Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft
File: uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft (raw, json)
Hash identifier: bC0hrKUMM9A2s6ZwG+5oZD0icDmCthnbouVYnqvoML8=
Subject key identifier: FF:2E:F9:64:94:E2:2C:6C:1C:B6:F4:09:16:D1:23:AB:4E:F8:47:50
Authority key identifier: B8:15:25:AE:1A:5A:FC:EF:19:3F:5A:40:17:7B:F2:73:88:83:10:78
Certificate issuer: /CN=b81525ae1a5afcef193f5a40177bf27388831078
Certificate serial: 019895FFCB025C61F0DE0F8AF526D36F69AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft
Manifest number: 0344
Signing time: Sun 10 Aug 2025 22:00:25 +0000
Manifest this update: Sun 10 Aug 2025 22:00:25 +0000
Manifest next update: Mon 11 Aug 2025 22:00:25 +0000
Files and hashes: 1: uBUlrhpa_O8ZP1pAF3vyc4iDEHg.crl (hash: JQJMpWu7AdfH4RJQSOZ+TF5Y1BwSfHEDho+dxBibqWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:ff:cb:02:5c:61:f0:de:0f:8a:f5:26:d3:6f:69:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81525ae1a5afcef193f5a40177bf27388831078
Validity
Not Before: Aug 10 22:00:25 2025 GMT
Not After : Aug 11 22:00:25 2025 GMT
Subject: CN=ff2ef96494e22c6c1cb6f40916d123ab4ef84750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d2:59:88:93:41:af:40:b9:6b:24:a7:fd:08:
13:26:3b:f8:63:ed:56:40:28:a7:d2:a5:b5:7c:6d:
90:04:21:c3:aa:2e:cf:d4:70:ea:23:ab:09:a0:9a:
32:24:e0:19:c2:69:e5:7a:03:62:0a:68:f6:0d:ef:
bb:f6:3c:d4:0d:67:7f:fc:f2:2a:9c:4b:29:f3:db:
32:13:2c:c7:9e:93:58:6c:e0:bf:64:66:bc:9d:4f:
f1:f1:87:5c:50:f0:1a:d4:a2:7e:65:0a:b3:15:6f:
b5:9b:96:79:40:35:46:e3:83:13:b1:2a:c5:4b:5c:
c3:14:2e:26:cf:1d:6f:28:e8:a1:b7:20:ad:23:d0:
ac:6d:ad:18:26:c2:6c:04:df:62:37:f5:a9:91:eb:
82:91:e0:1b:7e:57:d2:03:85:a7:1c:d2:93:7a:02:
b7:ff:72:6b:d8:d9:53:d9:7d:44:06:d6:28:28:71:
10:10:e2:1b:27:ee:f3:eb:c2:ca:62:0b:cd:d9:9c:
ca:da:6f:04:6e:65:21:79:8d:64:32:bb:6d:92:42:
04:42:1f:ba:53:77:59:9c:6f:15:ca:d5:42:28:e0:
a0:6d:bd:af:5b:ea:d1:8d:08:33:b0:db:36:2f:db:
8c:ca:f6:8f:f2:5a:8d:94:fb:c7:19:17:98:3c:cb:
dd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2E:F9:64:94:E2:2C:6C:1C:B6:F4:09:16:D1:23:AB:4E:F8:47:50
X509v3 Authority Key Identifier:
keyid:B8:15:25:AE:1A:5A:FC:EF:19:3F:5A:40:17:7B:F2:73:88:83:10:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b0:0b:91:f9:ca:f4:7b:54:cf:ed:09:a8:11:0d:98:5d:f2:
48:cf:36:61:01:16:16:d5:96:5b:ef:1b:34:db:95:39:30:f2:
0f:87:06:e0:05:db:81:b9:5a:bc:b6:81:f7:60:89:3b:29:c3:
53:81:c8:b2:dd:32:7c:18:5a:0a:c5:39:af:0b:f3:cf:fe:05:
07:b7:e3:b7:2e:19:cd:24:e3:4d:60:52:2b:59:7f:dc:cd:b8:
f1:ca:44:78:02:ce:4f:93:c2:19:b2:4a:12:49:04:1c:a1:c8:
6c:c2:f0:55:2b:8c:e0:45:b1:05:f6:01:db:ab:2c:5e:cf:1e:
e3:37:74:d3:b6:fd:5c:e6:dc:69:e4:42:cc:94:04:f7:6a:65:
db:9b:f8:46:dd:85:13:61:5d:04:c8:30:38:19:ec:99:33:72:
f2:8e:53:77:46:c5:f9:0a:ec:bf:6a:9c:01:e7:84:3d:d1:58:
db:7e:a9:7d:d5:a4:3a:98:db:75:9b:73:f7:88:3c:24:77:e2:
7d:d7:ee:18:8d:92:ed:3e:48:a3:ab:c5:c1:e4:61:c3:2c:58:
2a:5e:e9:f6:2e:d7:99:2d:d0:9f:ad:37:d7:67:2c:7a:38:3f:
7b:0a:b5:be:9b:d0:d3:71:c7:de:41:06:55:75:4f:ea:c9:66:
3f:6a:9e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 02:05:16 2025 by rpki-client