Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
File: ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft (raw, json)
Hash identifier: RQeMVHKxA9l6e0fbH37pucxBTEAmaq1Dt6Aps68mscg=
Subject key identifier: 47:68:0B:FE:DA:B7:45:AB:4A:ED:F3:B6:79:56:EF:17:67:EC:42:4E
Authority key identifier: B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2
Certificate issuer: /CN=b9aefe976787c2878e269d807cab98ad736d61e2
Certificate serial: 0198838C9DF4D7FF0C03530125BDCBF8978E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
Manifest number: 1398
Signing time: Thu 07 Aug 2025 08:01:27 +0000
Manifest this update: Thu 07 Aug 2025 08:01:27 +0000
Manifest next update: Fri 08 Aug 2025 08:01:27 +0000
Files and hashes: 1: ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl (hash: LWvcM+8w3JVYic6zd2xE5qJ+SwRHOGFvye0vi7mGg/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:8c:9d:f4:d7:ff:0c:03:53:01:25:bd:cb:f8:97:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9aefe976787c2878e269d807cab98ad736d61e2
Validity
Not Before: Aug 7 08:01:27 2025 GMT
Not After : Aug 8 08:01:27 2025 GMT
Subject: CN=47680bfedab745ab4aedf3b67956ef1767ec424e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c4:f9:34:52:be:07:56:c0:b2:97:15:ab:6d:
2e:bc:f8:cf:d4:22:4c:d1:86:4d:3c:81:cb:7c:34:
cd:cd:3d:34:38:59:05:90:b3:f0:5f:48:c6:4e:9a:
82:00:9b:54:fd:2e:f6:ab:aa:42:52:07:f4:fb:bc:
17:e7:93:0f:44:b7:04:4a:1c:7e:9b:db:1e:e1:b3:
c1:9b:1b:6f:8b:87:aa:97:a0:e6:9b:8b:5c:77:23:
fc:8a:a7:f8:be:d8:6a:c0:b4:2d:f1:6c:67:54:90:
3b:80:b5:7d:c2:ea:c9:17:b6:8b:e3:72:5e:20:9b:
d9:24:e4:f5:5f:13:1e:93:c9:b5:c6:5f:f9:9e:1d:
ea:20:b7:76:8e:36:c9:02:9f:13:8e:e1:31:33:d7:
40:4f:49:79:a9:75:e3:a8:46:34:67:4f:0a:da:a7:
c0:d0:17:43:38:df:a4:0d:f2:10:a8:93:52:8c:75:
2c:b6:e6:b9:01:a5:d5:a1:89:7b:c6:f8:7e:1a:1f:
26:2d:91:cc:04:ff:ea:29:70:00:0f:b5:f5:df:fb:
22:d9:8b:24:89:1e:c9:3a:b1:87:7f:12:16:ff:3e:
f1:65:88:95:8d:ba:10:5a:87:dc:c2:69:87:d2:63:
e1:73:8b:af:c2:4d:de:1a:4a:9f:c6:5d:f1:f0:8a:
a7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:68:0B:FE:DA:B7:45:AB:4A:ED:F3:B6:79:56:EF:17:67:EC:42:4E
X509v3 Authority Key Identifier:
keyid:B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:4a:07:9b:67:58:e0:42:cb:c9:70:59:21:11:00:21:35:1b:
85:ad:4b:a0:ce:fc:64:a0:e6:f7:08:d8:97:8d:3b:03:6b:5e:
4e:93:4a:78:a9:79:a6:01:f6:ff:d5:78:05:0c:ea:e8:d4:60:
e6:37:92:e6:0b:16:95:42:99:34:c7:0a:d7:d9:ff:ee:b7:73:
6b:eb:d6:ac:04:27:7b:ea:d4:e3:61:5f:68:dc:66:50:5d:81:
b6:d7:2f:13:8f:fe:ec:6c:da:e2:cc:88:cb:0b:9d:e3:13:b5:
68:30:e7:64:68:ce:8a:7b:80:03:ce:50:e5:33:73:9f:77:b9:
5e:ea:0c:18:2e:61:bb:52:cd:dd:74:e4:57:56:77:7e:24:46:
32:50:d5:14:5f:e1:b9:a5:84:99:ec:59:78:a9:1c:ca:ed:59:
b7:56:79:89:49:9f:70:40:57:0e:e1:ec:2f:6a:bd:98:f8:17:
41:2f:4b:f3:bd:67:81:53:4b:47:86:11:2d:c0:c4:b5:bf:05:
0e:07:f7:ad:7b:2f:69:6a:72:83:e4:1f:58:48:ca:f5:16:66:
4b:a6:c0:f2:f7:1b:4b:0b:35:de:3c:e3:25:c5:2a:60:f4:83:
63:45:2f:f3:59:5a:a8:1b:cf:f4:2d:d3:83:f1:03:c9:1e:a3:
16:11:b0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:16:41 2025 by rpki-client