Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
File: 1-uafCinvjYwi2dbs3jowfYlNXBk.mft (raw, json)
Hash identifier: 56A2qHHUDAi1z/jchot+yqd0FS0IdA1lGrOkcKnhh4Y=
Subject key identifier: EC:D6:4F:E9:D5:3F:BA:8F:F5:A5:49:58:1D:65:F7:54:80:D3:DA:3D
Authority key identifier: FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19
Certificate issuer: /CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19
Certificate serial: 01987306A7104EE1DC58451E655BC8B700FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
Manifest number: 06C5
Signing time: Mon 04 Aug 2025 03:01:12 +0000
Manifest this update: Mon 04 Aug 2025 03:01:12 +0000
Manifest next update: Tue 05 Aug 2025 03:01:12 +0000
Files and hashes: 1: 1-uafCinvjYwi2dbs3jowfYlNXBk.crl (hash: 8wNPCm4SVtjthhUF+YMmbwa92Il1h7Cr4fJswlWjzGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:a7:10:4e:e1:dc:58:45:1e:65:5b:c8:b7:00:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19
Validity
Not Before: Aug 4 03:01:12 2025 GMT
Not After : Aug 5 03:01:12 2025 GMT
Subject: CN=ecd64fe9d53fba8ff5a549581d65f75480d3da3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:26:2e:df:52:a9:88:02:5c:67:bb:64:b6:64:
b7:51:1f:d9:44:60:b3:30:41:a7:65:f5:11:5f:02:
99:bf:9a:10:4a:f5:d9:5b:d2:7c:8c:4d:71:12:e2:
32:70:e5:00:44:c0:55:0e:44:02:d4:d2:98:a5:ea:
1b:56:ff:2c:bc:01:81:ea:49:9a:76:e7:6c:fc:73:
54:f0:65:12:74:ff:0e:67:df:fd:df:c1:72:40:41:
5f:3b:2e:dc:e2:9c:6d:2d:b9:6a:68:4c:05:18:16:
9c:f3:f2:d8:a2:3d:3d:8f:08:f9:cb:99:9c:af:df:
85:07:e6:6b:f0:8b:be:b7:20:70:6a:ee:c4:bb:63:
29:bd:60:20:67:b7:15:52:fd:21:ab:b8:c3:be:b1:
9f:df:4b:0b:18:3f:67:27:b3:ed:aa:c4:7d:d0:a2:
df:96:22:ea:c2:7a:35:3c:a7:5f:11:d4:c3:5d:d4:
00:57:b8:a7:b3:35:0d:96:8d:0c:d7:ca:06:b8:a6:
df:19:a4:9d:54:73:68:19:0f:c9:97:d7:b8:f4:61:
bd:b6:5b:fb:8b:b0:55:55:4d:6e:03:bf:eb:ec:33:
69:cc:77:9e:1d:52:20:49:fa:c1:d3:b5:5a:07:69:
67:03:98:f8:c5:03:e3:a1:2b:ae:49:cc:72:b6:6e:
1a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D6:4F:E9:D5:3F:BA:8F:F5:A5:49:58:1D:65:F7:54:80:D3:DA:3D
X509v3 Authority Key Identifier:
keyid:FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:8f:3d:61:50:b2:c5:e6:73:48:60:89:e9:6e:31:b4:be:12:
bb:83:46:54:f9:54:20:62:3f:4b:8e:09:cf:7d:5f:0d:6a:3a:
50:19:0b:e1:82:b3:bb:7e:be:40:8d:d5:bf:ac:81:e1:bc:0f:
c1:03:b1:f6:4f:47:ec:1f:58:f6:77:91:ab:0b:2e:77:b8:b9:
d3:ee:3d:2b:ac:e5:45:3c:75:95:f8:6a:2b:bf:1f:d7:31:be:
03:be:2f:33:33:1f:34:01:bf:8d:b4:38:88:ea:87:59:11:ed:
23:80:fe:a2:8a:d2:12:46:5f:be:a0:ee:e6:11:d1:b4:18:0b:
30:15:df:2f:2f:83:35:f0:b5:4a:86:bc:2e:b4:bf:c9:8e:04:
cb:83:a8:7e:ce:53:bd:c5:a2:3a:d3:02:c9:15:1c:fc:5e:dc:
79:8a:a7:d9:97:8d:eb:91:7d:db:45:96:85:53:10:04:0c:b3:
ed:02:aa:ca:85:b4:73:56:04:51:58:bf:9b:2e:1c:de:fe:23:
33:60:bd:08:03:2a:c1:74:f7:df:62:d1:dd:c2:3b:15:67:de:
63:55:ed:7b:70:83:a8:bf:c9:40:16:f0:b8:89:54:dc:b5:7b:
35:8c:35:4f:32:c0:63:f7:e9:51:e6:dd:c9:6e:54:b5:6c:f6:
cc:ba:91:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:18 2025 by rpki-client