Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.mft
File: uH9ej-619ec7CXtmZX7tjbl0pA4.mft (raw, json)
Hash identifier: nUmOqRtn6FCWq4R9STCe1/OfRnAM3wsTpson+HiM4Pg=
Subject key identifier: 66:FC:F8:B7:4F:F3:43:AE:13:56:CF:9A:E4:28:5D:1A:71:13:33:54
Authority key identifier: B8:7F:5E:8F:EE:B5:F5:E7:3B:09:7B:66:65:7E:ED:8D:B9:74:A4:0E
Certificate issuer: /CN=b87f5e8feeb5f5e73b097b66657eed8db974a40e
Certificate serial: 019896A523FAD6770583AFE2383D5E7074DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uH9ej-619ec7CXtmZX7tjbl0pA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.mft
Manifest number: 0E06
Signing time: Mon 11 Aug 2025 01:01:01 +0000
Manifest this update: Mon 11 Aug 2025 01:01:01 +0000
Manifest next update: Tue 12 Aug 2025 01:01:01 +0000
Files and hashes: 1: uH9ej-619ec7CXtmZX7tjbl0pA4.crl (hash: prPxp2tbhmhbjSsTE6H9mCQFqg2SpaoJq1RNmYzy7TM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uH9ej-619ec7CXtmZX7tjbl0pA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:23:fa:d6:77:05:83:af:e2:38:3d:5e:70:74:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87f5e8feeb5f5e73b097b66657eed8db974a40e
Validity
Not Before: Aug 11 01:01:01 2025 GMT
Not After : Aug 12 01:01:01 2025 GMT
Subject: CN=66fcf8b74ff343ae1356cf9ae4285d1a71133354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1b:7e:5a:f7:e7:cb:32:7c:fa:b5:31:02:75:
2a:8b:de:93:5e:32:33:95:61:60:7a:51:27:dd:58:
c8:a1:89:d5:2c:84:8e:41:83:04:27:72:61:e0:3d:
94:d5:22:ed:11:be:a4:d7:ca:12:c7:6f:1d:5d:10:
c1:bc:69:3f:26:8e:90:2d:71:39:02:52:aa:ec:50:
3f:7c:80:98:67:4d:4f:9c:bc:6b:23:ae:44:97:ee:
53:6e:1a:0e:c4:8d:4a:6e:73:48:e0:df:1f:33:e6:
49:81:a3:15:7f:c7:3f:88:56:4d:ea:e9:db:54:00:
e8:97:17:76:3b:de:7e:b9:c8:df:cd:fa:6e:f3:1d:
ad:26:78:54:b3:f8:47:a5:c5:8a:4f:ac:a4:33:a8:
2f:aa:ee:e7:0f:ef:1d:4e:cc:68:1a:36:68:3b:9c:
97:48:8d:8e:0b:65:70:77:eb:a8:07:28:dc:03:97:
09:26:9c:10:81:1b:ad:63:d9:8c:1a:94:1b:1e:e7:
9a:c3:5e:d3:55:4a:03:3f:4b:23:5d:04:f0:d2:a9:
fa:90:78:ec:32:f2:8e:06:93:4e:01:67:53:fb:47:
20:4c:e6:f3:e2:12:80:0a:88:9f:1b:39:90:a9:55:
69:fa:dd:3c:88:81:17:87:b0:a5:d7:8b:eb:ee:65:
61:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FC:F8:B7:4F:F3:43:AE:13:56:CF:9A:E4:28:5D:1A:71:13:33:54
X509v3 Authority Key Identifier:
keyid:B8:7F:5E:8F:EE:B5:F5:E7:3B:09:7B:66:65:7E:ED:8D:B9:74:A4:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uH9ej-619ec7CXtmZX7tjbl0pA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:bc:d2:82:a4:68:c2:99:0f:f6:bd:97:0d:b1:5f:cc:c5:fb:
f5:c3:27:ed:e5:28:03:b2:c8:3b:2a:27:40:25:7f:9d:e4:41:
22:40:e5:92:b6:87:14:9d:5d:e2:6a:3b:a6:7e:5f:2d:c3:88:
1d:5c:f1:59:39:88:78:fb:96:d8:34:5e:75:b4:c7:9c:8b:2d:
5a:3b:ff:b2:91:93:ed:5f:d3:c4:ad:30:b9:06:c1:15:ac:85:
d2:2a:e7:6e:3c:7b:f1:81:55:d1:b0:9e:32:c3:e6:8d:8b:6a:
4e:5b:99:4c:df:ac:6e:85:89:29:e1:bb:d4:4e:99:df:2f:c1:
11:bb:e1:e5:2e:17:dc:ac:e0:83:b1:a3:b8:a1:1c:96:81:d4:
f3:55:54:d5:66:37:75:0a:68:0f:d7:20:b3:d2:65:8c:fd:5f:
18:6a:17:a5:15:48:3f:07:28:90:f6:11:0b:75:fa:4e:e0:e4:
1e:5c:3e:d3:9c:1d:d0:3f:43:b7:1f:b8:95:5a:dd:be:3b:89:
be:32:1f:ba:87:84:91:25:f7:99:c0:ee:e3:69:1a:2c:3f:21:
a7:8e:fc:1c:a8:5e:5b:18:dc:e3:f5:35:11:9e:9e:66:8c:0f:
04:c5:47:04:ff:05:92:cc:02:36:60:55:22:68:0d:23:5b:07:
6a:e5:e1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:26:51 2025 by rpki-client