Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.mft
File: UK_8KIQwoDwPYLpqDidgI3Dy6eg.mft (raw, json)
Hash identifier: kdCs+b/mixagTyV70XObVj8kF1Z9+mnyMmS8uiqDn6U=
Subject key identifier: 18:E7:C7:E2:3E:CD:70:48:6C:3D:90:DF:BA:7B:8D:AA:39:77:C8:4E
Authority key identifier: 50:AF:FC:28:84:30:A0:3C:0F:60:BA:6A:0E:27:60:23:70:F2:E9:E8
Certificate issuer: /CN=50affc288430a03c0f60ba6a0e27602370f2e9e8
Certificate serial: 01977CB12B2C99D4054EF40E4C4152218FC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UK_8KIQwoDwPYLpqDidgI3Dy6eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.mft
Manifest number: 091F
Signing time: Tue 17 Jun 2025 07:01:15 +0000
Manifest this update: Tue 17 Jun 2025 07:01:15 +0000
Manifest next update: Wed 18 Jun 2025 07:01:15 +0000
Files and hashes: 1: UK_8KIQwoDwPYLpqDidgI3Dy6eg.crl (hash: bIDtdCpodAnf1NWgeYjNQaRkUBa7vxWcBOaLA3dscLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UK_8KIQwoDwPYLpqDidgI3Dy6eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:b1:2b:2c:99:d4:05:4e:f4:0e:4c:41:52:21:8f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50affc288430a03c0f60ba6a0e27602370f2e9e8
Validity
Not Before: Jun 17 07:01:15 2025 GMT
Not After : Jun 18 07:01:15 2025 GMT
Subject: CN=18e7c7e23ecd70486c3d90dfba7b8daa3977c84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:92:a7:ff:3a:c0:8a:ec:2f:47:b4:e2:e6:95:
82:8f:a0:be:bd:44:df:96:ea:77:b8:24:f7:5b:94:
4f:63:17:34:74:45:fd:6b:a6:a0:3f:4b:29:4e:8f:
5b:de:90:b8:e7:ca:81:17:34:d2:f9:06:0e:b5:9d:
a7:01:5e:8c:98:ae:21:29:4d:44:00:b0:72:57:8d:
52:92:86:ab:c1:de:87:55:3e:cc:b0:0d:67:b0:db:
23:dc:a0:04:e7:b6:f4:92:83:7a:ad:2a:7f:26:6a:
17:f2:13:1b:f4:b2:35:7d:df:a4:c6:8d:5b:ad:b2:
99:57:14:27:5d:01:66:5e:ec:2b:db:93:74:b4:bf:
bc:70:60:44:f5:6b:16:da:2f:5c:dd:48:78:56:1a:
62:df:be:7f:98:50:b6:34:a6:36:99:80:ce:08:08:
b2:06:94:65:c6:4f:74:ba:b0:eb:fe:41:14:d3:52:
48:d3:c5:37:67:58:75:5c:c4:88:27:a5:58:85:5f:
bd:6f:0f:ec:ae:3f:7e:de:4e:72:ef:2f:b6:ed:7d:
6d:af:d7:c8:9c:6d:52:1d:43:b1:01:b5:58:6b:9c:
48:26:b2:74:8c:1a:f8:18:fc:da:ff:ab:88:67:f1:
9e:77:3d:fb:55:ba:ec:21:1d:72:60:41:ba:9b:86:
8b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E7:C7:E2:3E:CD:70:48:6C:3D:90:DF:BA:7B:8D:AA:39:77:C8:4E
X509v3 Authority Key Identifier:
keyid:50:AF:FC:28:84:30:A0:3C:0F:60:BA:6A:0E:27:60:23:70:F2:E9:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UK_8KIQwoDwPYLpqDidgI3Dy6eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e8:f4:7d:84:cd:7f:55:74:fc:59:78:42:05:f2:70:26:a1:
69:55:af:5a:e8:42:30:13:d7:97:4d:17:e5:d3:e1:61:07:79:
e6:94:57:97:19:e9:d4:d1:19:73:8b:9c:48:34:1a:57:84:9c:
8f:52:57:1e:93:76:25:39:4c:5a:17:f2:cd:94:82:d3:1a:6a:
e3:0a:78:52:9d:a0:3c:ec:21:d1:86:92:e4:c1:82:c3:cf:01:
ce:86:75:8a:fd:35:62:d8:cb:da:75:8d:5b:c0:09:e5:d9:5f:
7a:a2:90:fb:e2:26:48:60:ba:0e:fa:6d:2d:aa:82:4b:c2:45:
11:fe:1a:9e:c9:7c:0d:0d:dd:e7:97:17:c2:e5:d9:f7:46:9e:
12:1d:b3:1e:80:ce:fb:de:91:fa:d9:86:38:4f:f8:d0:91:4e:
cc:58:52:77:65:b1:96:ea:29:10:9d:29:a9:f3:7e:43:bf:ec:
3a:bf:91:2c:9a:15:51:de:fc:e8:f8:85:96:b1:1b:ea:7f:c4:
f5:ad:63:96:61:63:b9:ac:23:18:d3:5f:29:de:ac:98:f5:33:
d0:81:43:68:8a:90:2e:5d:02:16:1e:2a:42:ec:b5:91:0f:f9:
60:77:d8:6a:c7:3f:8a:7b:be:18:2e:5b:ca:a6:55:b4:27:4d:
97:a3:42:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 09:23:24 2025 by rpki-client