Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.mft
File: USzy1zi8akeL64yogkEB_w_IGmE.mft (raw, json)
Hash identifier: D3lSCYZCllw8YSmJYQ4FsVCyuDIGexYQN46s99o95sw=
Subject key identifier: 40:5A:62:33:A3:99:B4:48:C9:FF:D6:01:EE:46:3F:F9:F4:00:20:AE
Authority key identifier: 51:2C:F2:D7:38:BC:6A:47:8B:EB:8C:A8:82:41:01:FF:0F:C8:1A:61
Certificate issuer: /CN=512cf2d738bc6a478beb8ca8824101ff0fc81a61
Certificate serial: 0198748753C3A350EE3D09DABD6B3009A278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/USzy1zi8akeL64yogkEB_w_IGmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.mft
Manifest number: 03F9
Signing time: Mon 04 Aug 2025 10:01:22 +0000
Manifest this update: Mon 04 Aug 2025 10:01:22 +0000
Manifest next update: Tue 05 Aug 2025 10:01:22 +0000
Files and hashes: 1: USzy1zi8akeL64yogkEB_w_IGmE.crl (hash: mvVH9H7aF8aY6Km09Yl6PWBTLhm955+xQqXDLjwHgGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/USzy1zi8akeL64yogkEB_w_IGmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:53:c3:a3:50:ee:3d:09:da:bd:6b:30:09:a2:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=512cf2d738bc6a478beb8ca8824101ff0fc81a61
Validity
Not Before: Aug 4 10:01:22 2025 GMT
Not After : Aug 5 10:01:22 2025 GMT
Subject: CN=405a6233a399b448c9ffd601ee463ff9f40020ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ef:72:33:b5:32:36:87:d1:e8:28:2b:8a:5a:
a7:3c:2d:c0:f8:6b:9d:a7:8c:2c:b0:cf:48:57:47:
66:df:5b:ec:a4:15:a7:ae:25:f3:ff:1a:d9:38:e2:
ac:d9:1d:b3:b0:99:5b:fd:e4:12:8d:fa:44:ec:c2:
e5:31:cf:26:83:bb:8d:68:5f:2f:7c:6b:57:da:0f:
a8:63:71:12:ce:25:ac:bc:e9:b3:e2:ed:f4:c4:de:
c6:80:e4:a8:e5:7f:9b:aa:54:aa:3a:31:5d:da:fe:
91:c9:08:f7:12:76:fb:9a:48:26:5b:b0:6f:fd:a0:
e4:fb:3c:49:43:a4:bb:ed:96:c3:69:88:32:28:96:
52:dd:73:1a:65:18:ad:e3:04:ad:59:31:5b:96:72:
7f:eb:56:9c:e6:61:13:7c:e9:94:cc:61:c0:09:a3:
78:db:c4:9e:5f:7f:87:80:2d:5f:fd:a5:f1:b1:35:
c8:21:f2:e9:eb:fe:62:1d:4a:10:d4:21:b4:5c:cb:
c7:da:e7:93:e5:8e:64:e9:d5:0e:2e:52:11:1e:a3:
cd:8d:3a:53:d8:6e:a0:40:d0:50:77:26:0a:71:1b:
87:03:aa:86:06:27:9a:07:5d:2b:ea:70:4d:5f:eb:
b1:d7:4a:14:4b:a1:3c:94:bd:1d:51:c6:64:b4:84:
eb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5A:62:33:A3:99:B4:48:C9:FF:D6:01:EE:46:3F:F9:F4:00:20:AE
X509v3 Authority Key Identifier:
keyid:51:2C:F2:D7:38:BC:6A:47:8B:EB:8C:A8:82:41:01:FF:0F:C8:1A:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USzy1zi8akeL64yogkEB_w_IGmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:70:de:a1:e3:82:69:0e:1b:c3:5c:e2:12:68:a2:e7:ce:ae:
53:9f:d4:84:c4:80:ab:2c:dd:aa:e9:ee:9a:46:ae:d1:ca:03:
59:3f:02:af:74:74:93:8f:f8:6f:48:64:a2:8b:e2:8f:dc:91:
71:ca:c7:94:58:c9:65:cc:d9:a8:37:84:57:71:28:69:cc:23:
c6:df:34:d9:14:b1:60:ae:f3:23:b2:16:9a:48:bf:07:16:1d:
d3:fe:02:d1:f5:3b:30:e9:c9:26:3c:bb:b3:32:69:80:0f:c9:
5a:25:2c:7f:5b:3e:19:76:c8:3f:08:7c:15:ef:44:de:be:c0:
65:07:5b:ec:98:e9:0f:09:a3:64:4b:55:eb:04:6d:81:af:73:
27:c4:f2:e8:3b:37:b0:f2:14:d4:5f:06:bd:d9:af:29:42:64:
c5:ac:bd:b6:89:d0:0d:a3:41:28:d2:16:ad:55:7d:64:94:95:
80:66:ba:c3:8b:7b:ee:b1:2c:3a:c0:cf:80:8c:df:56:2b:b7:
df:39:3f:80:41:b2:f2:72:43:ea:b3:ec:df:be:34:ff:b4:5e:
dc:0f:0e:eb:95:93:8a:51:18:5d:f3:9f:6a:ed:98:7e:8e:41:
ce:82:08:ab:68:2b:89:ff:a6:39:9d:35:25:85:5a:80:7f:28:
c7:fa:90:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:12:23 2025 by rpki-client