
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5974d6-6c67-442b-993a-7ae5987bee62/1/UmLT8nzAW-WSS7e9iQ9-be_7SX0.mft
File: UmLT8nzAW-WSS7e9iQ9-be_7SX0.mft (raw, json)
Hash identifier: gunFkJ6sMvmiNeilnZ+QevZ1ahoJzgCZGNmy/TYCLMY=
Subject key identifier: 27:86:E6:5B:1D:F4:D9:38:D2:19:A4:AF:66:68:4D:0D:CD:9E:03:2F
Authority key identifier: 52:62:D3:F2:7C:C0:5B:E5:92:4B:B7:BD:89:0F:7E:6D:EF:FB:49:7D
Certificate issuer: /CN=5262d3f27cc05be5924bb7bd890f7e6deffb497d
Certificate serial: 01988242B82A1E2CD6E781217ABBD377F6B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmLT8nzAW-WSS7e9iQ9-be_7SX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5974d6-6c67-442b-993a-7ae5987bee62/1/UmLT8nzAW-WSS7e9iQ9-be_7SX0.mft
Manifest number: 157C
Signing time: Thu 07 Aug 2025 02:01:07 +0000
Manifest this update: Thu 07 Aug 2025 02:01:07 +0000
Manifest next update: Fri 08 Aug 2025 02:01:07 +0000
Files and hashes: 1: UmLT8nzAW-WSS7e9iQ9-be_7SX0.crl (hash: LQ41tFgwqI32MvCZ190A+CMRMxbehzdJk18+bwean2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5974d6-6c67-442b-993a-7ae5987bee62/1/UmLT8nzAW-WSS7e9iQ9-be_7SX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5974d6-6c67-442b-993a-7ae5987bee62/1/UmLT8nzAW-WSS7e9iQ9-be_7SX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmLT8nzAW-WSS7e9iQ9-be_7SX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:42:b8:2a:1e:2c:d6:e7:81:21:7a:bb:d3:77:f6:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5262d3f27cc05be5924bb7bd890f7e6deffb497d
Validity
Not Before: Aug 7 02:01:07 2025 GMT
Not After : Aug 8 02:01:07 2025 GMT
Subject: CN=2786e65b1df4d938d219a4af66684d0dcd9e032f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d2:4d:63:c3:97:4c:f1:c4:22:7e:6d:8d:d8:
ea:f9:e0:9e:f1:97:c3:f4:36:8f:f7:cb:3f:71:28:
ad:38:97:33:48:f3:41:fc:78:10:f5:9f:e1:f2:6b:
27:81:d9:10:ad:a4:c8:f2:b5:ae:c1:fc:c4:4b:62:
89:69:f6:17:bb:37:fe:6d:c5:5c:bd:42:6f:1f:92:
9e:d2:78:1b:e0:c6:73:7b:35:e7:42:20:23:e8:91:
a1:ce:20:79:0a:9a:2b:bc:d3:6b:28:83:24:a4:6a:
e1:9f:06:e1:40:b8:cd:f0:31:3e:2d:a9:0f:ef:e3:
58:c0:bd:67:86:67:b3:5c:36:39:6e:d5:32:de:a8:
87:67:73:a9:ce:96:c4:f8:99:65:46:3a:a3:08:c4:
57:28:96:59:4e:07:83:d6:c2:81:81:4f:7a:95:20:
44:8d:a6:77:da:b8:9d:56:eb:7e:a3:62:1e:3d:fd:
57:f4:2b:4a:cc:8c:ed:a6:50:7f:4f:ec:5b:3b:2f:
27:ac:0c:df:3d:69:92:22:fd:32:b7:2a:eb:6e:03:
3b:56:e7:ad:6b:1f:0d:3b:e1:ff:e1:81:8f:45:d2:
0c:5b:0f:cf:2f:d5:0b:7b:5f:58:33:e5:a2:ed:7d:
4b:64:af:83:f0:47:e2:6f:7e:c3:aa:13:08:6c:91:
13:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:86:E6:5B:1D:F4:D9:38:D2:19:A4:AF:66:68:4D:0D:CD:9E:03:2F
X509v3 Authority Key Identifier:
keyid:52:62:D3:F2:7C:C0:5B:E5:92:4B:B7:BD:89:0F:7E:6D:EF:FB:49:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmLT8nzAW-WSS7e9iQ9-be_7SX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5974d6-6c67-442b-993a-7ae5987bee62/1/UmLT8nzAW-WSS7e9iQ9-be_7SX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5974d6-6c67-442b-993a-7ae5987bee62/1/UmLT8nzAW-WSS7e9iQ9-be_7SX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:98:cc:31:a8:4e:cb:57:c6:00:82:bb:30:30:87:77:3d:ce:
f1:98:a1:4c:d3:81:8f:03:35:48:1f:ce:ee:03:f4:5d:27:90:
a2:4d:9e:0b:50:77:23:c9:3f:b4:6d:bb:61:a3:60:42:55:12:
68:37:e0:aa:16:f0:ac:e0:83:86:04:23:90:df:4b:c4:0e:fb:
eb:f5:64:bb:db:16:0c:99:43:c2:ee:28:bf:d1:a2:f2:9e:3a:
22:f0:61:a0:f9:dd:3d:11:25:1b:2b:53:fe:1c:cc:e6:d1:2f:
67:9a:b4:bd:69:95:5f:05:79:da:d4:81:d8:ce:0b:85:5a:40:
c8:42:ac:e7:53:f2:57:54:0d:c6:92:7f:77:22:e4:93:4c:19:
dc:5c:0c:0b:29:bd:33:14:f1:18:01:f9:37:70:db:fb:ea:26:
89:c4:36:d9:d6:94:82:9c:71:f5:d3:b2:50:12:a4:df:77:7a:
c3:4b:5d:50:98:26:3c:df:e1:19:c5:30:b4:af:bf:b3:ac:72:
f7:0a:df:b4:3b:49:76:e2:9f:3b:64:a0:9f:9d:6c:37:4e:b1:
f1:c2:e1:d0:07:b5:c2:5a:9c:e8:18:50:6f:b7:a2:eb:05:d4:
96:56:d7:22:94:0e:35:71:8f:6e:6f:30:6a:02:15:bf:0b:0f:
7e:8f:7f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:25:42 2025 by rpki-client