Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft
File: UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft (raw, json)
Hash identifier: TuTexjIO1bwSztu71/LaFVoZrhD+w25wTAjlrwACtdE=
Subject key identifier: DC:A6:40:13:B5:00:72:5A:8D:91:87:7E:60:11:C4:11:2E:FF:23:05
Authority key identifier: 52:B8:D3:D3:30:BD:66:20:BB:17:D4:87:E4:05:5D:95:B2:74:AF:16
Certificate issuer: /CN=52b8d3d330bd6620bb17d487e4055d95b274af16
Certificate serial: 01987B9D11722AE296EF2F9E0E43F9FB1B90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft
Manifest number: 1001
Signing time: Tue 05 Aug 2025 19:02:27 +0000
Manifest this update: Tue 05 Aug 2025 19:02:27 +0000
Manifest next update: Wed 06 Aug 2025 19:02:27 +0000
Files and hashes: 1: UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.crl (hash: +f9Ajv6CZANXfgWzRL00y7ImNdQ/IbZ1vmePMm/QtdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9d:11:72:2a:e2:96:ef:2f:9e:0e:43:f9:fb:1b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b8d3d330bd6620bb17d487e4055d95b274af16
Validity
Not Before: Aug 5 19:02:27 2025 GMT
Not After : Aug 6 19:02:27 2025 GMT
Subject: CN=dca64013b500725a8d91877e6011c4112eff2305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:70:a1:9e:87:46:06:07:10:3c:5d:48:e2:42:
f1:4d:7d:b5:36:d7:d3:07:b7:87:81:fe:08:2f:ec:
5c:cc:2f:3b:28:a6:19:e2:91:1b:7f:47:ab:38:bc:
13:56:2e:e0:ce:c9:88:9f:2b:17:0e:97:77:f8:81:
b2:06:a5:5d:49:0d:85:86:c0:2f:3e:9e:9a:d8:29:
e5:09:29:63:e7:81:74:18:2b:7e:a1:62:22:e7:79:
db:bb:15:93:bf:d4:8d:cc:13:5c:35:8a:43:73:11:
fe:8a:98:fa:cb:61:dc:80:e8:93:a4:73:53:83:61:
e9:74:bc:c3:a8:04:55:09:d2:8a:6d:02:b4:87:43:
59:b0:4b:c0:88:e5:a3:63:a1:7b:f0:73:5d:7a:69:
ca:3c:79:6b:44:a6:e9:50:ea:68:94:57:49:f1:90:
c2:df:a9:f2:9f:26:37:99:d6:51:2a:75:ca:a1:c4:
0f:96:34:b5:c9:94:ea:74:6e:b9:86:60:50:f5:0e:
ff:01:31:85:66:e6:56:10:45:0f:84:b9:2f:4a:69:
0e:9b:47:2a:06:f7:af:c4:bb:d5:19:56:7a:67:5f:
a0:81:13:b8:3b:de:40:51:df:11:98:49:70:9d:52:
7e:39:ad:45:c7:14:c3:cc:ff:16:9e:1e:a5:d7:88:
fb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A6:40:13:B5:00:72:5A:8D:91:87:7E:60:11:C4:11:2E:FF:23:05
X509v3 Authority Key Identifier:
keyid:52:B8:D3:D3:30:BD:66:20:BB:17:D4:87:E4:05:5D:95:B2:74:AF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:2d:ca:55:4c:40:d3:2a:71:16:f6:99:c7:03:80:6d:72:d0:
63:4f:61:ed:c9:8d:6f:ce:86:7a:fd:12:4a:5c:d7:04:8d:18:
76:3f:17:8a:d0:96:b4:01:72:a8:64:9e:2c:af:fc:2e:55:1a:
fb:78:08:c5:1a:54:78:d4:13:ff:e5:32:44:6d:82:ad:39:55:
ca:86:49:05:f9:9d:36:5d:ae:6b:ae:86:44:9d:4b:7e:e2:2e:
8b:4f:41:a5:f6:5b:2c:88:13:bc:92:bb:c3:8b:75:71:6b:a4:
53:4a:12:9f:3b:e0:14:8c:5d:38:9b:b8:1b:29:55:4f:9e:e0:
4b:b0:0f:85:aa:1e:0b:61:9a:49:ae:45:f0:10:df:a1:c5:f7:
07:1d:a8:f4:33:a3:26:21:41:ed:bd:3e:ac:83:ca:ed:ae:77:
7f:cd:c6:0e:8c:6f:fd:10:a8:fa:a2:49:71:ec:3e:47:18:59:
f5:5d:5e:07:ee:d0:ca:39:bd:da:16:2f:ee:af:09:dd:97:5e:
0e:ee:ec:f3:8d:b6:f2:17:66:6c:87:8d:f4:53:82:09:dc:b7:
51:d2:38:9a:ea:52:b2:99:06:fb:4b:b7:38:6b:af:a0:5a:4b:
1d:d8:4e:fb:ed:9d:a4:aa:61:ff:8a:fd:4b:65:e8:8d:8b:ad:
0d:b3:eb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:06:48 2025 by rpki-client