Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
File: UrDyNFHcBfp-z50etB3T0TdWRTs.mft (raw, json)
Hash identifier: J2e7H0VCu0xKJn86wOz/vGwy43aE1vydSZFqf4/XfP8=
Subject key identifier: 94:2D:72:52:5F:DC:34:C5:59:6C:48:42:05:65:58:88:42:86:D3:2C
Authority key identifier: 52:B0:F2:34:51:DC:05:FA:7E:CF:9D:1E:B4:1D:D3:D1:37:56:45:3B
Certificate issuer: /CN=52b0f23451dc05fa7ecf9d1eb41dd3d13756453b
Certificate serial: 0198971329AFBFA85A62353BE9EAE5847B63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
Manifest number: 1626
Signing time: Mon 11 Aug 2025 03:01:12 +0000
Manifest this update: Mon 11 Aug 2025 03:01:12 +0000
Manifest next update: Tue 12 Aug 2025 03:01:12 +0000
Files and hashes: 1: UrDyNFHcBfp-z50etB3T0TdWRTs.crl (hash: pLuHnnYL4rBtiA0VNqQHnjcVsu38Edzgx2rbfxSYUx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:13:29:af:bf:a8:5a:62:35:3b:e9:ea:e5:84:7b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b0f23451dc05fa7ecf9d1eb41dd3d13756453b
Validity
Not Before: Aug 11 03:01:12 2025 GMT
Not After : Aug 12 03:01:12 2025 GMT
Subject: CN=942d72525fdc34c5596c4842056558884286d32c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4e:5f:5e:31:43:84:36:ee:49:3e:a9:6b:09:
a2:8d:b3:91:82:72:18:b3:17:c3:ac:d7:7f:ed:e9:
41:8e:95:70:ba:cc:ff:7f:3f:c7:06:ef:21:95:aa:
b7:df:04:bb:dc:8b:d1:97:85:f7:6b:d3:0d:df:1d:
82:2f:f4:65:cb:e0:dc:60:eb:2a:5d:ff:c1:60:db:
99:d9:f9:7c:62:4d:00:2c:c6:71:15:27:45:98:b5:
cf:e6:9b:e8:dc:ec:c8:92:5f:ea:65:48:bf:df:3c:
e8:96:e2:40:fc:f7:d6:89:28:67:6e:d4:e4:d2:ef:
5f:09:55:7d:e8:ad:98:e7:42:ec:fa:a9:11:72:b4:
ec:60:ba:49:a2:9b:2b:45:95:3b:11:d1:c0:d7:f8:
3f:fe:11:18:70:6c:b6:d7:8b:d8:36:33:de:2a:0e:
49:d0:a6:14:99:6a:62:ed:30:5f:4f:5f:c7:3a:62:
40:7e:7f:66:64:58:61:f4:23:ad:e3:dd:c0:37:ac:
86:d0:7b:f2:2f:0c:88:57:2c:ae:14:22:a3:cc:f8:
5c:d3:53:0a:6b:22:64:1b:02:97:77:26:a6:13:e2:
5a:94:fd:26:a5:1f:12:84:6a:12:18:f0:8e:03:79:
f7:7a:e7:d8:96:20:62:8f:26:ad:4d:43:84:e4:6c:
02:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2D:72:52:5F:DC:34:C5:59:6C:48:42:05:65:58:88:42:86:D3:2C
X509v3 Authority Key Identifier:
keyid:52:B0:F2:34:51:DC:05:FA:7E:CF:9D:1E:B4:1D:D3:D1:37:56:45:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b2:cc:f6:c1:44:65:8a:da:6e:90:2c:d5:08:fb:63:a9:97:
f5:9c:79:f4:da:c2:f9:e4:47:ed:99:dc:6f:84:17:03:b4:51:
f7:39:22:e3:fc:20:ae:36:3e:45:57:f9:5f:d9:21:4d:17:a4:
32:dc:f9:5c:62:6a:c8:c5:70:2b:c3:2e:a5:42:57:97:a6:34:
6a:4d:47:aa:08:89:17:62:c0:29:61:bb:f6:d1:72:7b:d5:98:
7e:52:16:71:bc:98:87:c0:b4:7a:d9:4e:87:a7:d0:f0:b2:7b:
7b:9d:e4:75:e8:7c:9f:8a:af:86:c6:44:94:bf:f7:8b:84:5c:
07:6c:fb:e6:2f:dd:c5:bc:14:44:ca:69:90:89:5d:92:d6:83:
63:f1:c2:9d:7a:c7:b2:01:a3:2a:d4:b8:13:6d:5e:75:10:43:
52:0b:a6:21:4b:ca:12:6b:7e:80:5e:65:39:cb:49:21:ca:39:
87:70:ed:40:2a:fc:6d:d1:f5:e8:df:8b:e8:76:6f:05:b8:65:
28:13:9e:3d:b7:01:ff:bb:90:6c:9a:8e:87:6e:fd:43:0e:29:
3e:e6:91:22:05:9f:5a:06:14:c1:dc:b8:5a:cb:b6:27:f9:ab:
85:1a:5d:c8:55:f7:be:40:22:90:23:ee:18:2e:05:c4:2f:09:
4e:29:e8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:09:22 2025 by rpki-client