Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
File: UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft (raw, json)
Hash identifier: QMNrd/XXha4PFF7390HeW5xmQxnM7JS/djmVPG4X+/U=
Subject key identifier: 28:AF:E7:22:24:D7:A5:DA:C1:DE:6B:10:C3:B0:8A:FD:17:50:E7:24
Authority key identifier: 50:1B:52:02:A0:ED:46:F6:41:1E:1E:DA:7C:7B:59:DD:8C:C6:CD:87
Certificate issuer: /CN=501b5202a0ed46f6411e1eda7c7b59dd8cc6cd87
Certificate serial: 0198D5BBEC1D4EEDDF5F19031DB5D7869FA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
Manifest number: 139C
Signing time: Sat 23 Aug 2025 07:01:59 +0000
Manifest this update: Sat 23 Aug 2025 07:01:59 +0000
Manifest next update: Sun 24 Aug 2025 07:01:59 +0000
Files and hashes: 1: UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl (hash: uHDSQPD9CBCdBgkoxgdGKCGoMh63FtlRfhtUVKIkt7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ec:1d:4e:ed:df:5f:19:03:1d:b5:d7:86:9f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501b5202a0ed46f6411e1eda7c7b59dd8cc6cd87
Validity
Not Before: Aug 23 07:01:59 2025 GMT
Not After : Aug 24 07:01:59 2025 GMT
Subject: CN=28afe72224d7a5dac1de6b10c3b08afd1750e724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:81:2b:f7:fb:1a:ff:a1:85:72:6d:ba:d6:16:
93:2d:58:d5:c9:0e:55:15:62:ae:62:a6:92:ed:f9:
b9:bc:59:23:60:2c:49:5f:7c:8f:fa:65:36:32:9d:
ac:54:e9:56:aa:ae:8c:65:52:e6:93:0b:3e:7d:4e:
55:30:34:69:1d:38:c1:2c:ab:76:60:16:5d:a1:88:
28:0b:02:ae:9c:a6:b3:7c:38:85:26:26:c1:49:0a:
84:9c:72:a9:64:02:c7:1b:b8:d2:ca:2b:4b:a4:54:
46:1c:4c:56:f2:0a:f2:b7:48:51:84:99:70:32:a7:
ec:b7:1a:1f:f5:d4:64:1a:c5:e5:59:a1:8e:c0:19:
db:0c:3f:09:ca:aa:ed:26:10:c7:af:5f:67:9a:47:
56:e4:be:28:ef:97:dd:8b:20:85:07:c6:f3:a5:44:
f2:65:c1:97:b8:e5:0b:31:0f:6a:79:43:f6:b7:51:
53:5e:84:4c:b6:00:62:0a:eb:24:52:9a:11:4b:7e:
6f:bf:fd:40:a2:a4:83:83:20:a1:28:7b:11:0f:15:
0e:36:c0:5e:de:4f:92:d6:27:cd:90:1e:2d:e1:03:
a2:20:00:d4:cd:c9:27:53:4e:07:3b:a1:65:28:d3:
dc:34:11:02:2d:65:cd:88:f7:6f:30:1c:9b:26:63:
78:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AF:E7:22:24:D7:A5:DA:C1:DE:6B:10:C3:B0:8A:FD:17:50:E7:24
X509v3 Authority Key Identifier:
keyid:50:1B:52:02:A0:ED:46:F6:41:1E:1E:DA:7C:7B:59:DD:8C:C6:CD:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:74:ff:c9:26:82:80:d9:c4:e9:4f:ea:9a:74:0d:1d:ee:29:
85:d2:11:8f:d7:3f:ee:b9:89:aa:25:e8:1c:cd:09:3f:9e:11:
51:71:34:81:64:c6:57:a2:e7:0b:d1:f4:92:5a:73:89:8c:2a:
12:40:ea:82:32:dc:55:be:b2:2c:c9:98:49:96:33:30:47:00:
17:b1:8d:95:0f:86:b7:71:cd:1a:5a:64:8c:19:78:98:c9:81:
98:9c:5b:70:e2:14:0f:b4:39:54:af:c3:9b:a2:37:e2:1d:08:
cb:f5:db:4d:07:3b:44:a6:7c:a8:ee:0a:39:3e:b8:b4:be:ab:
d8:0a:22:97:42:7b:79:6f:ac:1d:37:6c:ab:62:7c:e3:79:da:
6f:d0:a1:38:44:32:95:82:3b:a4:fd:27:9d:34:05:56:ee:72:
66:89:9f:21:92:66:71:b4:98:18:c7:0e:1a:31:2f:8c:d3:47:
84:24:2a:89:26:21:71:60:72:c0:3e:8d:28:ba:d3:a6:62:31:
e1:c9:ca:94:91:5b:a6:d0:35:f0:65:9c:32:c9:b4:12:75:14:
ac:3f:a3:b6:3a:23:61:51:59:59:cd:30:c1:28:27:bd:b0:78:
60:49:5d:a4:36:a0:8b:8d:a7:51:fc:eb:60:02:a1:e0:33:8f:
8b:cd:ab:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:26 2025 by rpki-client