
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
File: uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft (raw, json)
Hash identifier: 6Yua+4Es7jas9bappfl7GFYNt27LN7Ve1gRAKUjKuKg=
Subject key identifier: 3A:90:84:FC:04:FA:A9:C5:0C:89:88:6F:0A:CC:FB:31:18:F2:22:8E
Authority key identifier: B9:14:53:15:B4:4C:B6:5D:2A:79:1A:0A:E5:82:36:64:D0:C4:44:5E
Certificate issuer: /CN=b9145315b44cb65d2a791a0ae5823664d0c4445e
Certificate serial: 01988167354369E6DB51AA531F682BBEB993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
Manifest number: 1618
Signing time: Wed 06 Aug 2025 22:01:21 +0000
Manifest this update: Wed 06 Aug 2025 22:01:21 +0000
Manifest next update: Thu 07 Aug 2025 22:01:21 +0000
Files and hashes: 1: uRRTFbRMtl0qeRoK5YI2ZNDERF4.crl (hash: CI+jgfJorQeOFOHBIzcXfp7GOKBeAPzt1v2/09uqfhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 22:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:35:43:69:e6:db:51:aa:53:1f:68:2b:be:b9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9145315b44cb65d2a791a0ae5823664d0c4445e
Validity
Not Before: Aug 6 22:01:21 2025 GMT
Not After : Aug 7 22:01:21 2025 GMT
Subject: CN=3a9084fc04faa9c50c89886f0accfb3118f2228e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:98:47:79:70:62:18:48:20:08:21:d4:3c:43:
f7:2c:fc:0a:db:09:06:b8:28:96:7d:5a:7e:e3:5e:
5c:f9:e4:ce:13:fd:9e:49:f1:73:e1:0d:94:f4:94:
0d:4a:f0:ed:b4:46:d2:79:0b:1b:45:19:2e:59:27:
3d:19:2a:53:68:8f:8b:91:df:a0:97:3b:6e:fb:1f:
f7:75:64:47:fe:49:dd:3d:db:44:07:e0:2b:91:ca:
90:22:ee:a0:97:c3:9a:23:73:b2:79:d0:64:f4:a1:
db:0f:84:28:79:12:1f:f2:b4:3a:f7:91:e2:5b:72:
8d:9f:24:6c:a1:14:92:a4:18:98:9b:a7:16:8f:e4:
de:34:52:92:36:fe:43:70:6c:c7:7f:2f:c1:4f:47:
bb:e2:a1:2b:a9:44:3c:9a:26:24:16:62:65:be:6c:
30:db:55:6c:04:c9:c7:8b:ba:a3:49:c1:72:bf:f1:
59:b6:5e:3c:8a:c5:a5:dc:d1:a6:97:5e:06:b8:ea:
39:2a:e4:f5:f6:c7:9a:88:1d:a1:3d:98:24:5a:ba:
6e:f4:9a:4b:06:10:f1:95:bf:f7:32:dd:89:42:7e:
3e:8a:ca:6f:d0:6f:fa:5f:b5:ab:c1:01:cf:04:da:
96:8c:43:b4:b5:40:db:23:ae:f9:c6:cd:e3:44:ea:
f4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:90:84:FC:04:FA:A9:C5:0C:89:88:6F:0A:CC:FB:31:18:F2:22:8E
X509v3 Authority Key Identifier:
keyid:B9:14:53:15:B4:4C:B6:5D:2A:79:1A:0A:E5:82:36:64:D0:C4:44:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:cf:d2:38:bb:3d:20:bc:1c:79:5e:be:2d:2a:57:3c:44:a1:
57:96:37:de:29:f9:b5:67:ed:0d:67:18:63:6f:bb:29:b8:b1:
ac:a8:5d:44:7a:9c:ff:60:17:aa:ef:5f:84:40:4a:b9:5e:f5:
b4:26:64:e4:67:91:ac:f3:b3:38:35:90:4f:37:a2:09:56:14:
de:5f:2b:75:fd:98:89:69:28:fe:09:00:25:f8:02:22:e8:31:
d8:75:18:d9:11:79:f0:e4:5c:66:b6:e2:c2:67:ec:9f:a3:b6:
d4:0f:3a:96:d9:e9:53:d3:3e:ea:a4:f7:68:31:39:55:3d:1f:
80:aa:b3:6d:21:34:5d:78:cc:d1:bd:53:7b:64:7e:34:4a:21:
00:0b:50:0c:44:5e:57:bc:38:11:1f:64:8e:b0:af:de:d9:82:
e7:ee:c4:6d:a0:62:64:47:aa:6a:7f:9f:5a:ea:c3:b2:37:93:
11:70:a1:cb:01:68:75:23:94:32:7e:b1:af:9c:8d:1c:98:0f:
f6:0b:0c:ce:fe:f0:fa:c2:e3:52:d5:73:17:eb:4c:d3:c6:e5:
60:e6:f4:92:53:0e:b4:be:17:db:4a:92:a2:b2:5c:a8:07:16:
74:38:76:e1:62:63:31:54:5b:e7:38:77:d2:9f:ca:e2:fe:13:
ea:a6:67:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:17:47 2025 by rpki-client