Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.mft
File: UIJpb7xB2QYWimDOCUlJAiz2Keg.mft (raw, json)
Hash identifier: I1vWzSAcWSpczT8MnmP5O9ln0L/616fzfX7RI1RToBw=
Subject key identifier: 4F:AF:40:3C:C0:56:80:D3:3C:00:5C:90:38:39:2D:3F:49:6E:73:60
Authority key identifier: 50:82:69:6F:BC:41:D9:06:16:8A:60:CE:09:49:49:02:2C:F6:29:E8
Certificate issuer: /CN=5082696fbc41d906168a60ce094949022cf629e8
Certificate serial: 01987374476DAAA0B2E68E9DD895FA9D39C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UIJpb7xB2QYWimDOCUlJAiz2Keg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.mft
Manifest number: 039E
Signing time: Mon 04 Aug 2025 05:00:56 +0000
Manifest this update: Mon 04 Aug 2025 05:00:56 +0000
Manifest next update: Tue 05 Aug 2025 05:00:56 +0000
Files and hashes: 1: UIJpb7xB2QYWimDOCUlJAiz2Keg.crl (hash: m1yp1OGpdpKDS3gOT/8dMAlZMGznX1nUNoYOTJxhJDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UIJpb7xB2QYWimDOCUlJAiz2Keg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:47:6d:aa:a0:b2:e6:8e:9d:d8:95:fa:9d:39:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5082696fbc41d906168a60ce094949022cf629e8
Validity
Not Before: Aug 4 05:00:56 2025 GMT
Not After : Aug 5 05:00:56 2025 GMT
Subject: CN=4faf403cc05680d33c005c9038392d3f496e7360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e6:83:73:db:a5:92:be:01:e6:93:de:5c:f7:
60:1f:c2:bb:bc:ad:a3:2b:98:3e:1d:0c:02:21:8b:
78:05:ec:0a:23:b2:ea:d3:1c:ad:23:a1:c4:ec:35:
1e:f7:e9:9f:c8:67:ac:b9:42:f4:f1:93:4f:a4:d6:
03:f3:52:79:93:90:eb:8b:fa:99:9f:58:af:c5:58:
bd:cd:b4:c0:b7:bb:6f:38:11:d6:0f:d9:d2:de:9b:
8e:6f:b2:b1:b3:d7:22:fc:3c:e5:4c:28:73:25:5f:
eb:44:40:35:50:06:98:3d:d5:8e:a5:bb:dd:a6:b5:
cd:1f:3c:a5:cb:8b:08:57:8d:45:a5:dc:6f:cc:3d:
08:10:69:20:95:fa:0b:88:fa:bd:05:89:22:04:15:
75:c5:f3:a4:a1:36:1a:ef:f1:36:1a:53:2b:9d:60:
a8:2a:69:0d:88:cf:d7:df:6a:17:f9:ea:60:25:47:
68:23:e8:ad:41:7c:69:17:fd:a2:68:7f:d1:d9:fa:
4e:49:73:26:43:bf:65:d4:c5:08:3b:28:28:cd:fc:
e3:39:29:d1:06:db:d3:12:a5:fc:35:f7:8e:43:d0:
dc:f2:bf:7a:2a:07:89:b9:79:0a:8d:50:2f:8e:45:
3b:97:21:ab:64:7a:41:b5:6e:46:bb:77:57:66:3f:
3d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AF:40:3C:C0:56:80:D3:3C:00:5C:90:38:39:2D:3F:49:6E:73:60
X509v3 Authority Key Identifier:
keyid:50:82:69:6F:BC:41:D9:06:16:8A:60:CE:09:49:49:02:2C:F6:29:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UIJpb7xB2QYWimDOCUlJAiz2Keg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:4c:d6:13:98:8a:a2:e0:07:ae:64:14:05:57:6f:bc:85:fa:
c0:69:be:ed:69:f9:5e:db:cc:ba:7e:2a:0a:19:7d:91:22:91:
22:a1:16:ff:c7:58:f7:86:15:82:fc:6b:a5:1c:8f:09:9a:56:
e3:cb:ca:ad:3f:d1:85:30:81:40:ce:69:d9:56:f3:02:a0:59:
27:88:29:0d:25:fc:91:81:e2:d7:e4:82:18:39:7c:fb:a9:34:
84:2d:97:1d:bd:2e:cc:5d:27:b7:19:56:1a:ff:bd:7e:5c:b4:
a3:cf:c7:88:9c:eb:d8:49:f6:63:59:c2:4f:57:69:05:97:23:
1f:d7:40:69:8c:4d:ef:34:e1:61:cf:47:f9:f5:65:ca:67:a7:
21:5a:39:2c:fa:93:d9:f2:e0:da:51:27:78:12:cd:c9:80:2e:
22:81:9d:f9:e8:b7:7d:6e:b0:9f:a7:2d:20:14:94:b4:38:7b:
b0:6b:e4:cc:b3:0b:5d:25:ec:de:3f:30:1f:e9:53:4e:f7:04:
66:10:ca:5a:60:9c:0c:bc:c4:90:95:ca:f0:30:a8:a7:0f:c7:
66:ae:96:e9:a0:92:0f:14:55:e9:af:52:07:13:4d:70:a1:4a:
b3:74:1d:88:30:9c:70:29:79:65:89:00:f0:a9:85:bb:55:a0:
f3:a9:01:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:00:29 2025 by rpki-client