Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
File: ubjmb62BRkWYT9TqrTE7b-AFibc.mft (raw, json)
Hash identifier: ihISzAjd5daQHZuU6GuB9eOfWYH6aUYuBIug+G6NZWY=
Subject key identifier: C2:E2:A3:FF:E7:41:6F:B9:D6:1D:CE:F4:07:05:3D:4E:C3:64:2B:7B
Authority key identifier: B9:B8:E6:6F:AD:81:46:45:98:4F:D4:EA:AD:31:3B:6F:E0:05:89:B7
Certificate issuer: /CN=b9b8e66fad814645984fd4eaad313b6fe00589b7
Certificate serial: 01977AC2C626E3D28BF868712ABCD919159E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
Manifest number: 0A1A
Signing time: Mon 16 Jun 2025 22:01:14 +0000
Manifest this update: Mon 16 Jun 2025 22:01:14 +0000
Manifest next update: Tue 17 Jun 2025 22:01:14 +0000
Files and hashes: 1: ubjmb62BRkWYT9TqrTE7b-AFibc.crl (hash: /WqsjJBq1B5WJYO9ciHhCxcvBIGVVr8L8vYRWjpZ0RM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:c2:c6:26:e3:d2:8b:f8:68:71:2a:bc:d9:19:15:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b8e66fad814645984fd4eaad313b6fe00589b7
Validity
Not Before: Jun 16 22:01:14 2025 GMT
Not After : Jun 17 22:01:14 2025 GMT
Subject: CN=c2e2a3ffe7416fb9d61dcef407053d4ec3642b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b1:6c:72:8d:e1:a2:da:68:aa:f5:e7:2f:29:
52:85:79:d6:32:6b:cc:60:5c:4a:86:c5:8d:60:aa:
1c:d9:2e:52:fb:be:7e:af:9d:80:84:3c:c9:9b:a5:
9c:c5:48:7f:69:c0:0b:89:93:ab:b9:00:23:a1:42:
e1:14:f8:76:0f:02:ce:fa:08:15:db:04:8c:4f:f5:
85:9a:9b:18:fb:6e:b8:fe:e0:c0:41:f7:af:d1:3f:
3c:93:a0:c8:36:a2:07:20:e0:5b:cc:16:e4:25:0e:
ff:29:72:db:fb:7a:02:90:a1:38:fd:7f:a5:6a:c9:
1d:74:88:85:d2:73:0a:b7:cc:4f:f5:e5:2f:0b:38:
3d:c6:6a:ae:2b:23:0d:81:23:a6:57:db:b0:06:d0:
ae:a1:10:71:1e:aa:a9:0b:f2:73:31:85:f6:db:4c:
16:0f:0b:0b:c9:73:ab:08:46:cd:89:b4:f1:34:3d:
3e:af:88:47:59:ee:3b:1e:3c:6c:41:da:30:4e:7b:
6d:46:16:9e:e3:53:5f:ef:89:23:a8:24:a3:19:34:
91:17:c7:e8:d7:cd:9a:48:a1:f3:42:bc:c4:b4:36:
3b:f7:6e:87:3a:3a:d5:77:dc:12:7a:9e:97:d1:15:
e9:08:ed:60:50:be:24:30:3d:d0:51:65:cf:82:37:
e6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E2:A3:FF:E7:41:6F:B9:D6:1D:CE:F4:07:05:3D:4E:C3:64:2B:7B
X509v3 Authority Key Identifier:
keyid:B9:B8:E6:6F:AD:81:46:45:98:4F:D4:EA:AD:31:3B:6F:E0:05:89:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:1d:b1:ed:11:68:0a:8e:57:73:bc:a7:a9:a6:b9:29:f3:ee:
e4:50:48:41:68:94:c1:ab:db:11:1a:25:76:a9:fd:03:db:a2:
49:d6:76:6d:60:29:2d:57:a4:80:f1:22:0b:a1:d0:18:d0:09:
6c:e5:96:a0:c6:ad:61:94:7f:f4:59:0e:06:ec:b0:06:5d:7c:
a9:42:0b:b3:ba:7c:66:f0:ab:e4:df:f8:e4:5f:44:24:06:8b:
db:4c:4a:7e:4b:c5:f4:f9:70:74:a1:26:5e:1a:3c:4a:04:a3:
91:d5:c1:89:03:40:8d:1f:e6:3a:a2:da:e8:1a:c3:63:ac:8e:
72:d1:67:67:e5:1d:cc:6f:90:c4:1c:d3:20:e5:00:0e:62:58:
28:66:52:c0:28:72:6a:ce:30:d3:0d:79:7a:2f:f8:c7:b6:3a:
64:77:b4:66:ee:80:63:f9:c4:c6:19:6a:c6:64:2e:0e:bb:97:
f0:60:d9:0c:ee:ee:22:da:9b:ff:46:cc:49:d3:37:0a:4e:8f:
82:99:df:cd:8a:1f:34:26:06:29:22:31:69:ac:75:e8:39:9a:
92:bc:19:4f:1d:03:3a:77:74:70:62:05:e3:49:46:5a:1a:0a:
0a:da:3b:15:fd:ea:06:3b:ff:04:ff:65:7f:d6:7e:e8:e3:55:
25:b8:a8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:39:40 2025 by rpki-client