Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
File: UOaW5uJbSSu34HyzKbtDVLERpoE.mft (raw, json)
Hash identifier: kFuVTTtw47MyuyjzzDiVanNNVj+gmrT92sDfShhrgZo=
Subject key identifier: BB:A7:07:0C:39:A5:63:2E:87:13:47:08:88:FD:60:04:DC:57:B7:B8
Authority key identifier: 50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
Certificate issuer: /CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Certificate serial: 01988B7C535D44692142F31FEB2D171E1D8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
Manifest number: 0903
Signing time: Fri 08 Aug 2025 21:00:37 +0000
Manifest this update: Fri 08 Aug 2025 21:00:37 +0000
Manifest next update: Sat 09 Aug 2025 21:00:37 +0000
Files and hashes: 1: UOaW5uJbSSu34HyzKbtDVLERpoE.crl (hash: K0inPA2aZa7EUMFw+d6FmLrnui3sk5Z8QYgjV17TFQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:53:5d:44:69:21:42:f3:1f:eb:2d:17:1e:1d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Validity
Not Before: Aug 8 21:00:37 2025 GMT
Not After : Aug 9 21:00:37 2025 GMT
Subject: CN=bba7070c39a5632e8713470888fd6004dc57b7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:58:ba:29:41:ef:ce:5d:d9:46:92:88:92:73:
22:5c:d7:51:5a:58:a2:98:de:01:6a:b9:48:da:d1:
36:de:8a:8b:fd:3c:b5:53:68:de:5d:20:85:02:85:
1c:f5:8f:f3:2c:a1:29:17:43:67:4e:74:9f:b7:4a:
87:88:47:9d:53:08:0d:40:eb:a4:b7:f1:b4:7b:7a:
42:c0:75:fd:8d:0c:46:c7:67:66:98:9d:b7:57:f9:
d1:0c:5c:55:11:b2:8a:a3:e6:83:b5:a2:13:ea:96:
f8:c9:f9:5b:91:61:30:78:d9:58:b2:ea:d5:e8:c2:
99:67:d5:a9:b3:4c:ba:27:78:48:fe:c0:53:bc:63:
0c:36:64:ea:e6:75:38:05:b3:82:e5:b7:4e:b0:d1:
de:71:c1:c4:48:9e:1e:37:0e:b8:62:f2:df:a0:7c:
f7:bf:8b:97:80:9f:00:29:71:b6:d8:55:2a:f9:58:
e0:4b:f3:a1:45:a0:a7:c8:bc:1e:15:12:d6:d9:d5:
51:5d:7d:a5:3d:ea:63:b7:20:56:db:7a:b6:50:a7:
5b:59:24:b4:63:84:6e:10:1f:6a:f2:e0:0e:3a:35:
6e:3f:89:c4:85:25:6a:b5:07:95:17:a2:85:83:ba:
39:a7:25:25:40:7d:cd:cb:17:6b:d5:eb:6b:a0:0b:
d1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A7:07:0C:39:A5:63:2E:87:13:47:08:88:FD:60:04:DC:57:B7:B8
X509v3 Authority Key Identifier:
keyid:50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:03:0d:52:82:bb:90:ea:02:31:9c:0c:86:fe:a7:99:67:dd:
e3:0a:5c:8a:9e:67:ec:c3:3f:ae:c8:de:71:22:f4:2d:75:43:
9f:6b:7b:b8:ac:55:25:ac:6c:14:c8:79:d9:b1:87:d8:e1:b5:
ff:24:3a:de:67:ba:58:12:14:27:6f:99:40:6b:75:f2:01:ff:
b7:a8:02:a2:11:d1:d5:66:2b:19:c4:82:da:30:68:32:83:79:
25:44:f4:bd:90:af:61:27:27:90:08:9d:93:bd:65:1d:cb:f9:
d2:db:50:4f:12:ae:0d:f1:df:6d:7e:9c:ce:66:a4:5f:58:f1:
c8:2a:a8:8d:d3:ad:76:80:ea:8a:df:d3:20:9a:59:5e:43:68:
da:84:b3:d5:88:49:ee:72:8c:76:fc:d4:12:2b:dd:ae:a7:cf:
f5:df:f4:4a:6f:ed:b0:5d:16:25:92:0c:10:1e:59:12:b5:b2:
a6:85:c3:0e:fe:ad:e7:12:d9:4f:c2:3f:58:ba:06:7d:22:a3:
fd:41:5c:74:64:95:80:f1:42:81:2a:04:e4:eb:3a:3c:d0:33:
64:79:2f:ba:1f:81:63:72:da:6e:12:a8:43:f1:92:c6:13:87:
dd:01:3b:35:c2:2f:5d:8f:40:c1:c0:1a:12:71:29:f2:68:02:
85:78:e5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:25 2025 by rpki-client