Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
File: ubjmb62BRkWYT9TqrTE7b-AFibc.mft (raw, json)
Hash identifier: nrcEOg725nMCF99d75D3KLejPH2Bv2+KL2IhU6P6SPM=
Subject key identifier: DB:3D:18:E3:D1:52:42:FB:3B:4C:D9:0A:E7:75:AC:19:10:AA:60:94
Authority key identifier: B9:B8:E6:6F:AD:81:46:45:98:4F:D4:EA:AD:31:3B:6F:E0:05:89:B7
Certificate issuer: /CN=b9b8e66fad814645984fd4eaad313b6fe00589b7
Certificate serial: 01987D89D728B0720E012CC27E112E9DA944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
Manifest number: 0AA0
Signing time: Wed 06 Aug 2025 04:00:42 +0000
Manifest this update: Wed 06 Aug 2025 04:00:42 +0000
Manifest next update: Thu 07 Aug 2025 04:00:42 +0000
Files and hashes: 1: ubjmb62BRkWYT9TqrTE7b-AFibc.crl (hash: AmFIHl1B9eL9Fz6tNn8j7MANwkeZozBn9+AE5j4fGf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:89:d7:28:b0:72:0e:01:2c:c2:7e:11:2e:9d:a9:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b8e66fad814645984fd4eaad313b6fe00589b7
Validity
Not Before: Aug 6 04:00:42 2025 GMT
Not After : Aug 7 04:00:42 2025 GMT
Subject: CN=db3d18e3d15242fb3b4cd90ae775ac1910aa6094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8f:0d:22:46:12:b8:f8:13:d8:df:f5:96:6c:
9c:50:2e:63:d9:90:5e:cd:0d:b6:3a:46:91:44:a1:
42:4f:1b:1e:9d:90:83:db:ce:dd:82:a8:b6:10:2b:
93:a8:96:b3:53:ad:a8:de:50:23:c6:3b:b0:e3:6a:
84:c4:e6:8b:54:35:db:be:b9:25:80:64:7d:09:62:
e3:a6:c0:9c:5d:51:f2:61:87:7b:14:e9:1f:99:a1:
78:0e:76:32:c2:d0:b4:6d:22:99:59:92:7a:57:3c:
b0:30:1e:d8:cc:81:81:01:c5:d9:68:6a:e4:bf:4e:
32:c2:81:0b:19:2c:bd:5b:36:b0:ae:73:eb:c4:66:
db:1d:07:93:ba:4b:cf:68:7b:90:0a:a0:8c:b0:eb:
ae:8f:c2:7a:36:49:67:a0:bd:86:25:eb:95:12:8c:
37:2e:f5:23:ee:94:5b:1f:25:f9:ea:3c:e2:2e:ec:
3d:eb:a8:8c:27:db:9c:e7:1c:8f:03:d0:87:10:49:
10:66:9c:e5:51:a6:3b:d8:7e:7e:65:69:45:76:9c:
36:eb:9d:c2:36:45:d1:17:9f:b3:e8:ed:05:f2:30:
53:da:62:cf:22:97:e3:9e:ef:3a:0a:81:19:73:44:
2e:58:3e:5a:75:3f:f5:32:06:da:8b:31:d7:cb:b3:
29:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3D:18:E3:D1:52:42:FB:3B:4C:D9:0A:E7:75:AC:19:10:AA:60:94
X509v3 Authority Key Identifier:
keyid:B9:B8:E6:6F:AD:81:46:45:98:4F:D4:EA:AD:31:3B:6F:E0:05:89:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ec:6e:99:8f:34:ca:87:b4:2c:25:9f:62:61:39:12:18:02:
a7:7c:8d:a0:3b:80:e7:71:ca:b6:4d:94:01:a5:62:cd:65:05:
4c:bd:a0:2f:75:d0:53:93:54:e5:a8:2d:b9:51:fc:25:c5:35:
43:d6:d4:2a:36:b6:fb:ea:33:99:13:72:89:88:67:5b:6f:e1:
95:5c:ee:32:76:12:b6:1a:69:06:2e:7a:3b:92:f2:ff:8b:dc:
8e:48:c6:82:ef:a9:18:5d:11:05:63:f4:d1:fa:7a:05:64:51:
73:73:31:e5:30:cb:c8:63:f3:d9:e5:f5:3b:7b:03:25:b7:69:
26:41:56:36:a4:fb:62:1b:3a:da:dd:96:43:30:19:45:10:c8:
40:30:8f:9a:5c:10:d7:48:20:cd:cd:b4:db:20:cf:b9:10:f3:
79:c4:91:3d:2e:b4:89:03:4d:73:d9:6b:cd:6b:69:4a:72:b3:
3b:e5:8f:61:db:15:40:f7:54:00:07:74:eb:f3:f3:f1:94:6a:
b4:d0:d8:bf:af:4a:94:06:7e:d7:74:23:20:44:40:2b:cc:95:
6a:2f:49:58:61:e5:20:52:6b:7b:07:d1:d9:95:40:36:34:a4:
a1:3b:43:4d:e5:14:4b:c6:6d:2f:6e:7c:bc:bb:63:55:c2:f0:
5b:e8:c0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:11:50 2025 by rpki-client