Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
File: ux1P6zEebC28c9UE_ISQzCFUY4k.mft (raw, json)
Hash identifier: uAihP8UJ9vG0JtAttUIQ1UWb+DEe7Tvx3w+rRBJ3exU=
Subject key identifier: EB:21:AF:60:5B:7E:3B:35:8C:01:EB:E1:5E:BC:07:50:A2:54:70:E6
Authority key identifier: BB:1D:4F:EB:31:1E:6C:2D:BC:73:D5:04:FC:84:90:CC:21:54:63:89
Certificate issuer: /CN=bb1d4feb311e6c2dbc73d504fc8490cc21546389
Certificate serial: 01988DD89E60DD8DFB8B01D72902FD48E807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
Manifest number: 0366
Signing time: Sat 09 Aug 2025 08:00:40 +0000
Manifest this update: Sat 09 Aug 2025 08:00:40 +0000
Manifest next update: Sun 10 Aug 2025 08:00:40 +0000
Files and hashes: 1: ux1P6zEebC28c9UE_ISQzCFUY4k.crl (hash: QRJWe8s6KSG02eGwKRoKsobqI3mxQPP9iaAxuG7K5Zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d8:9e:60:dd:8d:fb:8b:01:d7:29:02:fd:48:e8:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb1d4feb311e6c2dbc73d504fc8490cc21546389
Validity
Not Before: Aug 9 08:00:40 2025 GMT
Not After : Aug 10 08:00:40 2025 GMT
Subject: CN=eb21af605b7e3b358c01ebe15ebc0750a25470e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:14:a9:76:e2:43:30:5d:73:34:fd:32:01:c3:
bb:44:91:d9:1e:0b:d1:00:75:25:ac:1d:18:f3:36:
5a:ff:78:10:71:44:1a:d3:e3:4c:18:47:58:ea:09:
94:49:54:9f:d0:7b:9c:58:28:84:ab:6f:35:a0:ac:
ac:bd:e8:23:1f:b1:6e:cd:9d:ad:2d:59:ca:2f:1b:
f8:7f:e6:af:4f:32:66:40:37:1f:c8:ec:01:26:56:
4e:cd:21:d1:5b:f6:13:33:61:9f:9b:35:c8:68:d6:
10:9e:08:10:c0:0a:c2:cd:b7:51:55:7c:36:0d:0b:
01:ec:85:7f:3f:22:ea:e8:a6:15:bc:d2:6f:79:0f:
8f:f0:0d:e1:f5:67:64:1f:ee:9a:53:ee:28:8e:cc:
fe:a3:e4:5e:96:8a:9d:d8:bc:b1:d1:76:0b:7b:3d:
f2:1a:4b:ff:13:ef:e0:ea:5c:f7:88:be:d9:73:8a:
d0:e3:f2:9b:e4:5f:c5:27:b3:05:17:5f:a6:07:05:
8d:ee:fe:ba:71:28:04:fa:cf:d1:28:b1:6b:a4:3a:
fd:e2:53:49:10:db:75:3c:85:e6:53:35:16:05:ee:
8d:73:df:a0:24:84:50:8a:4f:5f:69:64:4a:74:a0:
4c:98:d2:ce:5d:3d:ff:e6:f6:6f:c6:89:a8:82:bc:
49:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:21:AF:60:5B:7E:3B:35:8C:01:EB:E1:5E:BC:07:50:A2:54:70:E6
X509v3 Authority Key Identifier:
keyid:BB:1D:4F:EB:31:1E:6C:2D:BC:73:D5:04:FC:84:90:CC:21:54:63:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c3:6c:c3:74:88:34:4d:fa:61:11:0d:55:8a:85:6e:c4:65:
f7:8e:e9:3e:03:8f:7a:1f:f5:5f:bf:57:b2:48:25:48:43:d5:
a9:a9:65:c1:ac:20:c1:17:f7:87:96:c9:7c:24:45:38:1e:9e:
9c:15:70:f1:54:36:25:ed:5c:80:5e:ef:c1:5a:da:ed:77:cd:
a2:02:9d:5d:81:c5:07:09:a9:29:23:4b:aa:75:88:45:a0:95:
e1:b1:dd:e9:37:70:33:db:d2:a3:f8:e1:a0:0f:03:8e:cc:67:
b9:9a:aa:d0:85:31:f5:4a:9b:dd:66:34:15:d1:67:92:20:49:
2f:39:b5:ec:aa:b3:b6:5e:98:b5:ab:a7:3e:72:48:d2:ce:ee:
58:b2:9a:72:ba:30:5e:72:40:42:31:dc:82:4e:5a:0a:e5:5b:
c0:8d:50:ab:6a:00:b5:a4:b5:b5:6c:dc:00:5a:5a:96:21:9b:
8e:ab:ac:75:02:b2:4e:4a:14:ae:52:ba:c5:c5:55:63:85:12:
86:58:ea:de:bb:9b:04:7b:50:b5:3d:7e:53:27:67:f1:54:7c:
f7:29:f2:0e:fd:c9:18:9a:f7:63:71:bd:ef:18:3a:31:02:11:
b7:e1:7f:e1:aa:1d:10:5e:b5:48:7e:fd:40:a6:8e:e7:72:78:
86:ef:81:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:36 2025 by rpki-client