Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/98ed86-fe7d-4011-afd3-0f2573eca2e4/1/UgX1htgmO7BtZAUPj0hMFOgDxLI.mft
File: UgX1htgmO7BtZAUPj0hMFOgDxLI.mft (raw, json)
Hash identifier: nXz3ecOdm9vfReuH/qQ8EE/XVR+VmbKPZ+qruOcXtsY=
Subject key identifier: 8E:B7:57:D5:CE:87:21:A0:E3:44:B8:A7:8F:E1:40:31:BC:39:A6:04
Authority key identifier: 52:05:F5:86:D8:26:3B:B0:6D:64:05:0F:8F:48:4C:14:E8:03:C4:B2
Certificate issuer: /CN=5205f586d8263bb06d64050f8f484c14e803c4b2
Certificate serial: 0198A04E652B4268FA35DB16F61AE95066F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgX1htgmO7BtZAUPj0hMFOgDxLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/98ed86-fe7d-4011-afd3-0f2573eca2e4/1/UgX1htgmO7BtZAUPj0hMFOgDxLI.mft
Manifest number: 0C6C
Signing time: Tue 12 Aug 2025 22:02:28 +0000
Manifest this update: Tue 12 Aug 2025 22:02:28 +0000
Manifest next update: Wed 13 Aug 2025 22:02:28 +0000
Files and hashes: 1: UgX1htgmO7BtZAUPj0hMFOgDxLI.crl (hash: rh+msIV1CkKzYbphpqvTrd/E3215Ua8LI8P8S2bXR9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/98ed86-fe7d-4011-afd3-0f2573eca2e4/1/UgX1htgmO7BtZAUPj0hMFOgDxLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/98ed86-fe7d-4011-afd3-0f2573eca2e4/1/UgX1htgmO7BtZAUPj0hMFOgDxLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UgX1htgmO7BtZAUPj0hMFOgDxLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:65:2b:42:68:fa:35:db:16:f6:1a:e9:50:66:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5205f586d8263bb06d64050f8f484c14e803c4b2
Validity
Not Before: Aug 12 22:02:28 2025 GMT
Not After : Aug 13 22:02:28 2025 GMT
Subject: CN=8eb757d5ce8721a0e344b8a78fe14031bc39a604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ba:7e:5b:3c:a0:e3:6e:cb:40:35:8e:94:b4:
bc:e1:eb:92:8b:f4:f3:77:8a:1f:21:50:47:b4:fb:
2b:bd:bc:fc:e2:84:d0:e8:6a:21:da:48:12:e4:0d:
74:10:4b:75:21:a2:ce:41:cf:13:53:57:9d:30:61:
15:6d:d2:12:8d:f0:b6:04:2e:55:e0:25:97:47:a0:
bd:4f:62:60:d1:e7:f4:23:8f:92:7f:11:53:aa:35:
b5:3c:37:29:e8:88:e3:51:86:37:f0:4e:e3:66:d7:
8a:c7:ca:a9:61:4a:e6:e8:be:43:78:ec:3f:12:d6:
9b:3b:52:94:f9:ce:6d:d5:fb:11:28:3a:05:1d:33:
8b:7f:d1:84:39:1f:ce:f4:3c:fe:32:66:cc:ac:4d:
eb:f7:61:36:5f:68:a1:5c:40:9e:1d:f0:4c:11:53:
1c:fb:78:56:70:35:a7:a7:47:19:3e:bf:6b:a9:78:
d0:0f:bb:1e:47:79:4b:2e:91:f4:a6:c3:71:c5:fe:
8a:57:5c:be:a9:0b:ad:e9:bf:22:65:8c:09:82:bf:
1e:49:34:c9:1d:90:87:67:09:b7:ac:cb:8f:ce:a1:
dd:86:2e:a6:14:3a:62:9c:03:f7:0f:e3:1f:18:22:
69:f9:73:7a:8b:f7:00:a2:08:9d:f7:d3:0a:a4:e5:
16:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B7:57:D5:CE:87:21:A0:E3:44:B8:A7:8F:E1:40:31:BC:39:A6:04
X509v3 Authority Key Identifier:
keyid:52:05:F5:86:D8:26:3B:B0:6D:64:05:0F:8F:48:4C:14:E8:03:C4:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgX1htgmO7BtZAUPj0hMFOgDxLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/98ed86-fe7d-4011-afd3-0f2573eca2e4/1/UgX1htgmO7BtZAUPj0hMFOgDxLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/98ed86-fe7d-4011-afd3-0f2573eca2e4/1/UgX1htgmO7BtZAUPj0hMFOgDxLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:86:75:e1:fe:ff:e6:8e:99:76:c5:30:09:90:dc:e0:be:c4:
50:a7:a2:d3:17:33:51:59:45:40:e4:aa:0f:54:85:ed:dd:56:
b0:52:13:15:a1:bc:a4:d0:d0:f3:b8:f7:0f:35:bc:df:e2:d9:
d3:0d:4f:0f:6e:05:b5:3e:2b:83:71:ca:3a:cf:c0:5e:02:3a:
0f:93:74:5a:d9:39:04:45:f0:52:58:eb:36:86:71:51:df:ce:
6f:9b:3f:a2:0b:0c:68:6f:ec:0a:bc:3c:44:f5:82:3a:c1:23:
b7:8d:e4:62:7d:dc:f8:8b:63:6a:d7:d2:ef:37:b4:2b:26:91:
28:2d:8f:9e:23:e4:c1:72:fa:6b:13:59:dc:3f:71:1a:e1:10:
3d:d5:ca:8c:89:07:54:ca:be:c6:dc:92:5b:86:29:d9:f8:31:
06:ee:a8:a2:a4:e8:c0:bf:84:b6:46:f0:57:22:41:8c:ce:82:
41:67:0b:ae:fe:05:60:33:d7:b5:5c:69:31:fd:28:fd:95:ac:
84:21:be:2a:6e:42:3d:4f:b9:56:8b:e5:0d:95:ad:72:18:ef:
67:4d:2c:fd:49:0f:57:32:8d:71:83:9f:e6:75:25:55:88:c4:
1a:3c:69:eb:ae:4e:5a:19:e9:bc:05:c5:3e:14:71:64:4a:15:
c4:36:42:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:50 2025 by rpki-client