Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft
File: UJVwBFEY_ttvz2G1lCDIc7cVh78.mft (raw, json)
Hash identifier: pLLtE1Ol1OEsEsZhC5Yu4fLRjDOnEs5z9LpRds2vPpY=
Subject key identifier: 69:58:67:41:70:32:08:8E:62:66:F0:F3:CC:E2:43:77:78:73:1A:0C
Authority key identifier: 50:95:70:04:51:18:FE:DB:6F:CF:61:B5:94:20:C8:73:B7:15:87:BF
Certificate issuer: /CN=509570045118fedb6fcf61b59420c873b71587bf
Certificate serial: 01987C40E94EFC40F1B5882419317F3D4883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJVwBFEY_ttvz2G1lCDIc7cVh78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft
Manifest number: 1618
Signing time: Tue 05 Aug 2025 22:01:25 +0000
Manifest this update: Tue 05 Aug 2025 22:01:25 +0000
Manifest next update: Wed 06 Aug 2025 22:01:25 +0000
Files and hashes: 1: UJVwBFEY_ttvz2G1lCDIc7cVh78.crl (hash: qYoP/y1S/belc71GdXIygSfIzUJ0HGQ0XG+0EfkPvLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJVwBFEY_ttvz2G1lCDIc7cVh78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:e9:4e:fc:40:f1:b5:88:24:19:31:7f:3d:48:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509570045118fedb6fcf61b59420c873b71587bf
Validity
Not Before: Aug 5 22:01:25 2025 GMT
Not After : Aug 6 22:01:25 2025 GMT
Subject: CN=695867417032088e6266f0f3cce2437778731a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ab:4b:b9:bd:11:12:e4:61:89:b2:e8:1b:61:
80:32:1a:d3:d4:02:c3:37:b4:e3:d5:6e:5b:2f:b1:
6c:c4:98:d5:ca:56:d2:30:6f:a2:84:b4:57:81:ad:
e4:3b:2f:dd:5a:8a:9c:b1:3b:45:19:0c:22:85:07:
0a:2b:6c:9c:08:fa:02:01:27:75:68:b5:15:2f:ac:
8e:e9:82:0d:81:a8:d9:95:b5:be:52:4a:22:86:c5:
a6:2d:c2:64:bb:9e:5e:86:ad:1f:20:da:9c:c6:34:
5c:5c:88:49:dc:fa:21:25:de:51:30:5c:4a:2e:b1:
00:76:4e:90:5e:ea:b1:fd:2c:22:c2:4e:b6:16:cd:
7e:ed:b7:d6:17:10:67:1e:b3:4d:f1:00:86:87:8b:
7b:b9:fd:5d:18:61:99:a3:75:ba:e9:80:11:2c:c4:
2b:63:06:28:d7:0a:80:c8:73:88:08:ac:78:90:57:
20:6f:64:79:4b:56:5c:8e:3e:e5:d4:bd:02:23:44:
d3:c6:57:70:a4:b0:f8:db:3a:dc:92:f1:be:e0:db:
57:ad:81:7b:2f:28:68:ad:83:48:0c:2b:66:4b:de:
93:17:54:3a:3a:fe:64:2d:bf:71:9a:84:20:3e:ce:
e6:c1:47:8a:a5:d9:d1:46:79:30:a5:04:d8:46:09:
a8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:58:67:41:70:32:08:8E:62:66:F0:F3:CC:E2:43:77:78:73:1A:0C
X509v3 Authority Key Identifier:
keyid:50:95:70:04:51:18:FE:DB:6F:CF:61:B5:94:20:C8:73:B7:15:87:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJVwBFEY_ttvz2G1lCDIc7cVh78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:61:9b:bf:4b:32:d4:7b:3f:a8:8a:80:f5:dc:97:f5:9b:2f:
87:b0:2e:a8:19:9c:25:76:6c:bd:ba:78:36:d6:ba:66:62:68:
c8:a9:9c:58:c1:b8:db:a5:13:06:f5:75:03:66:04:7b:2f:15:
6d:4d:93:07:ae:58:15:e3:ff:b7:d4:29:94:23:29:1d:25:31:
84:43:53:36:40:98:30:7f:19:95:b0:a5:29:a2:e5:d6:5a:1c:
1d:89:9c:61:33:6a:15:ce:42:ab:5e:ff:7f:b1:7e:e0:e1:9c:
d7:f5:ce:c4:46:0c:d9:10:17:6d:87:92:2d:89:5f:b6:e7:f5:
77:6e:bd:0b:89:71:d9:d6:ae:30:5c:ca:51:22:88:42:f6:58:
ae:53:12:88:4f:d0:d7:bf:93:c0:84:eb:6a:eb:6d:7e:56:52:
92:89:31:dd:8a:62:02:ea:7a:7a:46:3e:1d:28:e5:67:23:94:
9b:25:94:0e:4a:f2:6e:87:85:a6:4b:db:1c:c8:55:11:5e:48:
2a:7d:e5:13:96:c5:3f:de:10:08:a0:8c:0c:9b:97:55:2d:28:
01:25:fc:11:73:1b:7c:ea:90:3a:7a:83:68:18:8f:df:19:01:
37:d8:2e:79:f7:d8:b7:6a:36:a5:2e:b4:44:55:40:d6:4a:f7:
cb:9e:ce:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:56:25 2025 by rpki-client