Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
File: ulnZ9a887kQgFLc1lhxzuWkmDhk.mft (raw, json)
Hash identifier: dz53uJcQM2cXk74ySFv9s+GCNzRsyHFGUFVIzHffSWI=
Subject key identifier: A9:ED:95:37:75:97:4B:F7:CB:64:49:20:C8:98:FF:13:C6:53:21:9A
Authority key identifier: BA:59:D9:F5:AF:3C:EE:44:20:14:B7:35:96:1C:73:B9:69:26:0E:19
Certificate issuer: /CN=ba59d9f5af3cee442014b735961c73b969260e19
Certificate serial: 019896A4DB278CC3BB8AEC649BDEF2823D46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
Manifest number: 1624
Signing time: Mon 11 Aug 2025 01:00:42 +0000
Manifest this update: Mon 11 Aug 2025 01:00:42 +0000
Manifest next update: Tue 12 Aug 2025 01:00:42 +0000
Files and hashes: 1: ulnZ9a887kQgFLc1lhxzuWkmDhk.crl (hash: 89D50IxHjmHZ5MfN+/MZjTirdrOrZwv4xWdqcvWS4FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a4:db:27:8c:c3:bb:8a:ec:64:9b:de:f2:82:3d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba59d9f5af3cee442014b735961c73b969260e19
Validity
Not Before: Aug 11 01:00:42 2025 GMT
Not After : Aug 12 01:00:42 2025 GMT
Subject: CN=a9ed953775974bf7cb644920c898ff13c653219a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:62:72:49:c0:64:ef:34:26:12:20:83:58:31:
35:f6:e6:88:ed:34:b4:eb:5d:38:61:34:f8:5b:05:
4b:bc:0e:1d:9c:4a:56:1e:4d:1f:8d:6a:12:75:8d:
66:67:68:8a:f7:53:2a:20:a5:3f:f5:0b:4b:61:99:
60:fb:7e:a2:c8:0b:25:cb:f3:23:ae:80:a0:6b:34:
85:08:2b:ca:56:ea:1e:1b:9e:9f:07:1c:84:7f:9e:
2b:87:9c:cb:e5:db:ce:3a:ed:10:20:c9:e3:70:26:
e3:17:7b:9c:87:e6:d1:63:1f:5d:17:08:94:ef:f0:
64:0c:bf:6c:f5:3e:59:60:97:6a:e2:4f:c1:9c:56:
cf:32:36:ce:42:aa:70:1e:5a:22:1f:25:27:a1:c0:
98:5a:69:74:f0:41:25:97:c8:ac:6f:3f:02:80:29:
b4:40:38:d0:ad:0f:f7:74:d8:19:eb:af:08:e5:01:
53:32:3e:a0:ff:13:40:64:b0:b5:e9:ac:cf:59:5b:
f0:d3:38:71:c9:8c:4e:15:93:2a:a5:c1:fb:c8:52:
ef:72:1e:46:90:06:f0:ee:39:d6:44:c0:e5:43:f4:
be:a7:3c:79:3c:44:b1:03:80:ba:06:d0:aa:0a:da:
e7:11:15:88:0b:9e:b1:ff:b1:2a:c6:9a:20:12:01:
4e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:ED:95:37:75:97:4B:F7:CB:64:49:20:C8:98:FF:13:C6:53:21:9A
X509v3 Authority Key Identifier:
keyid:BA:59:D9:F5:AF:3C:EE:44:20:14:B7:35:96:1C:73:B9:69:26:0E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f1:e0:c7:e4:17:54:c4:f4:2d:42:95:dc:5b:8f:5a:e0:37:
ea:64:3b:ff:33:3a:fa:ea:20:f6:c9:7f:f8:8c:6d:68:a0:8d:
f2:42:24:97:7c:ef:39:f5:f0:1d:25:25:d4:f8:0b:1a:56:15:
62:d8:e0:7e:bb:78:4f:ad:f5:9c:c4:13:06:94:f5:99:c0:9c:
08:11:f6:2b:5d:b6:5e:c8:a4:c0:07:09:f0:ae:b1:a2:d5:42:
ae:5d:ff:b1:09:72:ec:69:47:26:76:b0:42:86:50:72:24:ac:
a8:a0:86:e3:8a:f5:13:28:59:8d:85:33:e3:38:f1:56:9e:87:
4e:13:19:97:63:f2:c1:c1:37:67:df:f7:d6:f7:0b:ce:74:d8:
e9:04:8e:ba:1e:38:b0:53:c3:68:61:a6:f2:73:00:7a:34:84:
1f:2d:bf:c8:9c:b8:bc:37:2a:83:5e:18:b9:90:1f:6f:be:0e:
00:00:e4:6f:f1:a5:69:8d:88:8c:8e:1a:a0:6c:01:e8:73:b5:
75:68:70:e0:46:b1:7d:a8:72:49:2d:04:64:26:cd:ec:b6:1c:
fa:99:69:a4:58:63:60:74:44:ec:4a:b1:80:5f:90:8e:cf:96:
57:ec:65:11:90:6b:ac:91:48:d5:c3:7f:ef:db:8c:d6:64:3a:
e5:1e:05:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:47:11 2025 by rpki-client