
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
File: u7kUAX20Xp91443ePwNXzitx2Cc.mft (raw, json)
Hash identifier: gZcP+5Ylyl8ch18gZXje+ggLf8xHIoWZAkbVtO61A6M=
Subject key identifier: 6A:08:BD:B9:25:EA:FF:FD:70:38:A3:F4:9B:D2:1C:58:86:F6:44:83
Authority key identifier: BB:B9:14:01:7D:B4:5E:9F:75:E3:8D:DE:3F:03:57:CE:2B:71:D8:27
Certificate issuer: /CN=bbb914017db45e9f75e38dde3f0357ce2b71d827
Certificate serial: 019873E38A433D3CE95B6C0856F95BFF48F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
Manifest number: 06C1
Signing time: Mon 04 Aug 2025 07:02:28 +0000
Manifest this update: Mon 04 Aug 2025 07:02:28 +0000
Manifest next update: Tue 05 Aug 2025 07:02:28 +0000
Files and hashes: 1: u7kUAX20Xp91443ePwNXzitx2Cc.crl (hash: dj9SRPT08KGGek59HuSR2RwWOUiabyZ7wugMpovV1dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:8a:43:3d:3c:e9:5b:6c:08:56:f9:5b:ff:48:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbb914017db45e9f75e38dde3f0357ce2b71d827
Validity
Not Before: Aug 4 07:02:28 2025 GMT
Not After : Aug 5 07:02:28 2025 GMT
Subject: CN=6a08bdb925eafffd7038a3f49bd21c5886f64483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:aa:eb:06:c4:9b:9f:36:0a:b0:c2:1b:d0:01:
06:62:81:5d:b0:b6:50:29:04:a9:c4:4a:0c:c6:c3:
01:b7:1f:70:b7:cc:68:10:73:98:2f:38:5c:8d:94:
17:30:33:92:6a:a1:41:f4:8d:f2:18:2f:33:65:50:
7b:49:8a:ab:bc:a1:5b:8e:bf:b8:42:97:cd:8e:69:
f2:36:5b:bb:e8:6f:26:cf:ef:42:8f:91:b2:e4:fa:
dd:e9:e9:d7:22:6b:af:c2:77:55:9d:9a:d3:9f:a2:
89:ca:b3:8b:76:da:b8:1a:15:38:ab:af:b5:ab:95:
6e:5e:a0:04:6b:cc:f3:5b:83:a9:0b:f5:c7:45:03:
06:42:d7:56:a8:69:fa:b4:41:1c:5c:ce:8a:dd:eb:
7a:00:aa:79:f5:32:95:11:f4:a7:78:36:09:96:e8:
4c:a4:d4:15:a9:71:66:db:4d:b0:9a:26:9e:02:4b:
53:e0:a8:7b:25:e9:8f:50:d7:10:d3:ac:70:05:3e:
b9:f1:b5:25:96:7c:ed:74:41:92:f5:f0:14:79:e8:
33:ed:62:5c:71:2c:8d:00:cf:27:42:ba:e6:fa:b7:
e2:ed:31:ad:b0:6a:a9:60:ed:a7:a8:c8:01:a2:5d:
c0:cb:09:3a:07:ed:4b:a4:4e:8b:08:af:73:70:6c:
e4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:08:BD:B9:25:EA:FF:FD:70:38:A3:F4:9B:D2:1C:58:86:F6:44:83
X509v3 Authority Key Identifier:
keyid:BB:B9:14:01:7D:B4:5E:9F:75:E3:8D:DE:3F:03:57:CE:2B:71:D8:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:16:54:52:fe:b9:44:7e:53:77:9c:54:9f:df:10:a3:fb:b5:
0a:9a:78:61:aa:ea:e4:a9:7b:06:52:f0:7b:2b:05:d4:16:65:
bf:19:76:9a:c1:7e:21:55:4f:3f:a5:d8:e4:3f:62:a7:b9:3a:
0e:2e:ec:97:ab:89:50:c3:d7:8e:eb:57:91:d2:cc:27:12:7f:
b8:e6:92:00:11:a3:4d:79:ee:3a:e7:8c:8c:07:7d:a6:2d:28:
e3:9e:7f:88:6d:d3:c9:11:32:37:2f:98:d8:65:d1:9b:6f:9e:
de:73:9d:f2:fb:cf:3b:64:a6:a2:b9:a4:a0:e0:26:aa:3f:67:
c4:4c:ba:81:d6:64:44:a4:37:9b:44:8f:a2:2b:75:8c:17:0b:
77:6d:44:15:ed:60:dc:99:10:ad:bb:c6:67:2a:52:6e:c5:2f:
5f:86:e9:15:03:9e:c2:dd:93:42:a0:6a:87:7e:53:30:86:cb:
2c:28:c2:33:db:26:8a:a8:25:c3:26:7e:9b:e7:75:c6:24:6c:
76:8b:e0:27:40:c8:9b:b8:ec:c7:12:67:54:36:5c:2c:6c:4b:
2c:80:b3:29:ca:9d:53:78:e8:fc:32:d0:37:fe:bf:86:dd:9a:
85:ec:64:04:a9:c8:bc:15:8f:75:37:c6:ab:85:41:f7:d4:3e:
6e:b0:84:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:32 2025 by rpki-client