Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
File: UnksdxTtV0Vtc1XkoEubqL7VfkI.mft (raw, json)
Hash identifier: 2n06HZH81EzfGFfjPA7Tq2IYzfkZ8PZP754rzQ1noG0=
Subject key identifier: 9A:B0:D2:66:B5:0E:8A:74:12:FC:20:4C:A3:AF:61:0F:E0:02:1B:87
Authority key identifier: 52:79:2C:77:14:ED:57:45:6D:73:55:E4:A0:4B:9B:A8:BE:D5:7E:42
Certificate issuer: /CN=52792c7714ed57456d7355e4a04b9ba8bed57e42
Certificate serial: 0198A0BAAE1C4BE56A15A7C96A594D2F3325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
Manifest number: 06DC
Signing time: Wed 13 Aug 2025 00:00:45 +0000
Manifest this update: Wed 13 Aug 2025 00:00:45 +0000
Manifest next update: Thu 14 Aug 2025 00:00:45 +0000
Files and hashes: 1: UnksdxTtV0Vtc1XkoEubqL7VfkI.crl (hash: hJzeQF9JT2zYbtkrC1PiTrWNxqLKhBGpUhJAG2wMjW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:ba:ae:1c:4b:e5:6a:15:a7:c9:6a:59:4d:2f:33:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52792c7714ed57456d7355e4a04b9ba8bed57e42
Validity
Not Before: Aug 13 00:00:45 2025 GMT
Not After : Aug 14 00:00:45 2025 GMT
Subject: CN=9ab0d266b50e8a7412fc204ca3af610fe0021b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:0c:94:4a:ab:43:69:eb:86:3a:dc:10:ec:91:
80:4d:88:03:95:32:2a:97:c9:80:4f:ab:ba:cc:0c:
d1:27:7f:6f:d3:70:46:46:cd:14:3c:5e:60:95:df:
4f:c7:f4:b3:a2:dc:73:19:d5:11:1c:2f:08:a1:9a:
ff:6b:cd:47:37:0d:82:52:c5:f4:4a:9d:70:7b:ea:
3d:8f:43:fc:c2:3f:9d:cc:8f:6a:00:dd:3e:a3:e1:
bd:45:df:01:7f:82:6b:41:42:77:7e:fa:5e:1a:3a:
7b:92:e2:7b:93:d4:92:b8:ef:d2:c0:b8:f6:16:5f:
9b:08:05:1c:31:b2:64:e5:8b:59:0a:ab:c1:d2:de:
54:2d:e6:9f:92:1f:43:58:cb:6b:fe:ae:59:07:6f:
7a:cb:00:44:f8:a7:59:69:b9:4c:d2:09:38:76:c8:
90:8f:a8:b0:50:34:52:5b:07:29:78:c2:c3:66:56:
3b:4b:a6:b8:cc:f6:9e:a4:7d:32:bc:a2:c1:d8:25:
ea:63:e1:05:01:a2:70:4f:a2:2e:8f:d5:1e:40:30:
ed:89:83:93:b4:a2:43:0d:c7:0c:97:31:22:0b:d3:
b2:b5:25:cf:b1:45:c8:86:3e:c8:f9:1c:1b:33:0f:
73:b9:56:71:06:ce:d3:62:89:36:d7:36:ae:ed:7e:
0b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B0:D2:66:B5:0E:8A:74:12:FC:20:4C:A3:AF:61:0F:E0:02:1B:87
X509v3 Authority Key Identifier:
keyid:52:79:2C:77:14:ED:57:45:6D:73:55:E4:A0:4B:9B:A8:BE:D5:7E:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:e2:90:40:3b:5c:a0:86:fb:82:42:90:b5:e7:11:1b:de:e7:
ae:89:67:d7:8f:6e:8d:66:9c:4d:45:44:69:e9:25:d2:75:c0:
03:f4:13:5a:78:4f:73:94:a5:62:e7:08:d3:16:e0:e5:be:cc:
f3:6e:11:9a:1e:4c:ea:5b:54:c5:bb:08:3a:4c:4d:19:c7:13:
b0:5f:3e:a4:8f:a0:76:f3:96:c9:7e:bf:a2:38:72:f0:68:c7:
00:53:aa:29:87:26:57:d0:33:1c:67:bf:04:f1:4f:53:43:81:
a3:ce:0d:e2:bd:b3:c4:8c:ad:39:f0:f3:99:52:d9:43:5d:1d:
6f:8e:a5:01:86:71:a5:12:f1:63:ad:37:6a:e5:59:6a:16:04:
f0:6e:05:ae:77:b3:90:30:74:8e:54:ef:0b:73:5a:38:07:c7:
d5:72:b9:10:ac:06:79:50:75:42:45:82:9e:4d:84:da:39:07:
ba:35:31:f7:58:3f:5c:ff:53:35:c0:53:6b:7a:9d:fd:e1:fc:
2f:7d:c1:e6:87:58:0e:71:4a:c7:0e:25:27:49:9b:5d:41:51:
5e:7c:60:52:6b:34:37:7c:c1:aa:65:08:a9:ae:14:32:3e:6f:
b0:20:9e:5f:d0:96:03:8c:e6:52:60:02:df:d9:76:41:9c:59:
4c:55:d7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:28:39 2025 by rpki-client