Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/34e759-c9e3-45ba-881b-0873865e4432/1/ubrpYJaypQez1LDCdLwv9Ynp-aI.mft
File: ubrpYJaypQez1LDCdLwv9Ynp-aI.mft (raw, json)
Hash identifier: fGfr6PpS+/AptZam/7uzpn1E9vwzl5lNHTgEd2qO3pM=
Subject key identifier: 52:25:2B:1B:11:B0:96:F4:EB:DC:AD:06:D0:D7:F5:2F:33:41:92:6A
Authority key identifier: B9:BA:E9:60:96:B2:A5:07:B3:D4:B0:C2:74:BC:2F:F5:89:E9:F9:A2
Certificate issuer: /CN=b9bae96096b2a507b3d4b0c274bc2ff589e9f9a2
Certificate serial: 019892FF052AE9AC9B779A4DB8902CE30248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubrpYJaypQez1LDCdLwv9Ynp-aI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/34e759-c9e3-45ba-881b-0873865e4432/1/ubrpYJaypQez1LDCdLwv9Ynp-aI.mft
Manifest number: 2D
Signing time: Sun 10 Aug 2025 08:00:43 +0000
Manifest this update: Sun 10 Aug 2025 08:00:43 +0000
Manifest next update: Mon 11 Aug 2025 08:00:43 +0000
Files and hashes: 1: ubrpYJaypQez1LDCdLwv9Ynp-aI.crl (hash: Q6QDP5iOfInP3tNn2LOQIY8iHHJz4PsVYbIH9EDkfZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/34e759-c9e3-45ba-881b-0873865e4432/1/ubrpYJaypQez1LDCdLwv9Ynp-aI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/34e759-c9e3-45ba-881b-0873865e4432/1/ubrpYJaypQez1LDCdLwv9Ynp-aI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubrpYJaypQez1LDCdLwv9Ynp-aI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:ff:05:2a:e9:ac:9b:77:9a:4d:b8:90:2c:e3:02:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9bae96096b2a507b3d4b0c274bc2ff589e9f9a2
Validity
Not Before: Aug 10 08:00:43 2025 GMT
Not After : Aug 11 08:00:43 2025 GMT
Subject: CN=52252b1b11b096f4ebdcad06d0d7f52f3341926a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e7:23:82:4d:cb:fb:38:67:6f:f2:91:8c:31:
5c:c1:4a:d5:fd:7e:54:9b:60:da:f1:42:bd:9c:7b:
0a:93:c9:b9:09:57:2f:ae:be:42:a8:f5:b4:49:45:
71:38:77:db:c1:96:52:0e:09:1c:a8:f4:55:3a:4f:
8f:c2:c1:28:22:1f:ca:b5:8e:a8:80:35:f7:cd:3d:
aa:f8:78:65:59:56:67:bd:10:63:91:c5:85:ef:e0:
37:87:6d:1e:a5:cc:b5:1f:7f:11:91:c5:0f:ce:1f:
9f:14:72:3c:7a:ca:78:ce:6e:3f:b7:20:75:91:53:
ac:24:d7:80:9b:75:33:a3:02:1f:87:bd:68:d2:1e:
bc:ea:49:de:8f:c9:30:cc:5a:f1:f1:c2:45:2d:4f:
59:85:d5:2d:f4:16:7f:15:dc:a9:bf:90:4b:4d:e8:
ff:3e:3a:85:da:a9:8d:0e:cf:d8:2a:7b:0c:7b:14:
c4:2d:ad:d2:90:5b:3a:97:b4:6b:e5:7d:25:aa:0c:
b9:77:40:75:d9:1a:21:61:95:6a:9b:f9:a4:bb:27:
c6:34:6a:c6:8c:8c:5f:c3:e5:a8:bd:6a:7b:0c:32:
2e:ee:28:6f:45:09:c8:ec:47:54:ff:e1:9f:c1:f7:
aa:96:1c:89:90:0f:29:70:07:f1:1c:4c:60:20:e5:
90:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:25:2B:1B:11:B0:96:F4:EB:DC:AD:06:D0:D7:F5:2F:33:41:92:6A
X509v3 Authority Key Identifier:
keyid:B9:BA:E9:60:96:B2:A5:07:B3:D4:B0:C2:74:BC:2F:F5:89:E9:F9:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubrpYJaypQez1LDCdLwv9Ynp-aI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/34e759-c9e3-45ba-881b-0873865e4432/1/ubrpYJaypQez1LDCdLwv9Ynp-aI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/34e759-c9e3-45ba-881b-0873865e4432/1/ubrpYJaypQez1LDCdLwv9Ynp-aI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:c3:b9:ec:50:67:f7:68:c0:35:c2:5e:46:38:a8:d6:52:f8:
23:e3:b7:f4:3c:ea:8f:dc:a8:bd:33:6d:f2:3f:aa:3e:30:c3:
d2:fb:4d:3e:56:01:01:46:82:f7:bb:c2:b4:2d:62:1f:c9:68:
09:e1:b3:f1:f8:8b:93:6c:63:eb:90:a9:70:fa:1d:3a:b4:49:
cf:86:2a:0b:fc:8b:d5:e3:fe:13:3b:21:51:9a:a7:d8:8d:15:
10:ed:c3:81:e3:b6:bc:f1:12:c7:08:ed:47:9a:83:3f:58:05:
58:42:93:b1:fa:54:0a:ab:13:fb:57:67:7e:ff:a3:f7:6b:7a:
52:73:bf:bc:29:b8:fb:98:28:f8:f2:43:1b:9f:ad:d5:ba:43:
24:46:bd:b8:59:90:ca:d3:cb:d1:20:87:f7:dc:25:18:97:0b:
ba:d8:80:46:86:13:8a:68:de:df:a5:44:e1:5b:97:d7:df:7e:
59:9c:35:d1:eb:46:4e:6e:2b:c4:bf:0c:80:32:f2:ad:e2:34:
ea:cc:6c:bd:42:dc:a6:16:05:12:2a:96:65:e5:b5:15:11:32:
88:17:7d:5e:4d:72:ef:83:6f:34:ed:19:7c:ff:cf:3f:ef:03:
c8:fd:d0:fa:49:5c:13:ad:0b:03:da:56:db:fa:fd:13:0e:7b:
56:5b:f5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:13 2025 by rpki-client