Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/63622f-b464-407d-bcfd-c9491b4dfd76/1/U1wJpqvN8dobR6tK8_-O_KWBRF0.mft
File: U1wJpqvN8dobR6tK8_-O_KWBRF0.mft (raw, json)
Hash identifier: PEkP9hdc/PaVqaFMvWwtltT7YU6oqTo18j4lhUowW4E=
Subject key identifier: 7F:A1:AA:92:00:3D:EB:C1:34:CF:F9:F8:6A:8A:FF:C2:43:28:1C:24
Authority key identifier: 53:5C:09:A6:AB:CD:F1:DA:1B:47:AB:4A:F3:FF:8E:FC:A5:81:44:5D
Certificate issuer: /CN=535c09a6abcdf1da1b47ab4af3ff8efca581445d
Certificate serial: 019890DAF5AFCED8618691F6447B334CCB58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1wJpqvN8dobR6tK8_-O_KWBRF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/63622f-b464-407d-bcfd-c9491b4dfd76/1/U1wJpqvN8dobR6tK8_-O_KWBRF0.mft
Manifest number: 058A
Signing time: Sat 09 Aug 2025 22:02:05 +0000
Manifest this update: Sat 09 Aug 2025 22:02:05 +0000
Manifest next update: Sun 10 Aug 2025 22:02:05 +0000
Files and hashes: 1: U1wJpqvN8dobR6tK8_-O_KWBRF0.crl (hash: H7o5a59wwRBZjgBb6rHjlvqzX8ndBh3S3ZAYnQhDcdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/63622f-b464-407d-bcfd-c9491b4dfd76/1/U1wJpqvN8dobR6tK8_-O_KWBRF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/63622f-b464-407d-bcfd-c9491b4dfd76/1/U1wJpqvN8dobR6tK8_-O_KWBRF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1wJpqvN8dobR6tK8_-O_KWBRF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:da:f5:af:ce:d8:61:86:91:f6:44:7b:33:4c:cb:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535c09a6abcdf1da1b47ab4af3ff8efca581445d
Validity
Not Before: Aug 9 22:02:05 2025 GMT
Not After : Aug 10 22:02:05 2025 GMT
Subject: CN=7fa1aa92003debc134cff9f86a8affc243281c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9f:d7:bb:67:82:de:2f:57:2a:86:3f:ad:b9:
65:67:28:41:dd:2f:a1:21:e5:5a:df:89:0c:3c:22:
3f:be:c8:40:d5:73:c9:b2:7b:00:76:77:f7:52:31:
98:30:70:48:b5:64:fd:0d:00:0f:8f:ed:2d:bc:18:
b8:65:73:10:09:e3:08:11:a1:0e:80:08:87:7b:b3:
66:e2:69:84:6d:a2:a7:06:7a:f5:c3:f8:9b:03:f3:
e6:d3:1b:c5:65:e0:23:f3:16:f2:ce:b0:f3:71:37:
8f:12:23:06:67:a8:09:c3:29:55:d7:1b:e8:ed:98:
65:d7:b8:18:37:6b:76:0e:56:cc:b9:37:2c:5a:ae:
b3:c4:0b:ec:a3:6f:4b:f7:6a:f4:f5:96:a3:a4:59:
61:e8:aa:38:15:8a:0e:48:17:0d:69:d2:ae:c3:87:
5b:6a:d5:a8:50:4e:e5:7e:e3:5d:b8:57:13:87:ed:
21:6c:52:13:ce:f5:4d:ea:93:cc:f4:cf:9c:13:74:
c6:85:f2:5b:c6:73:73:31:68:0f:08:b1:e4:14:6e:
1a:96:45:cd:48:2b:5d:79:42:22:4a:df:77:e9:c4:
1d:71:62:be:78:5c:7a:7e:2f:ae:5b:9b:67:4e:7d:
04:8a:31:e0:63:ef:4b:b9:7f:0d:29:74:3e:18:d2:
8f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A1:AA:92:00:3D:EB:C1:34:CF:F9:F8:6A:8A:FF:C2:43:28:1C:24
X509v3 Authority Key Identifier:
keyid:53:5C:09:A6:AB:CD:F1:DA:1B:47:AB:4A:F3:FF:8E:FC:A5:81:44:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1wJpqvN8dobR6tK8_-O_KWBRF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/63622f-b464-407d-bcfd-c9491b4dfd76/1/U1wJpqvN8dobR6tK8_-O_KWBRF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/63622f-b464-407d-bcfd-c9491b4dfd76/1/U1wJpqvN8dobR6tK8_-O_KWBRF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:4b:3d:05:6d:64:51:9f:6f:03:f7:de:f3:df:06:b0:b9:5f:
fe:bf:18:3d:2f:91:53:22:06:06:cd:80:89:35:cf:68:7f:e2:
9d:81:b8:39:b4:43:3e:39:ef:c2:bf:23:53:bb:a9:db:f0:06:
b0:27:42:cc:c7:a2:06:13:46:a1:d1:8a:9e:f8:78:cb:b7:a9:
f8:7b:84:83:27:6d:42:79:59:a0:25:d6:21:fe:d4:f9:70:cd:
f6:7b:d1:f8:2f:26:8c:41:d2:c5:6f:88:be:e4:ab:00:5c:85:
ed:34:e2:8c:07:20:de:4a:ea:77:db:31:23:17:fd:70:76:e1:
de:1d:a3:0d:94:c4:18:c5:36:62:a8:dc:35:83:26:a7:5f:71:
58:fa:1b:6d:c3:e7:22:49:95:4e:21:54:24:19:20:ea:78:dd:
ad:13:46:6d:76:9f:18:22:2d:bb:a0:10:e7:0a:f6:3c:f6:83:
c4:b2:31:cc:b5:a1:be:de:89:00:fe:c7:d6:1b:eb:be:a5:9d:
cb:75:2c:80:44:1d:e8:2d:19:21:19:67:84:7f:d6:60:0b:dd:
22:3e:b8:44:25:33:de:04:13:41:3c:93:22:5b:99:a1:80:4a:
7b:ec:55:0d:01:a9:7b:10:dd:54:f1:d2:d5:a0:41:7b:89:d6:
51:9d:44:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:44:34 2025 by rpki-client