Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
File: r1UJ13Yi0who8jYTxagW5ySEAWU.mft (raw, json)
Hash identifier: zrgNQMHRUPHgk6EoH12D/9c9FZpbjblORPYA6OBAVd8=
Subject key identifier: 44:91:29:63:78:47:4D:DB:0A:7E:2E:C4:20:11:FD:BE:6F:4D:3B:4D
Authority key identifier: AF:55:09:D7:76:22:D3:08:68:F2:36:13:C5:A8:16:E7:24:84:01:65
Certificate issuer: /CN=af5509d77622d30868f23613c5a816e724840165
Certificate serial: 0198835757B04B538F4B28A664CDA6B961EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
Manifest number: 06D3
Signing time: Thu 07 Aug 2025 07:03:15 +0000
Manifest this update: Thu 07 Aug 2025 07:03:15 +0000
Manifest next update: Fri 08 Aug 2025 07:03:15 +0000
Files and hashes: 1: r1UJ13Yi0who8jYTxagW5ySEAWU.crl (hash: NY+bJw2Z9iSOoPgS3j3kv4zlRcpJzQzfAe4p/yABmUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:03:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:57:57:b0:4b:53:8f:4b:28:a6:64:cd:a6:b9:61:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5509d77622d30868f23613c5a816e724840165
Validity
Not Before: Aug 7 07:03:15 2025 GMT
Not After : Aug 8 07:03:15 2025 GMT
Subject: CN=4491296378474ddb0a7e2ec42011fdbe6f4d3b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ab:dd:87:91:1a:dc:f9:d7:6b:32:e6:53:a8:
a3:cf:14:52:e3:e9:ce:8b:13:81:a5:4a:a4:ae:1e:
2a:66:1f:d4:bb:fb:bc:0b:55:b5:bb:84:40:64:86:
f5:86:8a:d8:57:00:f2:c5:b1:27:e2:ba:c7:05:39:
3a:e1:1d:07:c8:28:88:a6:3f:07:10:14:e9:ef:ce:
64:87:75:e6:58:00:0d:b6:36:ee:cd:98:ff:08:4c:
c7:bb:1f:a1:4f:64:db:95:3d:4f:31:7d:cb:65:13:
6f:81:59:8c:c2:d4:13:7d:54:d3:39:5a:cc:d2:06:
4a:af:42:a9:34:4f:4f:69:21:32:41:bb:79:d5:24:
22:35:95:9b:85:8f:4b:7e:6b:a8:ff:47:10:d5:ed:
34:99:71:f5:07:bb:cf:c6:8f:4f:71:19:29:54:f2:
61:95:ad:97:b2:cb:36:5f:6c:f3:f1:c3:e2:10:f9:
0a:2b:d8:f1:db:71:f7:e7:42:3f:06:5f:64:f2:d2:
bb:8a:bf:5b:a9:15:04:c8:78:21:4b:8e:ae:d2:08:
75:61:ae:8b:df:92:96:e4:62:1a:bc:a9:d3:08:b6:
f6:25:1d:d8:6c:a5:82:76:c3:62:1d:ea:8c:dd:88:
c3:8f:f5:52:79:79:62:9b:46:fb:7f:41:07:c7:4e:
fc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:91:29:63:78:47:4D:DB:0A:7E:2E:C4:20:11:FD:BE:6F:4D:3B:4D
X509v3 Authority Key Identifier:
keyid:AF:55:09:D7:76:22:D3:08:68:F2:36:13:C5:A8:16:E7:24:84:01:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:84:1e:5a:a5:c3:52:fc:25:23:56:6b:37:ca:b7:c1:80:61:
4a:ac:dd:00:2d:24:46:bd:47:e8:64:91:e6:11:e1:1c:32:5f:
3e:ac:98:b9:bb:7a:f0:67:4a:15:67:99:7d:4a:fd:63:d0:e2:
ce:b8:5e:c7:d5:f2:0b:d3:d8:eb:dc:20:c2:f6:69:6c:05:f3:
93:25:9a:3f:63:3d:f2:8c:96:ba:c6:7c:52:d4:60:9f:6c:5f:
73:5c:ac:ef:a5:58:2f:65:93:07:6b:e3:53:0c:c8:81:46:7b:
79:a7:0f:c0:07:1d:d5:89:c3:a6:ef:fe:7d:58:74:c1:57:e8:
9e:8e:f9:0a:de:6e:95:41:70:21:59:92:26:12:8e:37:b9:e9:
44:3a:db:27:fd:be:a5:96:f7:fe:2f:b1:d3:c5:76:6b:11:82:
3e:ec:8b:1d:e5:b3:24:5f:a8:10:1f:51:34:10:00:19:bb:38:
61:d6:8d:53:8b:e9:ea:b1:fd:91:10:4d:6c:e0:b2:ec:72:85:
dc:87:4c:13:f0:df:31:6d:95:c4:28:8c:67:b0:1f:64:38:0e:
c5:7c:15:31:1c:f5:99:55:4c:46:2a:46:09:5b:89:09:6f:84:
7e:81:db:70:f9:44:f7:c7:8b:b5:dc:41:46:90:cc:be:82:7a:
94:c1:08:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:33:48 2025 by rpki-client