Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/bd335a-a55c-4555-a247-39961662353a/1/Un0m8LBCyUz2f2JeXY5i4qKudVI.mft
File: Un0m8LBCyUz2f2JeXY5i4qKudVI.mft (raw, json)
Hash identifier: IKsLLXmPTmeEdEGpy0kuRWMlXnb2lyaezmWCECLLCpA=
Subject key identifier: 81:07:F2:0A:79:D7:E0:63:74:BC:9B:22:1A:B4:70:94:F7:57:93:C8
Authority key identifier: 52:7D:26:F0:B0:42:C9:4C:F6:7F:62:5E:5D:8E:62:E2:A2:AE:75:52
Certificate issuer: /CN=527d26f0b042c94cf67f625e5d8e62e2a2ae7552
Certificate serial: 0197715131F00244C2323C56064C3720FE57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Un0m8LBCyUz2f2JeXY5i4qKudVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/bd335a-a55c-4555-a247-39961662353a/1/Un0m8LBCyUz2f2JeXY5i4qKudVI.mft
Manifest number: 055B
Signing time: Sun 15 Jun 2025 02:00:36 +0000
Manifest this update: Sun 15 Jun 2025 02:00:36 +0000
Manifest next update: Mon 16 Jun 2025 02:00:36 +0000
Files and hashes: 1: Un0m8LBCyUz2f2JeXY5i4qKudVI.crl (hash: ywK4fcGpfWZ4cnx/riyQRcfLXmwnxQ1R/CskEVpRz3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/bd335a-a55c-4555-a247-39961662353a/1/Un0m8LBCyUz2f2JeXY5i4qKudVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/bd335a-a55c-4555-a247-39961662353a/1/Un0m8LBCyUz2f2JeXY5i4qKudVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Un0m8LBCyUz2f2JeXY5i4qKudVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:31:f0:02:44:c2:32:3c:56:06:4c:37:20:fe:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=527d26f0b042c94cf67f625e5d8e62e2a2ae7552
Validity
Not Before: Jun 15 02:00:36 2025 GMT
Not After : Jun 16 02:00:36 2025 GMT
Subject: CN=8107f20a79d7e06374bc9b221ab47094f75793c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c5:ae:61:40:53:6d:5e:20:b5:d6:df:10:16:
c0:24:be:44:9c:4b:72:71:22:c6:c0:20:ae:85:fa:
e1:bf:b3:53:52:70:e8:01:e1:e4:3a:0d:10:28:32:
d9:b1:8f:35:9b:4f:b8:71:34:71:81:46:2c:4d:72:
bd:c9:44:38:6e:99:94:72:63:d0:b5:83:63:bf:e7:
99:11:6a:2b:86:a2:fd:3f:bf:8c:fb:60:50:1d:19:
52:75:b9:13:41:fa:13:f9:1e:d1:1f:26:c0:51:3a:
9d:12:9e:4f:a8:90:99:ae:07:7d:01:3a:2f:96:49:
52:97:07:11:a9:7d:de:2b:bd:a1:4a:55:3c:0c:6c:
60:33:cf:f0:27:8e:95:e6:87:28:9a:1c:46:b9:e8:
af:73:92:ad:fb:71:e8:e7:14:65:2c:7e:58:e1:2c:
2f:0e:d9:c9:98:b6:6d:02:44:64:4a:3a:67:30:2c:
1c:f4:3a:d8:de:e9:9e:59:f7:14:a6:94:e4:00:2c:
dc:39:2b:89:9c:a3:ed:e9:84:82:0b:7e:32:3f:68:
45:ea:fb:c9:96:da:72:e8:ba:f4:44:6c:80:35:07:
c5:db:8d:59:fc:6a:02:a8:36:17:ea:8e:a2:b7:71:
c1:d6:c2:a0:ba:8a:9b:7b:d7:b4:f3:5d:95:ce:18:
06:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:07:F2:0A:79:D7:E0:63:74:BC:9B:22:1A:B4:70:94:F7:57:93:C8
X509v3 Authority Key Identifier:
keyid:52:7D:26:F0:B0:42:C9:4C:F6:7F:62:5E:5D:8E:62:E2:A2:AE:75:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Un0m8LBCyUz2f2JeXY5i4qKudVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/bd335a-a55c-4555-a247-39961662353a/1/Un0m8LBCyUz2f2JeXY5i4qKudVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/bd335a-a55c-4555-a247-39961662353a/1/Un0m8LBCyUz2f2JeXY5i4qKudVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:72:94:f3:ab:d3:03:4d:fa:75:00:67:37:4a:b9:30:19:95:
28:94:2e:1c:4f:dd:9a:d9:79:cb:1b:1a:86:4b:b3:ba:4e:af:
2c:f2:66:c4:92:fe:6e:ca:08:7b:fa:6d:52:ed:0a:c6:61:a0:
a6:89:25:04:8b:9d:a0:a5:e6:51:18:54:a6:d4:cc:bf:c7:ba:
63:32:1e:a2:d7:59:17:e5:92:90:c5:ed:9d:68:3a:d2:23:fb:
d9:25:14:b4:e5:3b:6b:e1:a2:1d:ec:aa:2e:2c:d6:86:35:a2:
ab:5a:a3:d3:f3:ab:48:e9:06:24:54:a5:35:15:27:8a:c6:ba:
35:f5:78:2d:9d:dd:af:e1:be:1c:a2:b4:98:2a:65:ae:52:92:
2f:4c:a1:97:d9:15:87:fd:34:bd:90:91:f7:37:b3:77:08:d9:
fe:62:6e:5e:da:29:d3:79:20:84:5e:01:95:33:d5:ba:33:22:
33:5f:30:6f:47:fd:17:8d:ca:60:6a:39:1f:20:cd:0e:2d:55:
a1:12:27:47:ef:b1:9e:20:e4:40:f0:45:9f:14:f0:48:9f:a3:
f7:27:2b:ca:ee:6e:ee:a6:09:71:14:97:84:4e:cc:d1:6e:19:
98:71:70:e9:c8:ac:8e:e5:97:84:6f:2d:27:a0:88:62:c3:ca:
03:d0:bd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:40:33 2025 by rpki-client