Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
File: ujSP3hs60izyj-ZAMK4v5PIst_s.mft (raw, json)
Hash identifier: 95JtdpgV2TuEJslI09zOYXu6aMfUziFFbeP+Jm4O3kY=
Subject key identifier: CF:DF:1C:99:51:31:14:41:4D:9A:10:E0:3F:19:48:34:A6:0D:96:E8
Authority key identifier: BA:34:8F:DE:1B:3A:D2:2C:F2:8F:E6:40:30:AE:2F:E4:F2:2C:B7:FB
Certificate issuer: /CN=ba348fde1b3ad22cf28fe64030ae2fe4f22cb7fb
Certificate serial: 01987B9D7C1DA1FD07D032B9CBAE98A6B808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
Manifest number: 12FA
Signing time: Tue 05 Aug 2025 19:02:55 +0000
Manifest this update: Tue 05 Aug 2025 19:02:55 +0000
Manifest next update: Wed 06 Aug 2025 19:02:55 +0000
Files and hashes: 1: ujSP3hs60izyj-ZAMK4v5PIst_s.crl (hash: N4ANUMxYDZn2ptta285IKfJ7adPDi4gaVSqxSkOI90k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9d:7c:1d:a1:fd:07:d0:32:b9:cb:ae:98:a6:b8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba348fde1b3ad22cf28fe64030ae2fe4f22cb7fb
Validity
Not Before: Aug 5 19:02:55 2025 GMT
Not After : Aug 6 19:02:55 2025 GMT
Subject: CN=cfdf1c99513114414d9a10e03f194834a60d96e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c7:33:a2:e5:25:ad:80:72:97:23:32:24:00:
30:f1:76:9c:79:3c:5e:46:19:d1:c0:ab:d3:25:18:
a9:f4:f0:6e:5d:7a:1b:89:68:aa:17:4d:d8:b0:a3:
c0:37:2a:5c:74:49:c1:98:3a:c7:7e:52:99:d2:2d:
ac:69:62:ed:90:71:a2:79:84:98:7b:1d:cf:e6:9b:
68:7f:51:f2:06:6d:7b:d6:59:40:92:e2:65:bb:7f:
8b:af:03:6b:de:7f:41:82:4e:e5:11:63:35:1d:3d:
0e:1f:6c:57:cc:1e:90:ac:ba:73:54:28:86:5d:b2:
44:33:bb:29:84:ed:97:bd:02:fc:31:0e:2f:c5:4a:
02:dd:96:29:79:48:ae:ba:78:21:de:c1:1e:94:7d:
b4:11:37:53:5b:cf:bb:6d:cf:a8:1b:e7:90:59:9b:
b9:81:21:1a:40:59:e8:f1:5a:55:0f:5c:59:4b:31:
a2:c7:44:64:fb:9c:11:f9:cf:b8:ad:ee:48:c2:93:
cd:30:df:63:71:5c:72:ca:ad:4a:78:b2:83:04:64:
bb:2a:11:28:90:fe:a0:a7:4d:3d:ee:2d:7c:1d:4e:
2c:6c:0b:ec:fc:fc:b0:60:c8:58:c0:18:d4:26:ec:
ea:b9:60:74:c0:6b:eb:f3:64:c1:70:7e:40:44:53:
f2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DF:1C:99:51:31:14:41:4D:9A:10:E0:3F:19:48:34:A6:0D:96:E8
X509v3 Authority Key Identifier:
keyid:BA:34:8F:DE:1B:3A:D2:2C:F2:8F:E6:40:30:AE:2F:E4:F2:2C:B7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d9:00:92:40:b4:31:4c:30:b0:a2:75:60:c9:bc:ae:4b:3b:
29:5f:d0:47:dc:32:85:18:4d:68:0d:f3:5c:fc:50:06:61:6a:
8a:d5:59:2c:a2:6a:cc:e1:02:a1:f1:3c:bd:83:ce:b9:9c:2b:
92:a5:f6:68:4d:11:f2:c0:00:63:83:cd:d1:68:8e:a6:e6:b3:
a1:8d:ad:d0:7d:32:a3:60:ca:93:b1:e8:84:24:c0:22:4b:61:
d7:5d:77:31:a8:72:56:67:47:e2:e7:54:d7:97:ed:8d:77:94:
0c:ed:2b:8f:17:7e:5a:00:f9:e6:e6:21:58:78:66:aa:4e:05:
d4:2f:25:f1:9c:7f:2b:2e:8f:2a:f3:af:4a:69:b7:94:7d:2e:
48:93:37:56:8f:e0:b4:bd:4f:82:87:e2:fe:63:12:21:09:e7:
68:3c:85:93:c5:de:12:47:b2:a6:e1:d2:3e:48:8e:d1:13:71:
96:13:84:2f:c6:47:21:18:27:31:59:7b:8d:60:19:2b:6d:8f:
1b:48:64:60:c1:88:e4:8e:10:ce:c6:3c:99:e4:ad:18:d5:54:
55:e4:4a:a7:51:da:52:9e:18:53:62:d1:c2:7d:89:48:a7:a5:
c6:93:cf:c1:11:df:82:a2:81:96:b9:7c:d6:c2:5d:83:61:6e:
0c:f1:20:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:55:10 2025 by rpki-client