Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
File: UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft (raw, json)
Hash identifier: gZnedIUZM/iHCYMW9M8U66rXSTetyeGuySEynwsWz6I=
Subject key identifier: D2:C0:E5:9D:80:4C:03:38:F5:55:BF:7D:06:3A:24:19:B0:F1:2E:5D
Authority key identifier: 50:9F:39:1F:29:D9:20:78:BA:6E:2C:76:FA:A2:F8:AE:94:73:43:E6
Certificate issuer: /CN=509f391f29d92078ba6e2c76faa2f8ae947343e6
Certificate serial: 01987D8B67C909AB94B39E54E3C602765886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
Manifest number: 161B
Signing time: Wed 06 Aug 2025 04:02:24 +0000
Manifest this update: Wed 06 Aug 2025 04:02:24 +0000
Manifest next update: Thu 07 Aug 2025 04:02:24 +0000
Files and hashes: 1: UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl (hash: nTeO5T+FoLWsn7M+EvWlmUAcbPTie/sRdftbelFYNW8=)
2: VIK5LfegEju3TUqgukYni1TBj7k.roa (hash: FcCMQfjXZEhJ1ZtbvXFYBrE4X/DK9/KBh+K8ZP9nlZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:67:c9:09:ab:94:b3:9e:54:e3:c6:02:76:58:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509f391f29d92078ba6e2c76faa2f8ae947343e6
Validity
Not Before: Aug 6 04:02:24 2025 GMT
Not After : Aug 7 04:02:24 2025 GMT
Subject: CN=d2c0e59d804c0338f555bf7d063a2419b0f12e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d8:99:68:df:71:0e:85:37:a9:3c:21:09:37:
6d:e1:ab:28:31:77:bc:e0:2a:95:27:49:8a:02:06:
b5:cb:71:1e:d7:ef:32:07:50:e0:83:6b:49:0f:f3:
9f:73:e2:3f:87:b8:31:b4:26:61:2b:f2:be:7e:c6:
e0:a9:d9:74:5d:14:39:22:62:a7:52:cc:9a:20:e8:
81:11:21:80:ef:5d:71:99:60:77:2f:51:a0:7a:b9:
28:9f:66:42:83:b4:74:86:a4:1f:58:b5:c0:fa:2d:
01:57:24:89:ff:6c:d9:b3:8b:76:5b:36:aa:3d:01:
24:c5:01:3c:36:aa:8d:53:97:ff:1f:fb:01:13:de:
5a:2b:f5:03:cf:ee:fa:ec:92:8d:7c:60:a8:4f:d6:
36:27:5f:19:8c:b1:d9:83:f0:18:80:ac:81:69:b6:
6c:c8:87:0d:af:65:0a:e9:aa:dc:8a:0d:db:43:cd:
18:e7:ae:b2:bd:0b:bf:7b:b0:f8:e6:40:ad:0f:d3:
ba:36:ee:94:cd:66:ab:bf:87:8e:9b:57:d6:71:dd:
99:7d:01:4d:9a:c2:24:e5:96:40:e4:be:33:78:fe:
3f:3d:04:7e:ba:a4:e6:71:5d:3b:8b:4c:28:4f:06:
b9:c2:ac:9c:87:a3:cc:5d:bf:a9:3c:f3:47:8a:5e:
f9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C0:E5:9D:80:4C:03:38:F5:55:BF:7D:06:3A:24:19:B0:F1:2E:5D
X509v3 Authority Key Identifier:
keyid:50:9F:39:1F:29:D9:20:78:BA:6E:2C:76:FA:A2:F8:AE:94:73:43:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:68:2e:d6:77:83:9f:f6:e3:f7:a3:98:e5:59:15:a6:1d:ff:
e3:8b:c5:bd:53:d5:eb:9f:4e:d1:c6:b5:e6:57:31:c3:c5:5d:
23:de:92:ff:01:07:77:c6:99:60:61:07:60:6d:87:3f:03:62:
a6:85:6d:d3:c4:69:fa:88:39:58:40:64:7f:e2:33:c6:67:52:
40:7e:a6:06:3f:90:1a:49:31:1a:07:96:02:b2:ca:52:a9:6e:
da:1c:01:30:6a:2b:7d:89:b0:97:7e:4e:ba:2f:b5:d4:61:bd:
e7:1b:ef:49:cc:60:1e:18:b7:4b:56:c8:71:b9:58:20:fd:66:
e7:87:a6:1a:b8:0b:32:9c:b4:06:1b:da:db:21:98:73:1b:3c:
77:4c:55:26:9f:cb:45:83:05:ee:23:74:9c:bd:c5:38:c6:6e:
f4:1e:ff:90:b6:1b:ba:c9:62:a8:d8:35:16:f8:f2:3a:11:60:
b8:62:96:9a:01:58:f8:98:af:c8:04:2f:90:26:d5:29:9e:29:
47:23:cd:28:e3:3b:fe:8a:31:29:43:c5:04:76:d4:33:9f:52:
82:64:8d:5b:50:c6:f0:7f:5b:c9:49:a0:c5:63:1f:d9:e4:de:
3a:82:5b:a0:5c:28:5f:ca:dc:85:86:f5:c8:80:e6:e6:1c:b4:
ed:d2:56:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:40:22 2025 by rpki-client