Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
File: ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft (raw, json)
Hash identifier: nktqUJDxgiARrnj4rHRzDAzBrpgP6BTceQNXQA2+fAw=
Subject key identifier: 02:A2:ED:81:8C:84:07:E4:17:21:9A:B6:96:14:D9:57:A5:EF:7C:FF
Authority key identifier: BA:58:27:55:72:43:48:93:B9:CB:D1:4E:4A:DE:70:89:29:E4:67:F8
Certificate issuer: /CN=ba58275572434893b9cbd14e4ade708929e467f8
Certificate serial: 019873E2F9F47D4A08D2FDDFC724F1D737AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
Manifest number: 11F2
Signing time: Mon 04 Aug 2025 07:01:51 +0000
Manifest this update: Mon 04 Aug 2025 07:01:51 +0000
Manifest next update: Tue 05 Aug 2025 07:01:51 +0000
Files and hashes: 1: ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl (hash: Ou7c/19dBeXBq4bqYHaXrYgLokv8LpWMwRcSiQ+ZV2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:f9:f4:7d:4a:08:d2:fd:df:c7:24:f1:d7:37:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba58275572434893b9cbd14e4ade708929e467f8
Validity
Not Before: Aug 4 07:01:51 2025 GMT
Not After : Aug 5 07:01:51 2025 GMT
Subject: CN=02a2ed818c8407e417219ab69614d957a5ef7cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e8:4c:11:4b:d0:40:c3:b1:f3:dc:43:0d:5b:
41:e7:2f:94:b6:b0:f8:7d:1f:ac:21:e7:ce:5a:31:
38:0b:fa:16:93:c4:d4:a2:bc:cc:f0:c3:f4:a8:f3:
d6:67:c8:3f:fd:71:d3:49:2e:75:ce:1e:2b:64:63:
65:bd:3e:42:dd:cf:0d:6c:62:37:6b:d0:53:83:2f:
89:28:52:da:2d:66:5a:6d:1f:5c:7f:50:62:0f:19:
55:f4:9c:83:ad:dc:ef:9c:2d:f9:e7:04:de:f7:64:
e9:bf:d6:07:96:7c:5c:19:b7:08:91:1b:9f:d9:cf:
b4:d4:9f:77:1a:bd:43:1b:63:5a:e8:1d:bb:89:ac:
ae:aa:52:fc:f4:92:21:28:9d:c4:88:5d:b8:7a:71:
63:3a:7f:b6:6d:cd:74:0d:cb:6b:05:3b:78:b0:9a:
f6:0b:ae:3e:e1:65:03:cb:e2:04:b3:c5:0b:75:c5:
46:44:73:92:db:42:50:d4:3f:8b:57:8c:85:ab:96:
dc:63:fc:83:31:13:7b:1b:d0:66:84:80:c3:db:e3:
04:13:60:8d:87:3f:99:d2:55:9b:36:ff:ac:cf:e2:
a8:46:f9:d1:8b:ca:22:c3:91:25:77:d4:ac:d3:dd:
ef:d4:d7:ba:4e:de:4f:f6:e6:26:0d:48:88:2b:e2:
27:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A2:ED:81:8C:84:07:E4:17:21:9A:B6:96:14:D9:57:A5:EF:7C:FF
X509v3 Authority Key Identifier:
keyid:BA:58:27:55:72:43:48:93:B9:CB:D1:4E:4A:DE:70:89:29:E4:67:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:fa:22:63:e7:c2:d3:e5:c9:2e:18:c5:2f:4d:04:33:87:64:
83:aa:b7:c6:51:42:d8:cb:56:2b:e3:32:80:71:0c:3c:1c:47:
77:4f:27:a8:8e:2c:4d:8a:0a:93:99:d1:66:15:b1:96:b0:60:
ae:89:8f:56:fb:2b:6b:35:ab:e7:27:83:22:c4:23:3d:dd:dd:
54:90:5e:f5:1a:67:61:5c:9b:a4:f1:0f:3c:4b:c6:4e:1f:e6:
3d:32:ef:1e:35:da:1c:c9:7e:cb:e8:c9:1d:f7:4e:51:01:92:
de:db:62:d6:e3:c3:f0:71:7c:99:82:68:be:45:86:6c:22:27:
21:68:c7:60:83:23:8f:80:08:00:4b:32:8b:f6:06:3c:aa:09:
48:8c:1f:b4:b4:25:a1:f9:3f:7b:58:f3:d0:8d:14:11:17:ce:
fc:2f:38:8c:c9:c5:7b:c4:f2:25:48:bf:af:8f:44:d7:2a:33:
8e:76:e2:25:3e:b1:5f:5b:41:52:b0:cc:2e:ed:66:51:48:22:
f4:78:e6:df:0b:00:43:28:2a:f3:3c:ad:89:17:aa:60:c9:a3:
a2:cc:a2:d6:c6:75:a0:11:0f:c9:6b:5d:23:39:73:68:cf:77:
eb:89:83:60:da:1e:b7:66:1d:86:4c:3a:31:e0:4d:cd:11:20:
cb:15:1a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:47 2025 by rpki-client