Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.mft
File: uglQnQRuXLar5boZqxurpUPTffg.mft (raw, json)
Hash identifier: cxLrzy+sj4uv6dnxRlYcvvsKxN+2NRsjOyYD5JyqI+A=
Subject key identifier: EA:C2:FD:DB:08:A5:53:D7:F2:B4:A9:99:C9:FE:72:86:5D:64:C0:52
Authority key identifier: BA:09:50:9D:04:6E:5C:B6:AB:E5:BA:19:AB:1B:AB:A5:43:D3:7D:F8
Certificate issuer: /CN=ba09509d046e5cb6abe5ba19ab1baba543d37df8
Certificate serial: 019873E31C9FF8362E64620AB26AAD999CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uglQnQRuXLar5boZqxurpUPTffg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.mft
Manifest number: 099C
Signing time: Mon 04 Aug 2025 07:02:00 +0000
Manifest this update: Mon 04 Aug 2025 07:02:00 +0000
Manifest next update: Tue 05 Aug 2025 07:02:00 +0000
Files and hashes: 1: uglQnQRuXLar5boZqxurpUPTffg.crl (hash: fL826RM+Dg9e8c0VBq8zSsJDxK5HEfBnx/FtMCyBXes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uglQnQRuXLar5boZqxurpUPTffg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:1c:9f:f8:36:2e:64:62:0a:b2:6a:ad:99:9c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba09509d046e5cb6abe5ba19ab1baba543d37df8
Validity
Not Before: Aug 4 07:02:00 2025 GMT
Not After : Aug 5 07:02:00 2025 GMT
Subject: CN=eac2fddb08a553d7f2b4a999c9fe72865d64c052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c4:35:f8:d8:1a:1e:2d:69:2d:aa:cf:77:12:
fa:4f:7b:fc:17:be:68:53:27:69:8e:fe:89:94:44:
ba:27:60:bc:1b:11:62:d3:7a:fd:bc:cd:13:e4:7a:
66:01:8f:e7:0e:16:f5:20:dd:6f:47:37:60:29:7c:
f0:b9:74:51:12:ea:ea:47:b2:c6:7e:b4:cf:e2:9b:
86:df:a5:2f:3f:e9:68:5c:8a:07:a0:5f:04:45:93:
91:0f:c9:ae:d2:a7:fd:f2:e4:ed:c8:93:65:a6:ee:
b5:56:16:54:e5:f5:5b:04:50:f7:54:a7:22:6b:1b:
41:dc:3f:43:a4:37:52:6e:93:90:20:7c:fa:39:97:
fc:d8:80:0c:11:df:f0:ed:66:82:5a:3f:8d:59:0c:
1c:6b:d5:8d:9e:61:bd:bd:c7:a5:f4:9a:39:74:f8:
a8:e6:93:73:ab:17:0c:33:16:35:b0:f0:e8:c1:3c:
13:83:8b:c1:49:7a:f4:c4:6e:ee:2a:cf:0b:ec:e2:
6d:90:cb:ae:37:2e:a9:0c:7a:c0:47:90:84:1a:77:
9d:ac:8e:b9:39:69:79:f9:d1:d7:51:83:b4:c2:68:
40:8a:ad:1f:55:ea:d4:0d:4a:ed:6a:4d:91:79:5b:
79:4b:35:38:5e:89:8e:c8:fd:24:2d:8d:c9:cc:4d:
34:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C2:FD:DB:08:A5:53:D7:F2:B4:A9:99:C9:FE:72:86:5D:64:C0:52
X509v3 Authority Key Identifier:
keyid:BA:09:50:9D:04:6E:5C:B6:AB:E5:BA:19:AB:1B:AB:A5:43:D3:7D:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uglQnQRuXLar5boZqxurpUPTffg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:5c:9a:70:a3:b3:d5:b9:2f:1c:62:a3:dc:ad:9e:41:ee:34:
8b:d2:be:c1:7b:42:0f:fc:66:72:ca:57:b4:fd:ba:48:88:c5:
42:fe:9f:6b:6d:46:07:9b:34:82:31:37:16:f0:7c:c0:3e:e3:
d6:9d:4f:d5:d0:ad:1c:10:68:28:e6:3d:e4:0a:ee:3a:c9:7a:
5c:77:f5:7a:dc:dc:8c:96:f8:42:da:99:dc:0e:2e:8f:53:53:
be:18:78:3d:64:8c:86:7b:0e:71:ea:06:e8:2e:7d:3d:e5:c4:
3e:ce:b2:c6:cf:87:b4:a6:2f:02:30:73:a4:8b:e5:82:a1:3a:
d9:03:59:7d:ee:22:52:42:21:c2:0b:bb:5d:2c:82:fb:3c:a3:
57:8d:a7:a4:31:d3:31:f1:ec:50:f2:cb:17:da:75:57:74:e3:
6f:d4:db:07:98:ff:63:03:96:12:dd:2c:7d:94:39:3f:ea:38:
77:f3:11:0c:dc:9b:69:ce:8b:c0:a7:cb:81:a8:1c:3e:19:34:
74:73:5d:d0:5d:ec:84:9d:7e:62:16:f0:0d:3c:ef:0b:d9:e6:
d3:20:70:2f:ac:3f:97:dd:2e:15:1b:3f:6b:9e:07:06:43:11:
3b:0d:a0:33:8c:f4:c3:b7:9d:31:80:30:69:03:d1:23:39:f2:
60:2e:19:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:01 2025 by rpki-client