
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
File: 12UrrkezA7urED_3ukWgqQYMPcw.mft (raw, json)
Hash identifier: 5byhl47A7pAESQl3YCX+FO8OZhz7v93+EY5jOTkELSQ=
Subject key identifier: BC:2E:04:54:04:20:6C:42:4D:82:E4:CA:D2:D9:8D:AA:B4:AD:FB:14
Authority key identifier: D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC
Certificate issuer: /CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc
Certificate serial: 019874F4DDFF3DF092F38FC9BB81FA98A8D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
Manifest number: 15A8
Signing time: Mon 04 Aug 2025 12:01:01 +0000
Manifest this update: Mon 04 Aug 2025 12:01:01 +0000
Manifest next update: Tue 05 Aug 2025 12:01:01 +0000
Files and hashes: 1: 12UrrkezA7urED_3ukWgqQYMPcw.crl (hash: NCvKUBDSZ4WWoZYM0UdaQt7fctu6qWeRJA4iGX5r/eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:dd:ff:3d:f0:92:f3:8f:c9:bb:81:fa:98:a8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc
Validity
Not Before: Aug 4 12:01:01 2025 GMT
Not After : Aug 5 12:01:01 2025 GMT
Subject: CN=bc2e045404206c424d82e4cad2d98daab4adfb14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:75:5a:ef:8e:94:25:66:97:c5:a5:e0:32:30:
4c:20:4b:4a:48:2c:3c:9d:56:a1:ac:1a:31:c6:22:
f5:e0:9e:93:cf:2c:af:4d:91:e6:c8:53:be:f5:5e:
8b:a9:44:46:86:55:df:4d:23:f4:ec:85:80:89:3b:
27:79:5d:cf:ff:e5:f7:02:f7:68:26:32:62:27:58:
85:73:95:ad:de:c5:48:2a:aa:0f:cb:9c:c9:50:6d:
9c:c6:a2:c0:63:6c:e6:bb:9b:77:03:2c:a1:9f:0c:
1e:88:7b:13:e8:80:a9:63:52:e9:a0:aa:62:37:2a:
6d:b3:08:19:5e:54:bf:e4:ae:4e:77:1f:f9:ca:b0:
01:30:88:d6:33:19:89:03:30:a5:c9:40:4b:fb:d6:
70:7a:dc:e3:08:32:bf:07:71:5a:8f:a7:52:b5:57:
23:7e:6b:4b:c7:62:4b:96:4b:d0:88:ce:d4:9c:da:
e3:17:c0:61:a0:ce:96:ca:b7:34:c4:cc:bd:00:5f:
ba:b3:9f:d5:35:07:bd:54:8d:82:1f:56:b2:50:d4:
6b:d7:89:db:ec:87:c6:e2:a0:50:a6:7c:4d:b1:24:
12:58:40:6b:aa:71:1f:29:50:50:85:a4:90:68:45:
68:30:31:8b:b1:39:11:6c:b2:3b:77:5f:c6:aa:87:
91:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2E:04:54:04:20:6C:42:4D:82:E4:CA:D2:D9:8D:AA:B4:AD:FB:14
X509v3 Authority Key Identifier:
keyid:D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:0d:d8:ec:1f:8b:4d:c3:9e:f4:7a:00:6c:3b:27:c8:95:51:
cb:8a:be:f6:58:16:75:b1:0c:d1:f3:4e:7c:b2:9e:95:60:87:
7e:64:46:0b:80:23:e7:ae:45:6b:b3:d6:67:8b:2b:37:16:b8:
c5:99:c3:59:a4:c6:72:aa:3e:22:07:10:8e:9a:f5:76:bf:15:
26:d9:62:95:d8:da:6f:80:b3:ef:85:5b:45:9f:ba:5e:92:b4:
64:92:0b:ae:f3:2b:6e:96:7b:49:73:49:6c:e1:df:a4:71:4b:
ad:4f:54:66:bf:b2:09:b0:12:fc:08:90:24:52:9e:63:4d:33:
fa:28:eb:22:f5:b1:48:58:0a:74:81:64:82:c1:19:cf:5f:a4:
51:65:fa:0e:81:f1:ae:63:9a:41:82:a3:d3:31:48:3c:df:68:
28:8d:89:ba:98:d0:d9:01:da:0a:c3:ed:42:9a:ca:f7:ec:95:
45:75:a0:26:57:24:bd:f2:f2:fa:73:0a:a1:cd:6e:3c:51:d1:
16:ed:c9:c2:9d:5a:57:5e:d8:b6:e0:42:b6:57:06:c1:17:d6:
3d:8a:74:07:39:95:fb:a5:75:db:c3:39:17:55:04:7c:63:27:
41:20:a2:3d:e1:0d:ac:cd:bb:0d:ef:6a:59:16:66:2e:30:a2:
22:fb:8b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:11:57 2025 by rpki-client