Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
File: cUKDDu7SiwS83QP6P9pIxUha_P4.mft (raw, json)
Hash identifier: 6ZrbhMD7RiWqTo+797SIkMLB0drtKNT4y1fyOhyqOrY=
Subject key identifier: 94:E2:68:9C:C3:7D:CB:ED:0E:A7:56:B5:3C:DB:2D:6D:39:74:9B:16
Authority key identifier: 71:42:83:0E:EE:D2:8B:04:BC:DD:03:FA:3F:DA:48:C5:48:5A:FC:FE
Certificate issuer: /CN=7142830eeed28b04bcdd03fa3fda48c5485afcfe
Certificate serial: 01989C70A1C6DB5F83F084032F0FA4353D3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
Manifest number: 0EFF
Signing time: Tue 12 Aug 2025 04:01:23 +0000
Manifest this update: Tue 12 Aug 2025 04:01:23 +0000
Manifest next update: Wed 13 Aug 2025 04:01:23 +0000
Files and hashes: 1: cUKDDu7SiwS83QP6P9pIxUha_P4.crl (hash: BTWo1xIkCVjJmklrzKxMLtPeWvisg11gEQhrGcQV7es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9c:70:a1:c6:db:5f:83:f0:84:03:2f:0f:a4:35:3d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7142830eeed28b04bcdd03fa3fda48c5485afcfe
Validity
Not Before: Aug 12 04:01:23 2025 GMT
Not After : Aug 13 04:01:23 2025 GMT
Subject: CN=94e2689cc37dcbed0ea756b53cdb2d6d39749b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:30:f7:43:dd:77:04:3c:87:25:32:7a:77:6f:
0a:f2:03:d8:15:9e:08:e7:fc:fd:ca:fd:97:ef:ab:
22:36:b4:d2:00:76:85:a9:85:c1:1a:61:e4:e1:ec:
0a:ce:a1:3c:6d:bd:13:1a:79:f6:a9:e7:05:78:0a:
9d:1f:fc:a1:8b:7b:63:14:00:39:b4:54:ab:6f:40:
e9:46:bf:aa:fc:ef:3e:82:06:8c:59:87:15:85:4d:
d7:d3:59:a6:81:1d:26:be:77:c5:be:87:53:e9:9d:
11:92:57:81:e8:76:86:50:6f:23:bd:eb:4c:ce:de:
23:43:16:f0:20:5b:c8:aa:ff:f1:c9:24:30:cf:11:
d6:d8:bf:fc:c1:d8:21:ef:15:e8:25:cd:6c:02:01:
3b:b5:30:47:f0:36:06:06:41:d2:40:4a:0e:a8:fb:
a5:2b:d8:1f:2b:2c:ea:e6:3f:27:8f:00:71:b7:54:
43:2a:e0:f8:98:2b:19:1d:e2:05:17:c0:3e:e2:11:
9c:7c:0b:24:fb:a4:c3:c5:28:31:a9:0d:a6:71:6f:
37:32:8d:ea:78:80:9d:f0:50:ba:19:5c:e7:99:30:
b8:32:a9:f4:1a:7b:5b:7d:d1:47:81:76:55:6f:d6:
e3:ae:0d:db:61:74:3f:bf:23:b9:bd:4b:48:d9:ba:
f8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E2:68:9C:C3:7D:CB:ED:0E:A7:56:B5:3C:DB:2D:6D:39:74:9B:16
X509v3 Authority Key Identifier:
keyid:71:42:83:0E:EE:D2:8B:04:BC:DD:03:FA:3F:DA:48:C5:48:5A:FC:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:4f:44:e8:e6:54:fc:91:0f:21:36:09:ea:83:70:61:05:48:
3c:75:20:56:ad:c7:ff:77:6b:7a:05:b8:09:92:58:1c:32:0a:
2c:65:16:db:90:ff:5b:20:1f:2c:ec:0b:71:f1:ed:6e:e2:47:
4b:ad:06:e9:ad:80:bf:74:85:d9:16:f9:0a:d9:b8:3b:23:c7:
3a:69:72:a7:97:8a:04:63:77:eb:1a:e9:7b:f6:30:0c:d7:92:
a2:82:94:1d:2e:50:d6:4c:2c:f8:23:ea:52:ae:7c:8b:ff:98:
3d:68:83:f7:1b:58:30:1a:67:11:aa:78:9f:a9:1c:49:c1:a2:
be:74:39:8d:51:f9:ef:4c:e4:aa:3d:ae:79:a2:67:ae:cd:f5:
39:5b:e1:b8:44:52:4f:58:83:12:79:dd:5d:a1:7b:32:05:b1:
55:33:f8:f0:a1:a0:ab:9c:60:f1:04:17:80:4b:50:4e:0c:98:
ef:5e:28:48:ab:a0:8f:d3:fc:a2:2f:dc:3d:8b:3c:7a:bc:84:
6d:57:94:4c:ba:3b:82:fe:ab:60:fd:7b:da:57:49:51:be:4b:
c8:a7:4a:7b:f5:7e:3d:79:00:df:a6:ee:6b:ab:5a:50:7b:8b:
77:21:7c:9b:cf:0a:2f:7d:e2:f5:5a:54:df:72:d2:06:98:3a:
70:9c:be:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 13:45:39 2025 by rpki-client