Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.mft
File: UVy9vRam6GjplnW8KRgCaMJY8Ps.mft (raw, json)
Hash identifier: tpr5eI+d+gK7jgZgooX90IR5jzumMyhdGpngt95GxCY=
Subject key identifier: 3F:5D:74:12:4F:43:52:34:54:53:44:1A:79:ED:57:81:18:20:A5:8F
Authority key identifier: 51:5C:BD:BD:16:A6:E8:68:E9:96:75:BC:29:18:02:68:C2:58:F0:FB
Certificate issuer: /CN=515cbdbd16a6e868e99675bc29180268c258f0fb
Certificate serial: 0197BA7DEA18522B8712B021A408227FB914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVy9vRam6GjplnW8KRgCaMJY8Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.mft
Manifest number: 10A2
Signing time: Sun 29 Jun 2025 07:01:43 +0000
Manifest this update: Sun 29 Jun 2025 07:01:43 +0000
Manifest next update: Mon 30 Jun 2025 07:01:43 +0000
Files and hashes: 1: UVy9vRam6GjplnW8KRgCaMJY8Ps.crl (hash: 1gR1Rr357P8J9nLZnChWpI2Mg48K8ZGWBqnUx/HBQQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/UVy9vRam6GjplnW8KRgCaMJY8Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:ea:18:52:2b:87:12:b0:21:a4:08:22:7f:b9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=515cbdbd16a6e868e99675bc29180268c258f0fb
Validity
Not Before: Jun 29 07:01:43 2025 GMT
Not After : Jun 30 07:01:43 2025 GMT
Subject: CN=3f5d74124f4352345453441a79ed57811820a58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5e:ed:ca:3e:4b:79:60:60:86:53:46:5a:7a:
da:da:3b:b8:9f:9d:3b:6e:17:a6:71:a4:0a:02:43:
17:e2:76:b6:66:a1:fa:d2:05:23:0c:2b:74:26:57:
e9:cb:7d:61:9d:0d:e5:77:5d:13:a0:20:28:29:e0:
be:30:09:53:e2:6f:5d:c0:90:27:3a:6c:37:04:6c:
75:61:da:3d:39:ae:a8:b6:dd:b2:cd:80:5d:76:c4:
d0:0f:4d:fa:b6:03:a3:8e:8d:b5:41:50:24:68:f5:
d5:af:83:84:b1:7d:97:f1:41:bb:20:93:09:34:84:
78:71:5b:86:42:bf:a0:0f:d5:38:1f:53:c2:0e:39:
25:f5:95:c5:84:cd:85:d9:1c:28:0e:9a:5b:06:f8:
8f:8c:34:f1:4a:f4:65:3a:dd:cf:7b:77:7b:fa:74:
b7:5a:41:7c:e3:bf:c8:65:07:4c:01:c8:81:34:1b:
21:56:2b:4c:3e:be:6f:0f:d0:ba:a9:5d:a7:93:d3:
32:d1:e0:22:dd:45:3a:c5:35:69:a6:90:b0:93:03:
0c:57:bb:3e:31:9d:00:2f:25:4d:e6:c4:2c:16:4a:
76:94:df:eb:63:4f:fc:91:07:41:e7:3c:22:11:4d:
a4:6c:58:6c:ae:7b:24:ff:04:74:aa:cb:cf:15:34:
0d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5D:74:12:4F:43:52:34:54:53:44:1A:79:ED:57:81:18:20:A5:8F
X509v3 Authority Key Identifier:
keyid:51:5C:BD:BD:16:A6:E8:68:E9:96:75:BC:29:18:02:68:C2:58:F0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVy9vRam6GjplnW8KRgCaMJY8Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:48:05:be:c8:ae:eb:ff:e0:f5:69:36:5a:83:92:96:63:93:
82:b0:65:35:ce:70:f3:86:98:06:b6:45:ea:3d:66:a2:71:d3:
4c:49:51:9d:9b:92:03:b4:42:58:ce:ae:28:d4:cf:87:c6:d1:
bc:7d:52:31:5b:d4:8d:d4:71:f7:13:ef:41:1c:69:75:fd:2d:
a4:9f:5a:6c:04:54:d7:9a:3f:16:c4:63:5d:08:93:21:1a:28:
43:90:0d:50:1f:9c:6f:58:d8:f9:bc:8c:71:3e:79:97:0c:02:
56:20:f6:44:1c:d6:e9:fe:f1:b1:d6:e5:e6:47:eb:de:65:41:
bd:e1:ba:5d:32:ac:1c:4a:76:a6:89:bb:7c:86:31:85:45:a1:
ea:a9:68:9b:26:2b:ea:0a:5c:5c:3c:d9:35:ad:d1:16:80:71:
80:f4:6a:15:c1:eb:18:9c:81:a1:a1:cf:75:71:36:f1:eb:d3:
4f:50:bb:d0:9a:98:27:52:cf:44:ed:03:ed:e6:e9:94:e0:ca:
6d:56:dc:15:e8:3f:87:de:c5:d9:1a:7b:58:a0:39:fc:a1:a6:
fc:e5:0a:50:7c:c2:f0:9d:4f:17:4a:88:3b:3e:99:2e:9d:0c:
5a:2d:25:08:a7:d8:8e:e0:26:25:d6:9e:0b:f7:fe:13:39:76:
28:39:75:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:49:55 2025 by rpki-client