
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft
File: Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft (raw, json)
Hash identifier: UskQQF1jzBy8huLbC/do9Yu3BgSZ+jFpkHC1ZlGbtrE=
Subject key identifier: 5A:CE:3C:F2:AE:B7:35:E4:D3:E0:7E:5C:C1:25:C4:53:AC:88:4E:D4
Authority key identifier: 53:2E:21:C9:DF:6D:52:FD:AC:4A:E3:B0:C8:73:96:8E:F0:9E:B2:7C
Certificate issuer: /CN=532e21c9df6d52fdac4ae3b0c873968ef09eb27c
Certificate serial: 019873E2E033A09085529E01A63A226B06E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uy4hyd9tUv2sSuOwyHOWjvCesnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 07:01:45 +0000
Manifest this update: Mon 04 Aug 2025 07:01:45 +0000
Manifest next update: Tue 05 Aug 2025 07:01:45 +0000
Files and hashes: 1: Uy4hyd9tUv2sSuOwyHOWjvCesnw.crl (hash: SdldUz61ckvBIKY31j82FaoEfoUnemrmmKcFAGixigg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uy4hyd9tUv2sSuOwyHOWjvCesnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:e0:33:a0:90:85:52:9e:01:a6:3a:22:6b:06:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=532e21c9df6d52fdac4ae3b0c873968ef09eb27c
Validity
Not Before: Aug 4 07:01:45 2025 GMT
Not After : Aug 5 07:01:45 2025 GMT
Subject: CN=5ace3cf2aeb735e4d3e07e5cc125c453ac884ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:89:f3:d4:ab:7c:d9:94:04:be:64:35:bc:6f:
2e:ec:c2:f4:0a:4c:d9:5d:75:24:48:59:a6:07:38:
29:45:32:55:34:c3:8f:59:f0:be:ad:fe:c7:66:2e:
ea:05:19:f2:85:7e:e8:18:27:d2:b4:93:e6:62:ec:
75:a0:29:9f:d1:57:e7:f1:fe:1b:93:cf:4e:c7:d6:
00:1c:3d:ae:18:8f:cb:58:c0:20:32:a9:93:15:0f:
5c:50:e7:5d:3a:56:b9:bf:bb:ba:21:29:e6:a5:c8:
99:8e:31:6e:b9:15:cf:27:19:4d:12:22:97:46:3e:
e5:71:36:e4:1f:ca:a1:99:6d:8b:b7:39:3c:9c:81:
fa:d4:c7:f0:82:56:1d:d0:46:4e:ae:74:2c:4f:b5:
a5:68:cf:1e:ac:9e:df:8f:9c:7e:3d:3e:65:7e:e2:
69:7b:d9:56:7c:ab:55:9f:31:af:76:ae:d4:67:bb:
bb:4d:27:59:39:65:04:5f:9a:99:10:4d:c7:4f:83:
a5:29:55:7c:8c:17:5c:b2:51:1e:3d:c5:ce:c6:3c:
aa:52:2d:06:88:0f:f5:4f:c0:38:98:35:31:17:c0:
fe:07:7d:b7:01:c8:3a:b8:59:bb:0a:80:6c:b2:3d:
12:d6:25:58:b5:bc:1d:b6:c4:8f:36:37:30:1b:2b:
5c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CE:3C:F2:AE:B7:35:E4:D3:E0:7E:5C:C1:25:C4:53:AC:88:4E:D4
X509v3 Authority Key Identifier:
keyid:53:2E:21:C9:DF:6D:52:FD:AC:4A:E3:B0:C8:73:96:8E:F0:9E:B2:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uy4hyd9tUv2sSuOwyHOWjvCesnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:2b:24:57:35:be:a5:49:28:02:e3:ab:eb:cd:24:a5:86:8e:
33:ae:3f:99:d9:d3:0d:69:86:eb:39:97:ac:1a:63:e2:6c:55:
9e:9f:8c:30:a0:2a:fd:02:26:ad:38:f7:48:b7:98:e6:00:00:
74:ce:cc:4a:c1:d7:94:3a:c7:c1:98:5f:26:21:64:2e:bf:bd:
8d:8d:34:4e:a4:44:72:55:68:05:b2:0d:0d:e5:b2:f2:78:b4:
d2:c4:6f:ce:8c:a9:8f:16:d4:b3:8d:3b:8f:e9:84:d6:02:03:
0b:ab:ef:8a:47:6e:ed:32:20:44:14:9b:0e:9c:bc:28:f2:f6:
70:8c:22:71:ad:ca:c5:89:71:81:50:d0:8a:27:19:a3:aa:5a:
1f:85:fb:2b:5d:cc:43:3f:81:67:3c:31:ac:2b:53:20:c0:11:
12:d1:cf:48:98:da:46:1b:a4:ed:23:de:75:fe:b2:e9:84:bc:
d0:ff:f6:38:ec:e2:1e:58:df:14:4e:f2:a0:3e:ef:69:82:f6:
3f:67:35:3d:ce:8b:7b:71:53:e6:89:2d:9d:f5:21:6d:48:64:
7a:ab:b5:9a:bc:ad:f4:d2:44:47:85:30:8d:10:0f:bc:21:26:
47:a1:55:63:82:91:de:3a:6c:9a:d5:62:cc:28:28:c5:2f:42:
3c:32:6b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:02:08 2025 by rpki-client