Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/e19a3f-05ac-4dca-a895-8662c71186c6/1/UEwHY-3Lox64nwmD3djdGIkYwu4.mft
File: UEwHY-3Lox64nwmD3djdGIkYwu4.mft (raw, json)
Hash identifier: DzgPu94DCL3oId4x1cbriXEEElWY7/lbHYeWVOOd9qc=
Subject key identifier: B0:CC:32:F6:74:96:14:DE:63:3E:21:95:FF:30:5F:02:3F:FE:8E:F8
Authority key identifier: 50:4C:07:63:ED:CB:A3:1E:B8:9F:09:83:DD:D8:DD:18:89:18:C2:EE
Certificate issuer: /CN=504c0763edcba31eb89f0983ddd8dd188918c2ee
Certificate serial: 019889C5900FDDCA287D9A7CACFFE0466F58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEwHY-3Lox64nwmD3djdGIkYwu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/e19a3f-05ac-4dca-a895-8662c71186c6/1/UEwHY-3Lox64nwmD3djdGIkYwu4.mft
Manifest number: 094B
Signing time: Fri 08 Aug 2025 13:01:22 +0000
Manifest this update: Fri 08 Aug 2025 13:01:22 +0000
Manifest next update: Sat 09 Aug 2025 13:01:22 +0000
Files and hashes: 1: UEwHY-3Lox64nwmD3djdGIkYwu4.crl (hash: QqByDx/Uxormy45nsEkm+ijHxFgOygpED6u+wRFEHgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/e19a3f-05ac-4dca-a895-8662c71186c6/1/UEwHY-3Lox64nwmD3djdGIkYwu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/e19a3f-05ac-4dca-a895-8662c71186c6/1/UEwHY-3Lox64nwmD3djdGIkYwu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UEwHY-3Lox64nwmD3djdGIkYwu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:c5:90:0f:dd:ca:28:7d:9a:7c:ac:ff:e0:46:6f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=504c0763edcba31eb89f0983ddd8dd188918c2ee
Validity
Not Before: Aug 8 13:01:22 2025 GMT
Not After : Aug 9 13:01:22 2025 GMT
Subject: CN=b0cc32f6749614de633e2195ff305f023ffe8ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b7:b0:26:c1:16:97:2b:6e:b7:75:2d:74:fc:
a6:54:8e:84:86:87:3a:f8:7d:ab:e8:5f:32:52:ef:
fd:31:b3:d5:fc:22:81:fe:c0:d2:88:b5:5f:38:d1:
12:ca:77:90:6d:10:8c:f3:65:5a:07:6e:e8:dd:4b:
21:b3:36:ba:42:d9:6d:34:41:66:d1:4f:43:eb:79:
44:a6:3f:53:52:6c:e6:a3:f5:91:77:97:b6:66:57:
eb:2c:b8:60:34:22:35:d8:51:f7:62:e3:ae:61:11:
81:be:32:c7:9e:cf:89:1d:e7:9f:45:68:4d:77:fb:
4c:00:c7:0c:53:be:2e:f8:f9:d7:bb:6f:90:90:46:
7a:f2:e0:be:d3:57:41:ce:4a:f7:d4:7e:ca:9a:18:
06:75:97:c0:33:03:13:0a:ed:67:1f:bc:e4:c7:39:
a3:9b:75:54:63:b5:e7:f6:e3:84:80:52:b5:24:da:
0e:86:62:d5:04:ed:d9:3d:33:73:16:2e:b4:35:56:
5f:da:a9:b9:a7:ec:ea:48:0d:c8:47:7a:41:73:a5:
fe:aa:66:c7:43:df:da:1d:8b:27:9e:7b:ed:cd:1c:
64:91:c8:91:9c:49:cd:a8:25:82:37:99:fc:e2:67:
3e:a8:70:02:73:0c:47:b9:6d:62:db:fe:c2:8f:70:
94:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CC:32:F6:74:96:14:DE:63:3E:21:95:FF:30:5F:02:3F:FE:8E:F8
X509v3 Authority Key Identifier:
keyid:50:4C:07:63:ED:CB:A3:1E:B8:9F:09:83:DD:D8:DD:18:89:18:C2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEwHY-3Lox64nwmD3djdGIkYwu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e19a3f-05ac-4dca-a895-8662c71186c6/1/UEwHY-3Lox64nwmD3djdGIkYwu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e19a3f-05ac-4dca-a895-8662c71186c6/1/UEwHY-3Lox64nwmD3djdGIkYwu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c5:43:0d:92:4f:8f:1a:30:44:13:1d:cf:65:70:40:15:81:
1f:5c:73:cd:1e:ed:35:a1:dc:7c:41:24:a1:b1:4e:5e:da:af:
38:c6:99:5b:00:31:71:6d:90:dd:1a:fa:0f:21:c9:3d:b0:10:
8e:29:ab:19:86:0e:6c:0e:11:86:02:17:7f:83:26:44:96:81:
67:ae:e4:f2:47:13:16:c7:26:82:99:f6:78:01:44:02:6d:e8:
23:32:3b:23:90:ec:d3:b5:dc:ac:c6:9b:9a:4b:7d:0b:6e:c7:
22:9f:4e:c2:28:08:69:d7:d4:e8:54:4b:05:ff:cb:a2:30:7e:
25:22:0a:d8:86:73:ce:1f:97:00:3a:d1:12:96:5a:54:26:0d:
56:86:b1:4e:7f:62:4d:fc:b8:5f:ff:80:64:b3:17:da:0b:e7:
47:7a:90:e6:08:6e:fd:e3:f2:9d:66:91:38:8f:a7:7c:7f:ff:
39:d0:b8:d3:c7:6f:0c:41:a0:a4:44:4c:5d:84:92:e8:b4:75:
9d:87:91:22:2c:4e:77:1d:40:db:19:56:ab:2e:d3:02:1c:45:
e2:88:2e:90:5e:c3:ed:61:2e:82:ba:0b:ed:4e:b3:f4:41:b5:
b4:f1:e9:f0:db:5f:e1:6a:62:d6:15:db:d5:51:5c:b1:1b:46:
b7:ef:a2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:37:53 2025 by rpki-client