Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft
File: uLhsyEeC6kEMbYfCzTv4agaqF7s.mft (raw, json)
Hash identifier: zxyNryP9fgdnpfI3abgVG4YsHBiLoPJZwt9iE66Ig50=
Subject key identifier: DD:0E:5A:3B:AF:17:68:52:9E:CF:98:52:A8:3D:F8:41:7B:CD:F0:E7
Authority key identifier: B8:B8:6C:C8:47:82:EA:41:0C:6D:87:C2:CD:3B:F8:6A:06:AA:17:BB
Certificate issuer: /CN=b8b86cc84782ea410c6d87c2cd3bf86a06aa17bb
Certificate serial: 01976BF40731E92C8B8EA09FF68E40FAC951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLhsyEeC6kEMbYfCzTv4agaqF7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft
Manifest number: 0C1F
Signing time: Sat 14 Jun 2025 01:00:44 +0000
Manifest this update: Sat 14 Jun 2025 01:00:44 +0000
Manifest next update: Sun 15 Jun 2025 01:00:44 +0000
Files and hashes: 1: uLhsyEeC6kEMbYfCzTv4agaqF7s.crl (hash: d6rNdcJBAHhVSNt0TD3TeaHEJYcgJwR6eH3y41psZAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uLhsyEeC6kEMbYfCzTv4agaqF7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:07:31:e9:2c:8b:8e:a0:9f:f6:8e:40:fa:c9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8b86cc84782ea410c6d87c2cd3bf86a06aa17bb
Validity
Not Before: Jun 14 01:00:44 2025 GMT
Not After : Jun 15 01:00:44 2025 GMT
Subject: CN=dd0e5a3baf1768529ecf9852a83df8417bcdf0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:71:ca:c9:56:e9:0a:61:1e:06:92:6e:36:7c:
52:36:83:53:9c:77:e2:4a:6e:1f:e2:ba:86:7b:01:
19:61:3a:69:b2:39:18:37:68:73:6d:3a:ca:e9:d9:
3b:e0:37:0c:43:2a:10:69:71:78:ca:30:aa:73:d1:
ec:1c:c1:05:97:8b:6e:b2:a2:78:39:3f:d0:09:b9:
dc:43:2c:a3:5f:fa:91:40:f5:7d:21:30:64:85:4f:
da:9b:7e:50:1a:65:77:3f:8f:ee:f4:f2:c1:d8:fb:
4c:83:31:f3:07:e5:bc:ce:1d:e5:86:39:e1:d3:74:
b5:31:61:78:c8:bd:a2:88:1e:a7:5d:93:3e:b5:bf:
0a:56:3b:6d:47:1e:c0:7f:74:de:29:32:17:6e:32:
d8:aa:b0:62:00:7d:ba:a2:17:d3:85:ff:71:a6:cd:
d6:1e:59:93:c7:7a:a7:d2:bc:8c:99:c9:bf:54:ac:
df:4f:f7:26:8a:2f:d9:15:f4:6c:5a:41:35:c7:45:
0e:5d:24:9d:3d:08:4c:f5:61:1a:8a:6d:2b:83:f5:
e1:18:7b:62:44:3c:05:0e:b8:f3:db:cb:86:4b:83:
d2:74:fc:4d:95:f8:40:8f:ae:c6:0b:eb:38:b6:72:
9c:e1:b4:b5:fb:0f:c1:1f:60:48:87:53:23:db:30:
66:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0E:5A:3B:AF:17:68:52:9E:CF:98:52:A8:3D:F8:41:7B:CD:F0:E7
X509v3 Authority Key Identifier:
keyid:B8:B8:6C:C8:47:82:EA:41:0C:6D:87:C2:CD:3B:F8:6A:06:AA:17:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLhsyEeC6kEMbYfCzTv4agaqF7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:56:40:07:13:20:94:48:88:93:73:09:be:d5:43:f6:52:b8:
ef:16:e2:b8:26:2b:77:c9:12:6d:ce:5b:73:d3:35:1f:28:4e:
9c:42:db:53:85:3b:31:8a:b2:b8:e4:b5:73:d2:40:ca:dd:47:
1a:81:91:17:5b:31:51:5e:90:e1:b3:c4:58:fb:e7:b3:df:44:
8b:b4:50:7a:f8:8b:d5:5d:8e:78:99:f3:8e:e2:d8:e3:10:64:
10:01:fb:48:64:b3:ed:c5:35:cd:c8:bb:4d:fb:77:c0:82:42:
ad:88:57:09:fa:e8:30:99:56:a3:be:0a:c2:87:87:0e:f7:aa:
06:f3:61:be:ca:92:bf:6c:bc:5e:57:79:b9:e4:db:b8:eb:4c:
b3:5e:e2:07:ef:25:4b:32:83:f5:67:df:a9:75:cf:14:f7:0e:
e0:71:39:c0:0c:10:39:e7:29:fb:62:cc:f1:a2:be:c4:5c:86:
56:50:40:0b:f3:42:f8:06:e1:12:d0:7c:e3:71:3c:b2:b5:95:
30:e7:70:50:36:e3:0a:4d:d5:a3:e6:a8:a5:12:0e:b4:e4:7d:
c1:b2:20:56:19:37:b6:f5:d7:2a:20:fd:ee:6d:f0:9b:87:5a:
8e:0b:14:dc:49:59:5e:af:47:af:91:6e:18:fb:9c:ab:e7:e7:
ab:e3:e0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:41:59 2025 by rpki-client