Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
File: UZhWegOeXM4j7pN0CW7tV7u6KY4.mft (raw, json)
Hash identifier: TBeL7sDLK++b8qRgZ4Lu6FxHFdF/cNjtg5xmD3MNHPw=
Subject key identifier: 69:10:0C:81:62:A4:86:A4:3E:E1:65:A0:CF:9C:87:95:D2:2B:2B:ED
Authority key identifier: 51:98:56:7A:03:9E:5C:CE:23:EE:93:74:09:6E:ED:57:BB:BA:29:8E
Certificate issuer: /CN=5198567a039e5cce23ee9374096eed57bbba298e
Certificate serial: 01989E5F2353CECC46E4F0385D19B7F4A7AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
Manifest number: 1627
Signing time: Tue 12 Aug 2025 13:01:31 +0000
Manifest this update: Tue 12 Aug 2025 13:01:31 +0000
Manifest next update: Wed 13 Aug 2025 13:01:31 +0000
Files and hashes: 1: UZhWegOeXM4j7pN0CW7tV7u6KY4.crl (hash: bjCzPJVPa2E4ioZw1cTwEPgraKZdvdqCBUbtj4aBjlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:5f:23:53:ce:cc:46:e4:f0:38:5d:19:b7:f4:a7:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5198567a039e5cce23ee9374096eed57bbba298e
Validity
Not Before: Aug 12 13:01:31 2025 GMT
Not After : Aug 13 13:01:31 2025 GMT
Subject: CN=69100c8162a486a43ee165a0cf9c8795d22b2bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2b:2f:1e:df:7d:44:58:b1:2e:4b:4e:23:da:
64:ac:28:e2:cb:bc:d5:4d:4b:9b:e4:46:60:d1:c5:
03:eb:0f:ed:da:2a:b4:dd:01:61:7c:6b:62:47:9a:
7c:ef:10:b8:7b:01:92:58:22:f5:8a:47:07:07:b7:
e4:73:55:ed:6c:ea:9d:21:24:3e:11:7b:07:63:47:
9f:e6:32:95:d1:c2:8e:82:9a:c2:61:de:78:b5:05:
a5:af:cc:e1:4b:c9:cb:07:eb:59:9c:9d:a0:6e:27:
f6:1a:fb:54:52:e0:44:b3:b2:55:d6:49:cf:26:d2:
cd:13:c7:e3:75:5e:c5:33:00:d3:e2:1b:ac:86:e9:
d4:ee:95:ef:69:87:54:92:f1:14:e7:b3:0e:6d:34:
60:63:21:93:85:63:59:dd:67:35:fd:24:2d:49:6c:
cf:08:62:3c:62:9e:86:d2:f2:a3:68:fc:5c:5a:02:
46:95:0d:7d:d8:ae:b7:e4:28:f1:88:9c:b7:57:6a:
69:88:38:9f:35:b7:0d:d6:06:2b:09:70:d1:57:32:
f7:0a:58:85:cd:dc:62:51:64:be:27:fc:6a:a4:03:
25:e4:c5:47:63:32:2f:47:b8:e7:ba:e5:d7:df:ee:
dc:2c:f2:dd:8c:6e:41:46:d4:6f:f1:0e:45:9f:bb:
6e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:10:0C:81:62:A4:86:A4:3E:E1:65:A0:CF:9C:87:95:D2:2B:2B:ED
X509v3 Authority Key Identifier:
keyid:51:98:56:7A:03:9E:5C:CE:23:EE:93:74:09:6E:ED:57:BB:BA:29:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:de:8e:a1:ba:18:0e:75:95:f3:16:b7:d9:2b:c3:e0:3d:df:
c9:d3:d9:71:d8:46:fe:d3:ca:1d:4d:c2:43:c8:47:12:4a:c7:
5b:8b:20:8b:7e:d6:60:9e:bf:f3:13:4d:68:10:3a:aa:53:38:
79:1a:10:0d:76:1f:74:df:9e:7c:55:3f:42:d2:d5:64:0c:0c:
73:ce:c0:09:b5:85:6d:bd:2d:ca:08:da:13:62:ea:31:2d:de:
66:ac:01:db:25:2f:ab:4f:af:03:b4:8c:72:3a:c1:fe:06:0e:
8c:75:3e:24:d0:c9:4e:55:75:2a:65:68:f8:ff:c4:e3:ac:89:
a7:3f:0d:0c:f0:10:1f:4d:82:d8:e4:31:da:2b:4a:2b:af:38:
ed:52:a1:ea:4f:25:cd:5f:90:c5:69:86:71:06:15:bb:0d:91:
48:b1:2d:23:9c:27:8a:8e:33:3e:55:ab:4e:cb:df:9c:42:4d:
59:51:f7:02:22:2c:21:ae:ec:5a:fd:d5:1f:a6:4e:80:bc:5e:
a7:e6:a5:c0:e5:35:95:59:cd:62:8e:4f:30:99:5d:82:95:b8:
b5:ad:15:6f:4a:7c:33:83:25:25:dc:d4:c2:20:15:cc:a4:32:
b9:a7:e0:5c:0b:61:86:1f:a6:4f:aa:5b:c0:29:ab:f5:5a:2f:
ba:f0:b6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:54:05 2025 by rpki-client