Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft
File: UoUm3npC8eCAkWhA7r85A4uJPRY.mft (raw, json)
Hash identifier: oG+Z8aNAMQR0OXAIDuvsKjomBV0AA0yYt0ri/gwyFAc=
Subject key identifier: F5:36:D1:24:14:D0:57:80:6C:D5:E5:A1:08:2D:6D:E4:EF:C0:28:9E
Authority key identifier: 52:85:26:DE:7A:42:F1:E0:80:91:68:40:EE:BF:39:03:8B:89:3D:16
Certificate issuer: /CN=528526de7a42f1e080916840eebf39038b893d16
Certificate serial: 0197B6A1111068D8D0044591706A11100650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoUm3npC8eCAkWhA7r85A4uJPRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft
Manifest number: 093A
Signing time: Sat 28 Jun 2025 13:01:38 +0000
Manifest this update: Sat 28 Jun 2025 13:01:38 +0000
Manifest next update: Sun 29 Jun 2025 13:01:38 +0000
Files and hashes: 1: UoUm3npC8eCAkWhA7r85A4uJPRY.crl (hash: ETTDzFrC/cZf5hfVV8XPYL+Y0cpIjTMoau9xgy9opGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UoUm3npC8eCAkWhA7r85A4uJPRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:11:10:68:d8:d0:04:45:91:70:6a:11:10:06:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528526de7a42f1e080916840eebf39038b893d16
Validity
Not Before: Jun 28 13:01:38 2025 GMT
Not After : Jun 29 13:01:38 2025 GMT
Subject: CN=f536d12414d057806cd5e5a1082d6de4efc0289e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6b:b8:05:d3:15:f9:da:6a:ed:5e:56:a5:07:
52:03:fe:bf:07:15:96:f3:ae:91:0a:f8:d2:65:f7:
60:6c:41:78:66:2e:48:b3:41:4c:e0:e2:2b:ea:02:
29:e9:9b:df:72:46:ff:e5:1d:c2:3c:a4:6d:2f:f5:
87:09:09:1d:3a:88:26:e4:5d:12:df:d4:94:80:d1:
a6:ee:07:9d:53:64:46:d9:4d:c5:3b:cd:05:f0:d9:
32:05:97:70:a7:6e:d1:37:7e:40:c1:43:0e:30:7c:
8e:14:6b:a2:f3:e0:18:3f:f3:e5:33:f8:b1:67:18:
7c:75:95:39:2e:20:3e:06:9d:d5:79:91:0e:69:b7:
59:f3:76:ed:ba:f3:20:1c:35:67:ba:d7:1b:d1:10:
5f:99:75:84:dc:50:00:7a:28:87:b7:ed:bb:9f:fc:
70:e7:48:bc:e5:c7:c0:da:7c:26:5c:6d:30:83:2b:
b2:d3:5e:28:5b:21:50:f1:8a:38:1a:60:85:6d:7d:
7a:43:d9:2a:43:d4:7a:02:e7:b4:04:df:ca:c3:2e:
e1:94:16:b8:77:b4:02:b6:22:1b:9f:c0:88:b9:7c:
d9:9d:8f:af:77:5e:a5:ce:55:e8:42:a2:bb:d5:fc:
67:73:c2:ae:20:56:71:1c:b0:95:7c:20:9e:7a:3b:
74:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:36:D1:24:14:D0:57:80:6C:D5:E5:A1:08:2D:6D:E4:EF:C0:28:9E
X509v3 Authority Key Identifier:
keyid:52:85:26:DE:7A:42:F1:E0:80:91:68:40:EE:BF:39:03:8B:89:3D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoUm3npC8eCAkWhA7r85A4uJPRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:23:3e:b8:d1:67:a4:e3:2b:c8:f0:7c:07:98:29:0e:17:2a:
2b:c1:4b:7c:d3:de:7c:9f:d9:f1:20:ca:73:51:11:e3:50:08:
de:dd:22:27:20:01:d4:68:5c:f2:bd:b9:1d:88:25:72:42:23:
2f:e9:d9:8e:71:3d:5d:87:bf:c7:54:75:cf:fa:bf:97:82:87:
bf:fa:c7:e2:7b:45:8a:ec:94:db:8a:26:25:cc:71:99:25:59:
f5:7d:98:dd:17:4a:c3:95:9b:a5:23:20:a3:a1:15:42:68:52:
9c:d5:17:eb:89:4a:ba:34:65:14:80:01:ab:f1:ad:a2:fc:76:
15:6e:50:f8:cb:20:7a:ae:3e:88:d3:bc:f8:8e:17:5c:11:b1:
d7:aa:1a:2a:e9:e2:ea:ce:66:ac:62:b3:85:7e:d5:45:40:3a:
38:77:f5:3a:5a:1a:65:3c:72:85:9c:fa:eb:50:7c:8c:45:d4:
2e:40:d3:3a:24:3f:be:aa:da:95:20:39:49:07:45:25:1f:ff:
be:ac:5e:5b:66:70:1b:dc:75:67:67:54:b2:1d:d3:58:81:a5:
ff:19:c6:6d:d6:2a:2b:0b:66:1b:ac:a8:a5:59:48:26:f2:c0:
a0:0d:4f:95:b2:a9:04:a7:5d:b4:64:7d:9c:c2:2f:79:e5:b7:
ec:3f:6f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:35 2025 by rpki-client