Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/eca809-d942-4d89-b438-a1c29992bfbe/1/UlG0CzMZisWh7fUP_whigWAzXf0.mft
File: UlG0CzMZisWh7fUP_whigWAzXf0.mft (raw, json)
Hash identifier: 9xYoe4UJZJjvC56A1jx+RDjTdFEZlS5cIld6IqsZWng=
Subject key identifier: FA:C4:16:80:61:42:BD:11:2D:2B:29:38:45:2C:62:E1:67:99:43:45
Authority key identifier: 52:51:B4:0B:33:19:8A:C5:A1:ED:F5:0F:FF:08:62:81:60:33:5D:FD
Certificate issuer: /CN=5251b40b33198ac5a1edf50fff08628160335dfd
Certificate serial: 019889C4AE9F6834316530B3F7F547626B3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlG0CzMZisWh7fUP_whigWAzXf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/eca809-d942-4d89-b438-a1c29992bfbe/1/UlG0CzMZisWh7fUP_whigWAzXf0.mft
Manifest number: 1521
Signing time: Fri 08 Aug 2025 13:00:24 +0000
Manifest this update: Fri 08 Aug 2025 13:00:24 +0000
Manifest next update: Sat 09 Aug 2025 13:00:24 +0000
Files and hashes: 1: B5jBrigaJO3-AA-t_YN4JZyKlOc.roa (hash: rGNTEj/GGFLwPvW+NfWJ0mtsiCJfkPNhKXWRWEo8b5k=)
2: UlG0CzMZisWh7fUP_whigWAzXf0.crl (hash: Fkk4vhIVurteSdQonz2qWuYQml/p6UHxlp6NGqU7cXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/eca809-d942-4d89-b438-a1c29992bfbe/1/UlG0CzMZisWh7fUP_whigWAzXf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/eca809-d942-4d89-b438-a1c29992bfbe/1/UlG0CzMZisWh7fUP_whigWAzXf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UlG0CzMZisWh7fUP_whigWAzXf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:c4:ae:9f:68:34:31:65:30:b3:f7:f5:47:62:6b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5251b40b33198ac5a1edf50fff08628160335dfd
Validity
Not Before: Aug 8 13:00:24 2025 GMT
Not After : Aug 9 13:00:24 2025 GMT
Subject: CN=fac416806142bd112d2b2938452c62e167994345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:73:07:d6:e0:68:62:82:7d:c5:78:0b:b4:8b:
a8:f5:6b:ab:9c:e7:0e:ff:95:5a:b6:58:01:46:c3:
83:b9:22:20:54:ae:a7:04:6c:97:bf:f3:fe:48:fb:
d4:59:2a:4b:2c:55:90:06:8b:35:07:d3:2f:72:22:
27:ff:26:e9:81:10:e7:7b:4b:f8:93:69:ee:93:55:
5f:8e:48:3c:a8:b6:76:b8:d2:26:37:76:71:75:27:
be:73:a8:81:78:8a:39:07:98:27:b9:0b:ea:88:99:
f5:a1:fa:e8:2f:e2:32:72:bd:11:60:cb:69:56:d0:
ea:4e:25:ec:96:d7:30:ce:f4:6c:ef:84:ec:1d:1c:
fc:66:08:9a:a5:66:29:97:60:50:d1:78:8e:bd:e3:
fc:1f:4d:61:3c:73:56:d9:27:c3:1a:d0:a6:cb:30:
05:f9:57:1d:a6:82:fe:e2:28:e3:18:a6:20:c5:bf:
9d:e3:64:34:84:5c:8d:c7:7d:22:75:96:f6:71:c6:
6e:52:c0:ad:84:f1:ca:43:52:f0:e8:13:e0:e9:4a:
57:25:9c:b1:b3:fc:3c:23:71:c3:59:a0:8d:61:21:
7c:a7:69:0a:c4:e4:93:c7:95:86:1e:c2:c3:eb:7b:
a6:7b:f8:1f:70:d5:42:66:86:93:c7:db:58:a2:13:
9c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C4:16:80:61:42:BD:11:2D:2B:29:38:45:2C:62:E1:67:99:43:45
X509v3 Authority Key Identifier:
keyid:52:51:B4:0B:33:19:8A:C5:A1:ED:F5:0F:FF:08:62:81:60:33:5D:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlG0CzMZisWh7fUP_whigWAzXf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/eca809-d942-4d89-b438-a1c29992bfbe/1/UlG0CzMZisWh7fUP_whigWAzXf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/eca809-d942-4d89-b438-a1c29992bfbe/1/UlG0CzMZisWh7fUP_whigWAzXf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:98:bc:e2:5d:01:d2:d8:90:82:5a:9c:d4:bd:c9:d3:dc:c3:
18:e7:e2:dc:d3:eb:9d:1b:ec:a3:e0:3f:ea:83:d8:79:34:19:
07:70:e7:a5:85:44:42:18:69:5a:9e:7b:5a:4a:52:09:4a:b9:
3a:a2:49:51:7d:21:60:ef:4d:bf:8d:68:89:ab:7b:4a:b6:98:
3c:22:69:8a:dc:31:dc:99:87:87:52:42:d7:c3:52:37:e5:8a:
0a:59:bb:f0:10:69:83:68:64:b6:84:ca:34:6c:cc:3e:6d:ac:
d3:69:43:db:d0:a4:58:0b:a6:07:6a:98:e3:09:2b:b1:0f:62:
5c:da:80:d7:c0:e3:01:1b:70:8f:da:90:56:3a:f1:10:75:f3:
39:3f:7d:ac:26:a2:a9:27:7b:29:f6:84:b7:99:f8:a7:69:aa:
c6:50:ac:55:36:d2:b8:5c:44:4e:81:c7:f3:c9:9f:61:1d:1b:
fa:28:fe:82:ac:57:89:d5:e6:92:bf:21:5f:1c:0b:cf:35:a1:
55:39:17:45:0b:5d:81:ba:c3:2f:6e:12:77:e8:ec:0b:fb:06:
fa:81:74:bc:5d:20:51:22:d6:1f:fb:6f:18:99:38:be:bd:55:
cf:9c:21:c8:a3:08:85:c9:2a:dc:f6:ea:19:d2:6b:19:8e:71:
e4:72:4d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:33:22 2025 by rpki-client