
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
File: u_D5EC2y6-GvHQdRaEQ4anlj71w.mft (raw, json)
Hash identifier: QKoHPWUL/oIjCG7Zq2ke9kfoibEX4nVyR3Q9YA+4/cg=
Subject key identifier: DB:9E:AD:8F:7C:09:00:96:CB:4C:AD:30:66:CD:6F:23:C0:28:27:3E
Authority key identifier: BB:F0:F9:10:2D:B2:EB:E1:AF:1D:07:51:68:44:38:6A:79:63:EF:5C
Certificate issuer: /CN=bbf0f9102db2ebe1af1d07516844386a7963ef5c
Certificate serial: 01987CAE9F3FE117929426333B0C905CDD7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
Manifest number: 051C
Signing time: Wed 06 Aug 2025 00:01:15 +0000
Manifest this update: Wed 06 Aug 2025 00:01:15 +0000
Manifest next update: Thu 07 Aug 2025 00:01:15 +0000
Files and hashes: 1: u_D5EC2y6-GvHQdRaEQ4anlj71w.crl (hash: qyeR4ug24TvpYh+LRlAMit5QOqmYhrN2/I8n9j2rsmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:9f:3f:e1:17:92:94:26:33:3b:0c:90:5c:dd:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf0f9102db2ebe1af1d07516844386a7963ef5c
Validity
Not Before: Aug 6 00:01:15 2025 GMT
Not After : Aug 7 00:01:15 2025 GMT
Subject: CN=db9ead8f7c090096cb4cad3066cd6f23c028273e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7e:68:b9:7e:8e:59:9a:14:91:d9:73:f5:d5:
af:ef:cc:f2:9b:ac:0b:76:74:ae:d6:36:25:9b:c1:
38:bc:7c:f3:40:65:8d:d5:71:d4:c9:fd:1e:07:c1:
00:07:b1:dc:16:2e:ec:03:75:fb:02:68:09:2b:e8:
7b:f3:2f:9b:3b:b6:9f:19:0f:be:2c:59:f2:63:84:
5c:ba:04:ed:f9:b0:6c:be:53:97:a9:f4:6b:89:e4:
b8:57:22:1d:8e:4e:d1:d8:a1:63:0a:17:d8:f5:e1:
bf:49:f6:e0:9c:4b:3f:d3:dc:e0:b6:9d:69:ca:7d:
b3:59:29:7b:83:23:51:76:ba:fb:99:3f:26:05:d5:
98:31:5d:ef:fe:3e:43:83:ee:1f:e9:34:99:7d:b8:
29:a2:07:61:41:03:03:8d:98:4a:47:7d:17:08:df:
6f:35:1b:94:1c:de:de:49:3a:17:2d:85:52:17:bc:
b5:8f:d3:2c:a3:f8:f3:4f:ff:1c:3b:41:3d:9d:e4:
d2:4e:dd:fb:41:a1:c0:b5:11:75:c5:ef:a8:d7:cd:
3b:de:98:b5:cd:ff:6f:26:f5:89:65:3b:b9:d5:35:
c1:39:53:98:31:cf:57:b0:ab:52:1d:3e:1b:0c:d3:
9d:06:ca:5f:d4:c9:94:1c:5c:ab:5e:fe:48:5e:6a:
7b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9E:AD:8F:7C:09:00:96:CB:4C:AD:30:66:CD:6F:23:C0:28:27:3E
X509v3 Authority Key Identifier:
keyid:BB:F0:F9:10:2D:B2:EB:E1:AF:1D:07:51:68:44:38:6A:79:63:EF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:8c:82:a4:7b:04:23:48:d5:34:34:11:da:c6:c1:d8:d2:f0:
95:2b:d4:3c:7b:db:d8:d0:c7:e6:b3:d0:f6:09:1b:c3:80:91:
2e:62:60:20:a4:f8:07:69:ec:44:31:fe:4e:e4:b9:09:6d:48:
9f:2f:ae:a8:48:52:1b:dd:50:04:b9:84:94:d1:fd:7e:3c:d8:
50:17:49:a8:bb:a5:74:e3:93:3a:21:99:25:78:08:49:f8:ff:
24:7c:54:9b:2e:0f:e0:36:bd:05:94:68:6c:66:bc:81:07:55:
a1:8e:cc:75:ba:be:7a:9d:8e:8c:83:8d:bc:e8:4e:84:46:bc:
1f:92:54:06:a7:88:5a:92:67:82:5d:e8:87:b1:3c:6e:5b:11:
70:b2:5d:13:85:c5:ac:14:5e:33:67:09:0a:b5:c2:6d:86:7e:
09:bc:05:cf:b3:09:27:25:e1:c4:a4:38:bb:a5:bc:d8:54:d3:
b7:c2:85:de:bc:9c:42:25:1a:21:01:35:d3:80:2a:84:cc:e1:
04:26:7f:88:a7:1e:7c:56:ca:ad:5b:86:9c:68:93:f9:37:9d:
90:42:35:b5:bb:bc:39:9a:f9:85:34:be:0d:73:bd:b3:06:55:
8f:9b:67:c7:c9:d9:9e:72:b6:e2:1a:16:d7:9d:1f:34:04:5e:
42:8a:64:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:16:09 2025 by rpki-client