Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft
File: uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft (raw, json)
Hash identifier: 7c67W4pxNC+HH/prxYYuIos0VB954gjXSV/aVzR+xJA=
Subject key identifier: 81:F6:9F:B8:DA:8C:37:76:1B:1B:93:1C:91:70:7B:54:33:3B:E8:51
Authority key identifier: B9:6A:ED:42:6F:B1:A0:63:25:A2:63:79:21:A4:B5:AB:98:A1:A5:94
Certificate issuer: /CN=b96aed426fb1a06325a2637921a4b5ab98a1a594
Certificate serial: 0197C681F4CA37B97CA7908AA4CF553D5A58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uWrtQm-xoGMlomN5IaS1q5ihpZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft
Manifest number: 0C85
Signing time: Tue 01 Jul 2025 15:01:34 +0000
Manifest this update: Tue 01 Jul 2025 15:01:34 +0000
Manifest next update: Wed 02 Jul 2025 15:01:34 +0000
Files and hashes: 1: uWrtQm-xoGMlomN5IaS1q5ihpZQ.crl (hash: OTesBntJHEUlO2b+09XrRGZQ60homPPgYU3ycCvIbZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uWrtQm-xoGMlomN5IaS1q5ihpZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 15:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:81:f4:ca:37:b9:7c:a7:90:8a:a4:cf:55:3d:5a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b96aed426fb1a06325a2637921a4b5ab98a1a594
Validity
Not Before: Jul 1 15:01:34 2025 GMT
Not After : Jul 2 15:01:34 2025 GMT
Subject: CN=81f69fb8da8c37761b1b931c91707b54333be851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c8:a4:95:e2:82:9b:91:8a:73:03:30:7c:6b:
b8:ad:39:a8:46:38:d9:0b:f9:4d:ac:ed:26:2d:29:
fc:60:1d:a7:82:73:54:dc:f2:86:1c:11:d3:ae:aa:
21:ef:32:c2:32:24:c9:14:a3:b8:e8:16:5d:b1:98:
26:87:50:a2:b1:97:89:76:9c:c3:3c:36:51:13:b9:
cc:58:b1:b3:c9:33:33:fe:09:97:b9:6b:0b:8e:ea:
5d:2d:19:b4:c8:be:40:c3:03:8e:e9:4a:1c:09:8f:
6a:9c:74:94:db:41:ce:49:d6:92:6f:ad:97:92:c4:
31:71:52:03:e4:aa:a1:f1:ea:98:0e:00:a8:22:c3:
f6:2f:d4:88:ec:b6:f1:4c:4a:b5:71:9e:ca:59:c1:
02:d2:d7:cd:ac:98:6a:40:f0:d9:70:8f:36:94:78:
9a:41:23:ea:87:ed:0a:3a:72:0c:71:82:5f:9a:f5:
e3:00:fb:27:3b:7b:c1:cc:ef:d8:f8:d6:ca:93:9e:
f2:ae:4d:bc:2a:1b:1f:b0:e5:1b:69:f3:20:41:60:
9e:9f:0b:fa:11:e7:52:0c:80:29:ab:80:f5:98:02:
6b:c4:fa:ac:61:51:6f:87:b6:b4:44:f9:60:f0:04:
a1:50:da:41:f9:db:46:a3:78:bb:d0:10:d0:1b:36:
30:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F6:9F:B8:DA:8C:37:76:1B:1B:93:1C:91:70:7B:54:33:3B:E8:51
X509v3 Authority Key Identifier:
keyid:B9:6A:ED:42:6F:B1:A0:63:25:A2:63:79:21:A4:B5:AB:98:A1:A5:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWrtQm-xoGMlomN5IaS1q5ihpZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:2d:88:6a:ac:6d:a1:f5:ca:2a:0b:34:38:a0:67:41:35:cf:
c8:c6:eb:53:da:7a:56:da:d8:ad:b2:75:ba:a8:38:ea:30:9a:
0b:3c:0a:0b:96:ba:0c:76:48:de:57:7a:8c:9f:8e:59:9a:d1:
32:a1:e9:bc:fe:8b:8b:69:dd:34:e3:9a:2c:ae:a6:2d:9e:47:
be:70:29:ea:98:ef:46:25:d0:8e:14:34:e7:7d:34:d8:d0:2f:
b9:1a:25:90:d9:d8:d0:a4:7a:ee:2b:8d:b8:43:d8:6c:db:2b:
b0:ca:e6:5b:d4:7c:bc:0b:e0:91:59:ef:1f:b7:24:fa:d5:08:
cf:6d:a2:7b:a7:c0:2d:2c:d7:e0:1c:b5:23:65:fb:6c:39:0b:
d8:7a:fb:a1:fb:98:60:eb:17:49:ac:e2:bc:42:09:44:f6:04:
3d:d3:fa:47:6b:c1:1f:31:68:6d:b4:3d:bd:23:65:08:c9:83:
85:97:22:8e:0d:03:62:07:fb:12:36:4b:05:73:25:61:7d:1c:
89:5d:9e:2f:9c:e9:9c:76:00:46:2c:34:06:78:68:e8:05:8f:
e3:8f:27:04:f5:7f:f8:0f:66:42:3e:42:71:ff:e9:f0:49:f9:
64:69:8b:a7:e9:72:27:20:08:fb:30:1a:98:9e:84:d0:3e:55:
27:5f:53:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:39:58 2025 by rpki-client