Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
File: uji5p2P2XAJ6o92th8GI2nikvZc.mft (raw, json)
Hash identifier: CZaX9q5I/xerhjrNlITNsZHMFhj6EhElnJ6by1CdyVs=
Subject key identifier: 86:91:22:92:37:27:A1:75:96:9D:7D:4F:69:4C:28:11:38:37:97:B4
Authority key identifier: BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97
Certificate issuer: /CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97
Certificate serial: 01988B7D30E60BB0BA252F4D1CE0250B7557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
Manifest number: 1620
Signing time: Fri 08 Aug 2025 21:01:34 +0000
Manifest this update: Fri 08 Aug 2025 21:01:34 +0000
Manifest next update: Sat 09 Aug 2025 21:01:34 +0000
Files and hashes: 1: uji5p2P2XAJ6o92th8GI2nikvZc.crl (hash: KXZfFQAbkOyyD+3uSGcnVBb5AJ+eoes/mxFYscBe7JE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:30:e6:0b:b0:ba:25:2f:4d:1c:e0:25:0b:75:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97
Validity
Not Before: Aug 8 21:01:34 2025 GMT
Not After : Aug 9 21:01:34 2025 GMT
Subject: CN=869122923727a175969d7d4f694c2811383797b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b9:05:f9:58:f6:f3:4f:a2:c7:08:82:72:07:
f1:52:a8:c9:95:71:3d:10:50:1b:99:fd:f7:86:01:
40:bd:95:f5:2e:f1:92:dc:92:f1:eb:2f:36:31:7b:
75:82:20:7c:dd:e3:10:a7:66:c2:0b:27:cb:13:52:
81:62:49:62:f5:bb:88:e2:c3:bb:4b:e9:30:83:c2:
10:2b:d4:44:85:1b:d1:fa:59:4f:1e:64:a6:7a:e6:
dc:f4:6d:ae:88:0c:48:11:38:81:bb:5d:b9:fa:4f:
e4:bc:8a:ec:7d:5c:7d:ca:7a:92:51:cc:6d:05:29:
44:a9:1d:d6:5d:37:8b:f2:a5:db:2c:2f:4f:e2:f2:
71:5b:36:37:c5:5d:75:1a:54:73:5a:aa:08:36:81:
9f:9e:a9:95:c5:76:cc:7c:d8:b6:98:93:6d:95:4a:
3e:03:63:7c:48:84:7c:96:68:fa:75:8a:fe:e4:85:
63:90:f0:41:11:02:eb:89:9b:08:85:52:8f:1a:28:
aa:10:5b:44:93:13:de:e8:fd:b8:4a:a4:11:3c:0e:
fc:9c:89:ed:1d:76:2d:1e:79:83:40:b8:9d:f2:8c:
59:31:43:9e:e2:e5:2c:42:a5:e6:e1:b2:95:0f:19:
38:a1:e2:69:15:69:05:61:0d:51:88:8d:db:91:02:
d6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:91:22:92:37:27:A1:75:96:9D:7D:4F:69:4C:28:11:38:37:97:B4
X509v3 Authority Key Identifier:
keyid:BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:66:11:53:ad:d5:2f:68:7c:b2:0c:fa:39:b6:d0:20:43:59:
c2:13:13:e0:80:29:6f:13:36:e2:bc:56:c6:65:74:72:b5:51:
71:dc:9c:e7:46:48:f3:23:07:99:80:c6:5f:91:f3:4f:1e:f1:
de:0d:7e:b0:59:ec:59:2e:a2:65:d4:c2:51:cf:94:ba:3a:41:
80:2a:e4:13:77:2a:67:55:a0:a5:07:58:da:a3:8f:c6:16:a3:
30:35:da:ba:f8:94:5f:c0:65:55:22:49:83:df:79:a4:ae:4b:
e2:e1:4c:34:ca:1a:0d:f0:e5:85:c7:a2:fd:33:4a:78:e5:46:
3a:20:d2:6b:f2:48:34:2d:4f:68:d1:cd:b0:59:e2:6b:2e:a1:
6c:73:39:be:05:66:9d:6c:e1:a4:9e:53:1e:b5:95:8e:ae:d1:
6f:39:43:f7:18:d0:ab:b8:3d:97:da:14:24:05:13:e0:08:71:
4d:54:42:74:d3:52:e9:28:43:b7:99:c1:fc:fd:30:f7:81:47:
a9:86:fb:37:2c:f1:d5:c2:e6:85:01:6f:b9:8d:34:1b:33:ca:
76:20:40:3d:b1:4a:e3:22:d8:f0:d9:66:c5:8d:8f:f7:96:fc:
81:26:14:dd:00:54:cc:e2:17:69:0b:90:51:82:e8:be:ce:77:
33:67:ba:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:42 2025 by rpki-client