
00:60:25:6a:77:04:27:c0:79:2d:75:7e:1c:f9:4a:
20:9e:78:e0:a3:84:dc:cf:8c:e1:b2:bf:5f:37:a8:
2e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:47:CD:41:55:AE:3B:B3:00:B2:DA:2E:28:A8:B5:5D:33:18:F0:83
X509v3 Authority Key Identifier:
keyid:50:D9:5F:D3:26:AB:3F:08:F7:6D:CC:C6:56:BB:3E:1E:26:B4:DC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNlf0yarPwj3bczGVrs-Hia03Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e6ccc7-d1e5-4f07-8dab-506a4934cad5/1/UNlf0yarPwj3bczGVrs-Hia03Fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e6ccc7-d1e5-4f07-8dab-506a4934cad5/1/UNlf0yarPwj3bczGVrs-Hia03Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:99:fd:1c:39:79:42:7b:61:3f:d5:3b:1d:6d:03:6c:65:1d:
8a:d5:3a:e3:2b:52:77:cd:f1:49:0c:51:f1:a4:1c:65:e9:21:
b2:0e:8d:d0:c6:9e:fe:d8:7c:d5:65:80:62:7c:5c:92:fe:a5:
8f:37:30:bb:f6:c3:0c:9a:fd:6a:3b:38:84:1e:40:16:e7:75:
2e:95:eb:4f:91:2e:7a:00:92:b5:1f:f6:af:f5:6f:a5:05:f5:
ac:87:f6:b0:cc:ab:fb:3b:c3:04:3b:f8:72:9a:60:4e:a0:6e:
1a:fb:66:ef:38:6f:8c:d5:b2:da:93:61:a7:d8:73:dc:ae:fb:
35:fb:a9:45:ae:97:82:16:da:2d:ae:a2:18:af:c3:8e:bd:c4:
65:df:7d:22:89:5d:23:d3:ff:f8:24:d2:e7:b7:fa:cb:64:b0:
14:72:11:2e:4f:a9:7d:e3:ee:dd:84:87:6a:f3:13:1f:09:22:
63:2d:34:fa:5d:12:9d:89:f1:26:ca:2a:61:7d:be:ee:cc:6d:
07:8d:c3:cb:01:72:18:5c:ae:8c:03:29:eb:ea:c2:12:24:1e:
0a:82:36:9d:bd:5a:60:67:97:17:ad:de:03:c6:02:4c:fc:a0:
82:93:08:6d:3e:26:7e:5f:9c:cc:22:85:50:76:57:21:d8:37:
1b:91:25:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:35:20 2025 by rpki-client