
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
File: uo1nmL3QsriAXUOzRV92c5uUbx0.mft (raw, json)
Hash identifier: nP+1S5WkeTYe2q7bVbiIezRGHSPFPdxHNUJWiSDYVvc=
Subject key identifier: 45:4E:6B:48:E4:19:BA:8D:F6:E0:2C:F8:D9:53:20:15:C8:1C:8E:A5
Authority key identifier: BA:8D:67:98:BD:D0:B2:B8:80:5D:43:B3:45:5F:76:73:9B:94:6F:1D
Certificate issuer: /CN=ba8d6798bdd0b2b8805d43b3455f76739b946f1d
Certificate serial: 019873E34295C58C8B1735171CDA6F19ED6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
Manifest number: 15A6
Signing time: Mon 04 Aug 2025 07:02:10 +0000
Manifest this update: Mon 04 Aug 2025 07:02:10 +0000
Manifest next update: Tue 05 Aug 2025 07:02:10 +0000
Files and hashes: 1: uo1nmL3QsriAXUOzRV92c5uUbx0.crl (hash: x+g171KvcvZvVLc3dAkqHWD+uXllG/yQ2grdV00z9lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:42:95:c5:8c:8b:17:35:17:1c:da:6f:19:ed:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8d6798bdd0b2b8805d43b3455f76739b946f1d
Validity
Not Before: Aug 4 07:02:10 2025 GMT
Not After : Aug 5 07:02:10 2025 GMT
Subject: CN=454e6b48e419ba8df6e02cf8d9532015c81c8ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:63:27:29:ec:d4:f9:df:00:dd:cd:85:a2:ae:
e3:67:fd:31:bc:37:7a:48:a9:4e:93:0b:10:36:12:
26:2f:1a:53:55:8c:13:67:b3:d1:74:58:89:05:ac:
1c:8b:3d:7e:b0:30:e7:86:4d:6d:a7:ba:98:d9:67:
2b:36:63:72:f6:bc:c0:62:c8:a3:7e:66:b5:74:62:
39:18:aa:0d:26:db:7a:6d:dc:26:0c:f1:d8:73:2a:
ca:3f:53:45:29:68:94:21:45:b0:cd:ec:ca:28:29:
19:c8:2f:84:98:4c:39:ff:67:57:33:61:d2:85:7e:
fa:f0:b3:eb:a3:e3:5c:f9:d2:86:ce:e2:ae:5d:08:
77:9f:7a:48:93:1b:de:73:6f:85:ea:35:0b:6e:d4:
e3:da:a3:ca:ba:77:21:f3:90:8f:78:fd:2c:a1:8e:
9a:a8:08:c1:be:52:9d:4a:4b:d2:48:0b:1a:e2:80:
0a:56:ae:69:f0:78:7a:a6:75:3d:1f:17:50:2c:fb:
68:f7:03:ad:3c:08:4b:aa:56:b6:07:62:b4:e1:7c:
e5:57:22:5a:bc:ca:10:c4:b7:d7:35:1c:3c:66:4e:
eb:07:0a:ee:c1:86:22:0f:79:bb:87:c5:8b:43:8e:
61:66:f1:e2:7a:f7:0c:04:cc:f3:70:15:96:4f:4c:
7c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4E:6B:48:E4:19:BA:8D:F6:E0:2C:F8:D9:53:20:15:C8:1C:8E:A5
X509v3 Authority Key Identifier:
keyid:BA:8D:67:98:BD:D0:B2:B8:80:5D:43:B3:45:5F:76:73:9B:94:6F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:5d:6f:8c:c4:ec:7f:89:24:77:fd:ee:4a:b7:23:11:fb:62:
1c:17:05:d6:70:50:9c:d0:99:b9:e3:6a:99:e1:52:a8:11:47:
b8:30:c5:62:9f:d8:4f:d7:d1:60:65:9d:60:d4:b5:9c:a2:61:
2e:b9:bf:37:b8:e6:88:c1:4c:43:af:51:82:12:2d:77:fc:b5:
c7:a5:be:d7:09:d5:2a:6d:92:76:d0:ad:17:90:45:f1:49:ff:
b0:2b:80:56:fd:97:0e:c7:e3:46:78:cd:21:c5:a9:dc:19:c4:
c2:57:1b:1b:6e:c6:f4:67:31:f6:c2:d2:eb:0d:a7:01:b3:c7:
56:44:bf:8e:6c:e9:e4:7b:7e:98:08:c5:6c:57:a5:b1:07:cf:
67:c8:7a:9e:d5:e3:20:ed:6a:53:8d:47:67:62:ae:8c:88:86:
4f:a6:e3:67:24:ef:a1:54:e6:a6:c5:e2:6e:22:ab:4f:bb:cd:
cd:f6:f3:1c:21:f0:65:52:61:09:09:51:aa:d2:f6:b0:76:13:
09:b7:4e:80:ee:c8:9d:69:ab:98:71:ac:63:4c:82:fd:b9:bf:
43:21:f7:27:ef:a1:2f:b4:ac:da:0d:d9:72:78:9b:b8:eb:a4:
9d:ee:6f:8d:5f:f7:fb:71:58:a2:86:17:b4:01:f2:0f:69:1d:
ce:1c:63:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:25 2025 by rpki-client