Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.mft
File: uzYogf_jYlMUAGCLYyi7Et-hYIE.mft (raw, json)
Hash identifier: Mz5obT8j62zIIphXA7jTVAPd1pO/tC/5KKaqSJSjJ+E=
Subject key identifier: 70:81:9B:C0:CA:17:29:C9:A6:70:3E:FC:85:C5:12:77:83:B0:C6:E6
Authority key identifier: BB:36:28:81:FF:E3:62:53:14:00:60:8B:63:28:BB:12:DF:A1:60:81
Certificate issuer: /CN=bb362881ffe362531400608b6328bb12dfa16081
Certificate serial: 0197B6A1BC1C05EDDA71FF4AED0C6C18E2FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uzYogf_jYlMUAGCLYyi7Et-hYIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.mft
Manifest number: 0CBA
Signing time: Sat 28 Jun 2025 13:02:22 +0000
Manifest this update: Sat 28 Jun 2025 13:02:22 +0000
Manifest next update: Sun 29 Jun 2025 13:02:22 +0000
Files and hashes: 1: uzYogf_jYlMUAGCLYyi7Et-hYIE.crl (hash: qkcvEp81sUUKDb/EXveCR5JyMtmFfSVBX9WbB12X9A8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uzYogf_jYlMUAGCLYyi7Et-hYIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:bc:1c:05:ed:da:71:ff:4a:ed:0c:6c:18:e2:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb362881ffe362531400608b6328bb12dfa16081
Validity
Not Before: Jun 28 13:02:22 2025 GMT
Not After : Jun 29 13:02:22 2025 GMT
Subject: CN=70819bc0ca1729c9a6703efc85c5127783b0c6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d4:98:00:67:32:a8:7f:dd:c8:d7:fe:a3:9e:
cb:39:bf:48:2d:9d:39:a2:96:2d:ac:f3:c3:1c:21:
85:c0:82:ca:df:99:df:f4:ac:22:50:4d:5a:85:e1:
2f:ba:6b:f0:13:22:40:12:a6:a8:c8:3b:b3:6b:ce:
f0:b3:5b:19:7a:56:91:e9:80:e4:43:3e:e6:94:94:
cf:29:57:fd:9b:28:b0:59:b4:d6:b2:20:01:94:11:
4b:62:44:e9:fb:44:cd:41:35:85:bd:22:25:9d:85:
dd:f6:18:2f:80:7d:85:71:22:9c:44:0d:c2:b1:55:
f9:f5:22:b9:af:7d:a9:89:fc:1a:27:79:42:64:b2:
51:64:3a:60:0f:33:bc:4c:e5:1f:4d:dd:af:df:41:
9d:82:4c:53:4d:3e:5d:e0:5e:84:87:bc:e7:04:2b:
f2:85:4b:5c:74:b9:85:89:85:71:d8:af:46:d3:d6:
87:1a:af:55:57:3c:7f:e3:6d:f1:e7:28:bf:95:b9:
e3:47:4d:93:9f:bc:1b:45:a5:50:ba:44:a6:e6:ba:
78:8b:f2:14:ba:55:f9:b0:67:73:16:e5:e9:c6:74:
30:99:e4:ad:36:65:4b:cc:f7:da:8c:ba:7e:77:3f:
ce:44:74:a9:03:50:d2:b7:92:ef:86:7a:21:90:e3:
68:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:81:9B:C0:CA:17:29:C9:A6:70:3E:FC:85:C5:12:77:83:B0:C6:E6
X509v3 Authority Key Identifier:
keyid:BB:36:28:81:FF:E3:62:53:14:00:60:8B:63:28:BB:12:DF:A1:60:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uzYogf_jYlMUAGCLYyi7Et-hYIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:bf:51:65:d8:df:9d:50:c5:d5:f9:76:56:29:d7:10:73:c2:
cf:8e:3e:6f:a6:b8:19:1e:53:ef:48:20:c4:17:4d:71:23:6b:
b7:70:f1:b8:21:31:2d:66:ef:12:3d:13:a4:23:5d:02:53:65:
73:60:78:ce:de:a2:2b:8f:f6:13:54:ac:38:58:f1:30:a3:cc:
c8:ee:08:74:93:6d:e1:b3:12:31:9e:43:be:28:bd:f7:2d:48:
0c:a8:26:96:cd:50:2e:9a:b0:44:df:09:10:2c:e8:f9:c9:e6:
16:e5:44:99:32:25:00:67:39:a8:b2:7f:cc:fc:33:65:2c:b2:
33:e9:08:93:5e:e4:b8:68:2f:25:11:a9:eb:08:7b:3d:f7:c6:
2f:ea:66:e3:9c:a1:68:82:1b:06:3b:b0:60:cd:e7:f7:0b:63:
5d:a4:88:a2:d9:49:88:d8:ea:ce:86:d3:97:d4:a8:50:b2:b3:
3a:c9:75:69:b4:6a:c8:4b:67:9a:7f:5e:67:26:cc:7c:d1:f8:
9e:18:a8:f9:90:a5:5b:60:09:df:b1:fc:3e:c0:08:b9:f2:27:
a0:87:6a:e7:de:79:c1:7f:e5:6e:fb:f7:b7:76:7f:05:ee:82:
2a:9f:f5:b5:be:d0:56:bb:43:7d:e8:a3:67:bc:a0:c5:f3:51:
dc:a6:26:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:44 2025 by rpki-client