Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
File: u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft (raw, json)
Hash identifier: QYfv7mQ2WTc3zdnssxhohHXJOdhrib3ZGGj1uNJxJKE=
Subject key identifier: 81:75:BB:9F:BC:C2:6A:1C:80:2F:BC:26:E5:00:5A:76:8C:D9:B1:31
Authority key identifier: BB:4B:19:38:66:8B:27:B0:52:C6:83:D1:E2:60:C0:CD:3D:56:87:5B
Certificate issuer: /CN=bb4b1938668b27b052c683d1e260c0cd3d56875b
Certificate serial: 019874194CA3E510B8D50FFC58B69A71910A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
Manifest number: 039E
Signing time: Mon 04 Aug 2025 08:01:11 +0000
Manifest this update: Mon 04 Aug 2025 08:01:11 +0000
Manifest next update: Tue 05 Aug 2025 08:01:11 +0000
Files and hashes: 1: u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl (hash: kJUKkwZKXA3wQYgsukrh9RwfpJa7Pvc1MAkUjxFpEOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:4c:a3:e5:10:b8:d5:0f:fc:58:b6:9a:71:91:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4b1938668b27b052c683d1e260c0cd3d56875b
Validity
Not Before: Aug 4 08:01:11 2025 GMT
Not After : Aug 5 08:01:11 2025 GMT
Subject: CN=8175bb9fbcc26a1c802fbc26e5005a768cd9b131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:25:02:45:fb:18:93:bb:14:32:f1:d3:3a:ff:
b2:55:26:a2:da:09:02:95:b2:72:64:9b:5d:ab:64:
3d:8b:6c:ac:96:d5:95:f3:98:0b:71:3b:96:c5:37:
a2:50:b9:52:d6:b0:a6:df:12:ef:f2:74:bf:35:81:
a1:bb:b9:ce:5b:b1:ce:39:ea:42:e6:0e:1e:6b:6b:
3c:eb:21:ae:02:bc:b4:77:08:01:31:08:84:29:73:
04:92:d5:21:f9:e7:13:58:02:66:e2:14:b8:a3:70:
ce:61:d1:6e:90:d5:cb:a6:7d:8f:9b:26:c0:a2:83:
4b:88:e3:55:f8:2a:ef:5b:54:31:7b:37:8a:f1:a7:
2d:ec:b7:aa:73:b3:3f:99:75:71:9f:1c:81:23:3b:
63:89:65:bf:4f:c6:ae:81:f1:49:1b:94:71:2e:fd:
90:2d:ae:e5:3b:ac:2a:b5:e3:d3:a8:df:a2:d7:6f:
19:dc:fd:b1:1f:45:68:b9:16:e5:9d:9c:93:9b:97:
8a:07:d3:0f:da:99:88:d8:c9:63:02:68:ac:ca:83:
d5:5b:62:a1:3f:dd:d1:9a:46:18:45:9a:e4:f4:ff:
40:6a:61:be:d4:3d:b2:78:1b:b2:76:ac:4c:e5:d8:
b9:14:ce:11:49:9d:d7:51:1c:8d:52:20:fd:3d:a1:
01:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:75:BB:9F:BC:C2:6A:1C:80:2F:BC:26:E5:00:5A:76:8C:D9:B1:31
X509v3 Authority Key Identifier:
keyid:BB:4B:19:38:66:8B:27:B0:52:C6:83:D1:E2:60:C0:CD:3D:56:87:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:59:4e:dd:69:fa:c2:1c:aa:6f:f2:7a:dc:ed:19:9e:10:79:
40:ec:96:b0:7b:60:75:cc:91:75:af:42:b4:92:fd:ec:79:36:
64:5b:2f:66:57:90:da:2a:95:5f:38:05:7b:0a:36:1e:94:9b:
1d:5e:fb:50:85:d5:5f:5a:5f:d4:8a:b9:a7:09:a9:ce:38:21:
05:1e:51:2c:74:02:18:6b:23:c5:a7:80:b9:28:c7:72:9b:55:
ae:ec:91:2c:33:e0:70:76:45:f1:72:d7:b7:2f:63:8d:f2:ae:
4f:96:c8:89:c7:29:41:dc:9e:95:7c:ef:d2:57:e2:00:7b:56:
c4:11:65:d5:91:d4:70:ba:88:66:ec:b9:c4:6e:26:d0:36:db:
76:51:bf:e8:0a:66:04:96:a1:c2:56:2f:de:d1:bd:44:6a:89:
7d:fd:05:04:27:ef:66:bc:ed:ea:09:84:d3:19:bf:a5:51:d7:
b7:1a:35:61:49:de:43:1e:bf:2f:b1:54:f4:d5:df:59:2f:11:
c8:1d:42:af:79:dc:a8:16:39:04:0b:94:f8:4b:d2:e3:2a:54:
79:c4:33:07:e8:a8:ff:20:66:cc:14:7a:46:f3:27:10:fc:b5:
e0:32:c1:31:1d:ff:bf:3e:4e:d6:66:19:31:14:71:82:ff:0c:
0d:8e:cd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:34 2025 by rpki-client