Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft
File: uFK2pNRayK4a7VTG9ayO1v88Hdc.mft (raw, json)
Hash identifier: rXp8ptD4SUFwwwhlgt9slnzaCQdi1BqWtOUgPm6TuSk=
Subject key identifier: 0B:74:C9:39:B0:57:EC:C8:4D:D2:F9:8F:59:F7:53:4A:2C:04:35:D0
Authority key identifier: B8:52:B6:A4:D4:5A:C8:AE:1A:ED:54:C6:F5:AC:8E:D6:FF:3C:1D:D7
Certificate issuer: /CN=b852b6a4d45ac8ae1aed54c6f5ac8ed6ff3c1dd7
Certificate serial: 019873E312E1FDF23D3BA0EA02BD43B9AAB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFK2pNRayK4a7VTG9ayO1v88Hdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft
Manifest number: 0BAB
Signing time: Mon 04 Aug 2025 07:01:58 +0000
Manifest this update: Mon 04 Aug 2025 07:01:58 +0000
Manifest next update: Tue 05 Aug 2025 07:01:58 +0000
Files and hashes: 1: uFK2pNRayK4a7VTG9ayO1v88Hdc.crl (hash: wHEx29YLl2fB4l+8oyrD644zYU/+XwUtGbG2tPoag0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFK2pNRayK4a7VTG9ayO1v88Hdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:12:e1:fd:f2:3d:3b:a0:ea:02:bd:43:b9:aa:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b852b6a4d45ac8ae1aed54c6f5ac8ed6ff3c1dd7
Validity
Not Before: Aug 4 07:01:58 2025 GMT
Not After : Aug 5 07:01:58 2025 GMT
Subject: CN=0b74c939b057ecc84dd2f98f59f7534a2c0435d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e0:12:6d:ad:17:98:94:f5:ae:10:6a:35:05:
f6:47:80:d4:58:0f:24:1a:c7:7b:32:44:23:64:de:
91:7d:87:b9:51:d1:44:a7:50:86:f1:2b:14:b6:0f:
5a:59:71:0f:6a:ff:b4:f6:30:75:9b:a8:d7:b2:49:
31:f4:e2:f2:0e:54:88:db:e5:3f:ce:c1:4f:72:13:
16:5b:e4:61:48:42:f9:94:af:0d:e6:cf:fc:e7:d1:
24:3c:a8:34:41:eb:b9:3e:ae:58:a6:ef:12:1f:1e:
67:47:a6:81:3c:72:6e:be:1f:8e:cf:31:b8:75:1a:
3c:d1:2d:85:19:4e:a2:b6:56:b2:83:59:a7:79:b0:
1f:d8:37:36:99:08:5a:11:74:33:fa:be:6b:83:d2:
d1:97:c8:86:3b:60:a7:85:4f:d7:61:c3:a1:57:2e:
a0:20:a7:15:b2:03:b5:32:be:74:08:ce:28:5c:9f:
2d:fc:33:fe:8b:dd:10:b6:ff:75:a8:ce:40:27:93:
eb:83:0d:92:10:cb:79:69:8e:ca:fc:bc:ea:d7:76:
bb:df:eb:89:bf:1d:01:de:b5:52:8f:b6:2d:ad:25:
be:fd:3c:24:42:de:99:84:36:28:79:f9:f7:e4:9c:
ab:cc:29:27:39:1b:35:d4:32:33:19:49:c5:0d:60:
ab:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:74:C9:39:B0:57:EC:C8:4D:D2:F9:8F:59:F7:53:4A:2C:04:35:D0
X509v3 Authority Key Identifier:
keyid:B8:52:B6:A4:D4:5A:C8:AE:1A:ED:54:C6:F5:AC:8E:D6:FF:3C:1D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFK2pNRayK4a7VTG9ayO1v88Hdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a3:f6:56:95:07:cf:e8:54:f5:58:bf:7c:f2:6d:65:a6:2f:
74:cf:f2:02:ae:cd:36:b1:f4:17:53:fd:95:38:23:43:3b:e0:
6e:a7:79:f0:3c:06:63:f8:5c:98:ef:9c:27:51:72:55:e6:c0:
27:24:9d:79:9c:ad:d9:dd:94:12:3c:0f:48:22:61:52:fb:c4:
64:54:00:a0:50:60:1b:64:a2:fb:cd:d1:26:c5:f5:1a:78:8a:
82:38:51:8e:7c:db:d8:3a:1b:44:2c:6f:3b:71:8d:42:0d:70:
ab:47:c8:6d:96:05:7a:9d:07:0a:13:cc:3e:41:37:4c:26:ff:
e4:c4:53:3b:db:2e:74:d6:c1:af:60:93:1b:b6:d4:66:a2:f6:
cb:4b:15:37:5f:42:a0:11:2e:f5:b2:2f:a5:eb:96:b8:d3:87:
16:a5:d4:c5:31:dd:d2:e3:47:07:b3:f2:89:3e:30:8c:cd:2f:
cf:92:cc:c5:c6:69:dd:6a:73:87:89:29:02:72:de:4a:ec:9f:
2e:49:a4:fb:27:82:95:03:2c:cc:33:a5:15:0b:79:df:1d:83:
b8:00:b8:bf:01:cc:42:68:53:8f:68:08:f6:89:e0:0e:c6:3b:
4c:01:8b:14:2c:a2:ec:d5:c9:8d:37:29:b8:aa:4e:12:e8:c8:
a1:d8:3a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:56 2025 by rpki-client