Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft
File: UpJ4MtOYUOhR7staBRFpKZHdpdk.mft (raw, json)
Hash identifier: jKj29dW8AuarIEhNVIM5tLg0BlML5a4LmbQsJbVIvdM=
Subject key identifier: EE:9B:A0:40:38:B4:91:A5:2D:C9:FF:A2:B9:67:BD:A7:86:4E:90:9A
Authority key identifier: 52:92:78:32:D3:98:50:E8:51:EE:CB:5A:05:11:69:29:91:DD:A5:D9
Certificate issuer: /CN=52927832d39850e851eecb5a0511692991dda5d9
Certificate serial: 019873E3746E8A1DD27D5B2A413761A83BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpJ4MtOYUOhR7staBRFpKZHdpdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft
Manifest number: 1613
Signing time: Mon 04 Aug 2025 07:02:22 +0000
Manifest this update: Mon 04 Aug 2025 07:02:22 +0000
Manifest next update: Tue 05 Aug 2025 07:02:22 +0000
Files and hashes: 1: UpJ4MtOYUOhR7staBRFpKZHdpdk.crl (hash: IuQuCLu5xxX6zpEUjlflmxUBkapNxNC+KHCDL7Fckx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpJ4MtOYUOhR7staBRFpKZHdpdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:74:6e:8a:1d:d2:7d:5b:2a:41:37:61:a8:3b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52927832d39850e851eecb5a0511692991dda5d9
Validity
Not Before: Aug 4 07:02:22 2025 GMT
Not After : Aug 5 07:02:22 2025 GMT
Subject: CN=ee9ba04038b491a52dc9ffa2b967bda7864e909a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2d:05:6a:a3:51:48:69:85:e6:9b:ec:c9:b0:
fc:7c:0a:19:27:5f:c4:eb:34:8d:00:40:ef:8e:24:
3f:80:d4:30:8c:b8:d9:57:23:86:ca:56:eb:6f:fa:
00:ec:cd:ec:eb:ab:c5:0f:ea:f1:35:89:35:1a:37:
86:ad:03:a8:1a:0f:6c:e7:0d:b0:db:fe:86:b4:56:
26:9b:12:45:a9:3b:ef:0b:c2:23:33:20:40:ea:7a:
9e:9b:fc:2e:35:6f:7e:c0:b7:d0:13:e9:81:33:99:
b3:fb:a5:dc:9c:53:98:d3:ce:f0:7b:64:f7:75:4d:
4d:41:e9:13:7a:1a:e5:e0:61:ce:cf:a9:de:f9:e7:
b2:b5:ab:bd:29:60:42:a6:14:57:62:3a:44:b0:ad:
87:56:98:58:9e:26:98:cc:78:3c:ea:eb:c9:cd:96:
6f:06:ec:a1:83:d8:93:46:89:d7:4b:a5:63:01:e5:
08:47:a5:f8:0d:84:d2:da:dc:55:1d:4d:72:fd:c5:
f5:24:07:13:0f:e0:9f:ee:c0:67:2a:e7:de:2c:b1:
fd:c8:78:2b:03:c5:5e:37:d7:2b:60:c0:ec:a3:3c:
5c:0e:9d:d3:61:5d:b3:9c:60:9d:51:56:d1:8f:56:
56:38:f7:2b:ee:e3:8c:0d:51:e5:0c:e7:80:63:0e:
a7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9B:A0:40:38:B4:91:A5:2D:C9:FF:A2:B9:67:BD:A7:86:4E:90:9A
X509v3 Authority Key Identifier:
keyid:52:92:78:32:D3:98:50:E8:51:EE:CB:5A:05:11:69:29:91:DD:A5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpJ4MtOYUOhR7staBRFpKZHdpdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:01:fc:35:0c:eb:c2:13:2d:42:04:e5:0e:fa:4a:01:87:06:
28:19:5c:50:38:73:e4:31:4b:38:25:eb:ca:f0:54:fb:3e:6d:
22:7e:9a:97:8e:27:a3:24:06:9a:90:c6:0e:bf:11:9a:af:ab:
ef:63:76:86:42:dd:cc:e4:5a:06:26:53:e8:3c:84:aa:4a:64:
1c:63:66:b9:2e:44:dc:27:63:10:48:74:db:7f:0f:f7:89:68:
9d:e5:93:ae:d4:d5:fb:b0:c0:a1:a4:a4:40:d3:8b:1d:6e:ad:
ce:5e:16:32:4a:81:07:20:07:3e:75:04:1b:f6:c8:1f:b4:29:
22:4c:20:96:27:2b:51:da:11:20:c9:1b:5a:a3:0c:5b:9e:8b:
d7:3d:cd:68:b2:ac:51:ac:9a:fb:94:d0:19:d6:c1:65:12:c1:
8d:17:4a:8a:62:72:02:5e:04:79:9f:89:53:68:54:3e:c2:36:
6d:98:cc:9f:50:79:bc:5f:76:b6:e4:ad:91:0b:08:ea:27:d1:
dd:e6:fb:8b:b5:78:54:33:dc:2b:a2:e5:b9:75:49:a1:1d:32:
1a:70:b2:a2:62:72:d4:b2:cd:05:d4:34:a8:92:85:42:d6:de:
e8:1b:86:a8:66:a0:97:2f:82:9d:f4:d1:9e:7c:5c:30:d4:e0:
f3:fe:55:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:02 2025 by rpki-client