Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
File: ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft (raw, json)
Hash identifier: VC057XRHydSDyzOm8K+qHU8/OkCPwyU0WvRcMm5mUGE=
Subject key identifier: E0:83:95:B3:CC:FA:BD:9D:DD:21:DC:33:47:AF:E2:D5:F0:42:6C:1F
Authority key identifier: B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2
Certificate issuer: /CN=b9aefe976787c2878e269d807cab98ad736d61e2
Certificate serial: 01976D748DCCF931CD13CAD3381EF5942955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
Manifest number: 1308
Signing time: Sat 14 Jun 2025 08:00:44 +0000
Manifest this update: Sat 14 Jun 2025 08:00:44 +0000
Manifest next update: Sun 15 Jun 2025 08:00:44 +0000
Files and hashes: 1: ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl (hash: oKrYVVIlowhc1+cIleKFlASX5KmrByIze9Fe98/RUXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:8d:cc:f9:31:cd:13:ca:d3:38:1e:f5:94:29:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9aefe976787c2878e269d807cab98ad736d61e2
Validity
Not Before: Jun 14 08:00:44 2025 GMT
Not After : Jun 15 08:00:44 2025 GMT
Subject: CN=e08395b3ccfabd9ddd21dc3347afe2d5f0426c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4d:12:20:c7:10:40:30:ff:cb:90:c4:8f:15:
63:5c:5d:46:7a:b1:41:df:41:10:09:5f:e4:59:ec:
eb:7d:1a:38:f8:81:92:9f:1d:48:f5:02:4d:fb:4e:
97:33:4b:b5:93:a4:b1:af:1f:cd:bf:36:b2:d3:c4:
68:7b:de:b9:57:3b:32:68:93:64:fe:19:bf:8a:68:
db:be:5a:ba:2a:4e:6c:ab:b5:bb:f7:01:83:fd:93:
f4:63:0d:0c:33:16:e1:b3:32:64:bf:7e:87:6b:c5:
ac:16:ef:ea:c3:1c:a1:d2:b0:56:98:26:50:26:77:
21:25:f7:73:b4:1a:75:d0:3e:6e:2b:5a:f4:c4:5f:
3b:9e:57:59:e9:9b:69:f2:c6:a8:3e:96:d9:17:5b:
eb:b7:13:53:f3:5a:5f:9c:8b:09:65:80:6d:a6:17:
5d:36:d1:79:8e:ff:2e:b7:59:57:98:4c:cc:0b:97:
7f:46:f8:f5:cf:b4:39:f0:ee:0c:03:a9:37:53:a0:
52:b2:c5:77:4e:18:89:c0:36:de:df:05:19:4b:30:
45:8a:c6:0d:e1:45:f4:0c:35:19:6c:85:3c:4b:38:
bc:29:fd:25:b0:bf:6b:dd:bd:da:7c:80:f0:4e:82:
2f:93:0f:23:e1:89:b0:01:6c:10:72:4d:3e:48:83:
4a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:83:95:B3:CC:FA:BD:9D:DD:21:DC:33:47:AF:E2:D5:F0:42:6C:1F
X509v3 Authority Key Identifier:
keyid:B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d5:9b:96:d5:ea:35:62:39:69:e5:6f:c2:6a:8b:82:c9:2b:
f7:7f:2a:c6:84:c9:ed:fd:0a:11:7d:ca:ba:c0:e1:87:ce:12:
f6:a1:21:06:cd:9f:c3:5b:7d:c7:47:21:dd:20:1e:ba:63:a8:
a2:fa:41:8f:62:03:45:88:c0:75:27:46:98:44:c6:3e:b8:a3:
f7:a4:83:82:aa:c7:e9:bb:f9:a7:86:38:7c:9d:2e:7c:da:00:
1b:a8:c3:9f:ee:ee:5d:b4:bb:a9:5a:97:89:b8:1d:c5:1a:ab:
1e:f1:76:32:e4:51:a4:55:65:f2:d4:91:b5:52:be:b4:b7:1f:
87:a3:fe:1c:c4:ff:a8:15:0f:cb:5a:27:db:13:e6:96:5c:fc:
37:a5:10:6b:9c:22:d3:d4:81:df:ca:2e:96:56:39:2d:d2:17:
26:d5:52:71:f7:85:99:73:97:2b:b6:56:53:25:29:42:cd:7e:
db:f6:e8:49:e6:31:17:a1:bb:80:06:63:4e:a0:6a:09:70:ae:
ff:c3:5a:39:2e:5e:62:df:de:66:49:5e:47:9e:7c:bb:8b:e3:
94:d8:cf:53:6b:4e:25:7b:16:3b:52:b0:dc:2e:0a:6d:0d:ee:
8d:5d:34:05:79:ca:c5:b5:a4:f9:77:79:89:12:41:46:fb:50:
aa:00:81:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:48:44 2025 by rpki-client