Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft
File: uLhsyEeC6kEMbYfCzTv4agaqF7s.mft (raw, json)
Hash identifier: nzyKcRq4aalS8Maz54kCo4j11yqRjQjTui+YJxxcjLU=
Subject key identifier: C9:A3:27:F7:D4:87:46:28:C2:D4:68:7D:BF:7B:AD:B7:30:C5:23:39
Authority key identifier: B8:B8:6C:C8:47:82:EA:41:0C:6D:87:C2:CD:3B:F8:6A:06:AA:17:BB
Certificate issuer: /CN=b8b86cc84782ea410c6d87c2cd3bf86a06aa17bb
Certificate serial: 019889C4DE0F892C688E6E61FFF0653EED66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLhsyEeC6kEMbYfCzTv4agaqF7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft
Manifest number: 0CB3
Signing time: Fri 08 Aug 2025 13:00:37 +0000
Manifest this update: Fri 08 Aug 2025 13:00:37 +0000
Manifest next update: Sat 09 Aug 2025 13:00:37 +0000
Files and hashes: 1: uLhsyEeC6kEMbYfCzTv4agaqF7s.crl (hash: KHx7mlMXCbd2F2suCi1eF/MEU8gpzrOOdCZrnMeh7AM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uLhsyEeC6kEMbYfCzTv4agaqF7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:c4:de:0f:89:2c:68:8e:6e:61:ff:f0:65:3e:ed:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8b86cc84782ea410c6d87c2cd3bf86a06aa17bb
Validity
Not Before: Aug 8 13:00:37 2025 GMT
Not After : Aug 9 13:00:37 2025 GMT
Subject: CN=c9a327f7d4874628c2d4687dbf7badb730c52339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:11:a9:ef:46:c7:a5:69:78:17:61:b1:04:ba:
20:49:9e:20:dc:64:2a:18:18:3c:09:f0:9d:f8:65:
1f:7c:4b:e3:2f:6d:c3:2b:9b:f7:29:49:b4:74:ea:
6c:81:cc:63:2f:cd:67:6a:72:41:e8:23:ad:31:a7:
83:76:70:e9:b7:51:be:29:56:be:fd:09:81:8a:b8:
39:2f:8b:38:60:f6:7e:65:15:a7:e2:4c:03:87:92:
ea:71:be:4a:7c:21:3a:0a:78:49:35:48:c7:63:d5:
76:12:26:22:ad:61:17:1a:fe:23:44:4e:63:6b:f8:
0f:c2:74:4f:3f:81:37:46:9e:4a:19:d1:7e:b6:93:
d0:b5:49:af:f7:73:66:4a:ad:67:ad:c3:96:a3:28:
fb:cd:ac:e0:40:9f:cb:f3:27:d1:97:5d:86:3b:35:
09:a9:77:a1:3d:73:5c:9f:c4:5a:6d:8d:ef:1e:b0:
d2:9e:e9:55:76:7b:15:44:6e:c9:67:05:bc:ef:10:
e2:80:ed:4e:38:4b:03:6c:30:b7:a1:28:a3:12:3e:
ef:d6:e0:fc:68:e4:5b:86:2b:ad:35:55:ef:fd:6d:
93:91:7b:48:67:b0:ba:26:2d:97:7c:bd:a5:7a:4b:
b4:9a:1f:c7:e7:41:10:28:c2:9f:30:2f:95:9d:6c:
50:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A3:27:F7:D4:87:46:28:C2:D4:68:7D:BF:7B:AD:B7:30:C5:23:39
X509v3 Authority Key Identifier:
keyid:B8:B8:6C:C8:47:82:EA:41:0C:6D:87:C2:CD:3B:F8:6A:06:AA:17:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLhsyEeC6kEMbYfCzTv4agaqF7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:8c:fb:ff:7e:44:30:76:ba:e2:21:a2:05:14:08:32:04:66:
e2:9f:1a:04:f1:d8:97:e8:79:47:77:c5:dd:47:8a:69:e6:d7:
a7:79:e6:5e:24:19:c0:3c:7e:8f:04:a6:55:8e:b2:f9:7a:0c:
66:6f:2f:55:8f:9c:10:92:1a:a0:4c:85:83:ec:84:a6:17:93:
1f:5c:43:c2:8c:06:49:58:e9:a2:ac:0d:61:a4:40:aa:3c:16:
1a:68:8d:2c:a0:ee:1e:40:ae:ca:12:60:a9:08:f9:10:e2:fb:
76:ac:81:8f:2d:39:32:d1:5d:88:06:78:f9:0f:2a:0e:ba:0a:
04:a2:a8:1b:ef:3a:b0:47:31:52:1a:29:90:46:89:63:bb:91:
bc:ac:4d:c9:78:da:d1:38:05:20:f6:a0:a4:c3:5f:21:17:93:
21:ee:37:68:cb:75:9e:b9:4d:1e:47:85:42:da:57:35:c9:cf:
6c:87:b6:57:e9:4b:60:3e:94:8e:26:3a:54:91:57:a0:83:4a:
65:bb:6d:1e:ff:b3:7a:87:20:52:af:14:84:58:7a:68:da:86:
94:1f:ad:56:80:1a:26:45:59:75:c5:b7:83:e1:6c:55:68:98:
b9:dc:5c:1a:57:89:b6:4d:f8:d2:2f:5e:05:0c:45:7b:53:6d:
c8:72:13:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:51:42 2025 by rpki-client