Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
File: uXhT3Vdz8qawcYefW567Dm9Ofao.mft (raw, json)
Hash identifier: 7AF1Wv5aGXoNE/COBPtYT6ag4YLYzrzOQszD0897dIA=
Subject key identifier: 65:0D:22:3C:C5:2C:F8:4A:BC:27:3E:22:4E:37:A8:43:28:7E:F2:3D
Authority key identifier: B9:78:53:DD:57:73:F2:A6:B0:71:87:9F:5B:9E:BB:0E:6F:4E:7D:AA
Certificate issuer: /CN=b97853dd5773f2a6b071879f5b9ebb0e6f4e7daa
Certificate serial: 01989712B0E28F5961DE249EA7ED053961B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
Manifest number: 15BB
Signing time: Mon 11 Aug 2025 03:00:41 +0000
Manifest this update: Mon 11 Aug 2025 03:00:41 +0000
Manifest next update: Tue 12 Aug 2025 03:00:41 +0000
Files and hashes: 1: uXhT3Vdz8qawcYefW567Dm9Ofao.crl (hash: YhIc2OmyXPfU0p2Gd4+XxoiGgDKvFLYYp/9bvMnDx48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:12:b0:e2:8f:59:61:de:24:9e:a7:ed:05:39:61:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97853dd5773f2a6b071879f5b9ebb0e6f4e7daa
Validity
Not Before: Aug 11 03:00:41 2025 GMT
Not After : Aug 12 03:00:41 2025 GMT
Subject: CN=650d223cc52cf84abc273e224e37a843287ef23d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5a:c2:de:c6:2d:d9:57:05:ee:e7:d9:ce:65:
cf:4a:d8:18:9b:e7:d8:25:95:15:fa:91:f0:7d:8f:
8b:57:92:36:04:84:dd:fc:89:bf:01:fd:bc:c0:7d:
2b:11:8a:ad:c0:65:1d:11:96:d3:a1:a0:71:a5:d3:
4d:5c:dd:74:62:23:29:88:0c:6e:7d:16:70:6d:72:
f3:8b:f6:e8:0a:3b:ac:a0:76:b7:f3:ba:c0:47:81:
2f:60:e9:49:7a:dc:b3:33:80:6c:b4:83:9e:1d:d7:
27:7e:e2:34:0b:e3:a5:56:f4:e6:0b:80:44:75:97:
23:c2:1d:3a:c3:58:7f:1c:a0:32:fc:b6:0b:81:66:
fd:9a:01:94:29:0d:0f:68:a6:2f:39:ce:ed:9c:a9:
2c:8a:b6:c4:be:6d:e8:03:f8:47:28:5a:bd:13:f1:
f0:87:40:2d:60:9d:40:9b:dd:60:04:33:b5:ef:84:
b5:48:4c:73:b6:1c:9a:69:ed:45:d1:cf:47:c6:c0:
13:6b:ce:36:76:56:ec:e5:a3:a0:2f:ef:d6:8c:01:
36:ac:d2:da:c7:27:7d:fb:76:48:48:64:8c:c9:75:
06:79:6d:ff:84:84:ac:d7:91:70:6b:ac:46:c2:cc:
57:67:59:a7:e2:27:84:22:ab:aa:49:07:db:c0:07:
90:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0D:22:3C:C5:2C:F8:4A:BC:27:3E:22:4E:37:A8:43:28:7E:F2:3D
X509v3 Authority Key Identifier:
keyid:B9:78:53:DD:57:73:F2:A6:B0:71:87:9F:5B:9E:BB:0E:6F:4E:7D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:4c:6a:3f:e8:1a:72:d3:97:7c:68:41:26:99:f8:a2:ba:c8:
c7:0f:4d:88:6e:c9:25:ad:94:f9:74:7c:1b:d2:81:82:33:70:
6c:18:6a:3c:3e:17:92:9a:ad:df:89:0a:9f:fa:c8:49:9e:f7:
dc:75:5d:cc:f6:31:3d:ff:e6:ee:fa:be:55:80:b1:ed:29:2a:
8d:c5:c0:63:20:6d:f0:94:18:cb:7d:27:4a:17:ff:b4:69:1c:
ac:6d:c4:4b:66:9e:ac:4c:3a:70:c0:2a:a0:c0:bb:93:56:5c:
21:a6:e1:47:fc:f4:48:80:fa:35:e1:7f:12:d1:c1:30:3e:b4:
d2:21:8c:75:cb:92:57:93:52:42:80:a0:65:4e:7c:2f:9d:2c:
0b:94:52:a0:13:a7:2d:38:c5:7b:28:2c:37:de:02:78:63:75:
03:b9:ae:48:89:3b:29:a8:ae:9e:87:a1:c3:d3:11:37:53:50:
2b:68:93:6e:8a:97:69:fa:72:d2:38:18:24:f6:ad:fc:c9:15:
ca:48:71:be:08:ae:71:70:4a:ff:7f:e6:bf:d6:57:22:39:ef:
35:27:7b:88:e7:fc:a9:3a:ec:31:71:10:94:fb:56:52:55:40:
f2:58:7c:bd:39:db:01:92:22:81:34:db:22:bb:d9:20:74:1c:
40:99:a4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:15:07 2025 by rpki-client