Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
File: UfKdGEvMUP5lTd70AV3hfSRv0qM.mft (raw, json)
Hash identifier: KxlX5I3K2iVCSOr4jRcu3FjN47EfF8gqOjq0sHxojC8=
Subject key identifier: 1B:C2:42:8B:65:0D:A7:E6:E9:81:E8:7D:FF:11:94:EF:81:0A:D7:68
Authority key identifier: 51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3
Certificate issuer: /CN=51f29d184bcc50fe654ddef4015de17d246fd2a3
Certificate serial: 01987374B376E5F08D4ABE258E39067B7CDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
Manifest number: 0B
Signing time: Mon 04 Aug 2025 05:01:24 +0000
Manifest this update: Mon 04 Aug 2025 05:01:24 +0000
Manifest next update: Tue 05 Aug 2025 05:01:24 +0000
Files and hashes: 1: UfKdGEvMUP5lTd70AV3hfSRv0qM.crl (hash: N7SMotzZiBIdUeiC+K7UXVZt2jBY8dIado+o6rX+hrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:b3:76:e5:f0:8d:4a:be:25:8e:39:06:7b:7c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51f29d184bcc50fe654ddef4015de17d246fd2a3
Validity
Not Before: Aug 4 05:01:24 2025 GMT
Not After : Aug 5 05:01:24 2025 GMT
Subject: CN=1bc2428b650da7e6e981e87dff1194ef810ad768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b6:77:69:e8:29:6a:c9:b5:27:b1:5d:2d:63:
07:f6:61:6e:13:61:fe:32:2b:29:3b:eb:a3:5f:cc:
c9:79:be:ea:f3:7b:a8:45:04:23:14:cb:1c:fb:03:
9e:96:48:59:98:0d:36:d0:fe:e9:44:b3:90:db:e9:
47:4b:96:43:b7:b9:40:12:f2:cc:2b:35:53:f0:cf:
eb:f5:d7:41:40:7a:95:7e:49:75:07:60:8e:d1:6e:
da:03:20:e4:b6:ca:b5:f3:e2:c9:fb:12:86:3b:d9:
fc:2d:e5:d3:36:46:af:75:19:ed:70:df:c9:3c:ef:
51:41:da:f3:08:7c:04:13:8d:dc:4d:5e:e2:28:01:
d1:cc:9f:ec:b7:10:4b:c8:f4:06:52:6c:8a:cb:a6:
26:00:39:c0:4f:e1:fe:08:2e:db:a6:8d:28:56:f5:
be:06:a3:c1:95:dd:f2:89:0e:03:c4:0d:28:b8:d2:
96:c0:c0:75:2c:f9:69:a9:e4:79:74:e0:ce:78:4f:
d3:1b:81:9f:59:78:5c:61:13:4e:ba:d9:53:54:25:
7b:17:00:8a:78:6f:32:2f:9e:65:00:b3:bb:0e:57:
25:4c:94:d7:c6:4b:d5:4d:28:ce:c4:31:be:bd:1c:
ea:fb:46:e2:6b:fe:40:89:1a:91:a2:57:72:3a:9c:
6e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C2:42:8B:65:0D:A7:E6:E9:81:E8:7D:FF:11:94:EF:81:0A:D7:68
X509v3 Authority Key Identifier:
keyid:51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c7:75:83:af:00:f9:95:e1:ec:01:4c:41:65:c5:e2:e1:89:
85:1e:0b:df:44:5f:c1:35:e9:84:b0:b2:d6:25:f2:07:e2:ee:
eb:4b:02:0f:ba:8d:38:87:b7:40:38:c6:6e:34:ab:e6:73:e3:
8a:51:c2:dc:2e:04:70:66:34:01:5a:2d:51:85:75:25:a1:e2:
1b:29:8a:e6:56:f8:8e:1a:0c:a0:c9:ba:a8:cd:a5:7f:90:2a:
f9:77:c3:0a:4d:dd:ff:ea:54:39:16:5a:4e:ef:ac:15:de:03:
ca:5c:1a:bf:6c:48:15:98:6b:c2:4f:f3:ad:6d:03:15:64:46:
66:75:ac:34:c8:42:27:f0:e3:12:08:3e:d3:ca:8c:0c:64:c9:
29:82:0d:44:5f:86:d8:e1:49:40:a4:a1:2e:5f:65:13:f3:38:
63:ed:a8:56:01:94:b0:7c:48:48:f8:5e:cc:de:17:82:28:a4:
fd:e4:e1:b7:2a:89:35:9e:7f:05:47:a8:84:18:ab:f7:12:69:
f6:51:93:ea:9b:5a:61:8d:1c:33:b0:c0:8e:27:bb:f6:4a:9c:
a2:52:eb:cf:0d:90:be:3d:10:cb:37:2a:7d:0a:00:e4:56:c8:
95:ad:81:ff:28:31:31:ae:da:85:0c:32:2d:2f:b4:4c:ed:9c:
b7:cc:32:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:36 2025 by rpki-client