Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft
File: uFK2pNRayK4a7VTG9ayO1v88Hdc.mft (raw, json)
Hash identifier: DS4/BJokTAxXEkjMFyazJKERvJ0Zmu5H8+jUQyd7DEA=
Subject key identifier: 2E:8A:62:1D:F2:EF:7F:D4:8C:B7:99:60:AD:5D:41:F6:DF:0C:3F:B9
Authority key identifier: B8:52:B6:A4:D4:5A:C8:AE:1A:ED:54:C6:F5:AC:8E:D6:FF:3C:1D:D7
Certificate issuer: /CN=b852b6a4d45ac8ae1aed54c6f5ac8ed6ff3c1dd7
Certificate serial: 0198D84F1543C16C49AD3EF2EDA7D621D1BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFK2pNRayK4a7VTG9ayO1v88Hdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft
Manifest number: 0BDF
Signing time: Sat 23 Aug 2025 19:01:58 +0000
Manifest this update: Sat 23 Aug 2025 19:01:58 +0000
Manifest next update: Sun 24 Aug 2025 19:01:58 +0000
Files and hashes: 1: uFK2pNRayK4a7VTG9ayO1v88Hdc.crl (hash: g94LC3RQM9/07F9ayA9L0Py/kvBfC4GdPzpNoTNKwwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFK2pNRayK4a7VTG9ayO1v88Hdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 19:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:15:43:c1:6c:49:ad:3e:f2:ed:a7:d6:21:d1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b852b6a4d45ac8ae1aed54c6f5ac8ed6ff3c1dd7
Validity
Not Before: Aug 23 19:01:58 2025 GMT
Not After : Aug 24 19:01:58 2025 GMT
Subject: CN=2e8a621df2ef7fd48cb79960ad5d41f6df0c3fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ed:ba:47:6f:69:6c:b5:57:51:b4:fb:43:20:
ba:6c:54:46:6c:8e:b6:85:1d:0a:92:be:fd:ab:f4:
3c:1c:26:03:7a:a3:ad:b1:f2:24:23:0a:92:d3:0f:
f4:6e:b9:69:1d:4e:49:4d:f2:51:d7:1c:67:09:84:
e0:86:45:a2:6b:f3:4e:03:e9:3f:0a:46:dc:5f:5f:
27:20:83:7f:91:56:6b:0e:34:bf:7f:d9:b6:8c:33:
da:8e:e0:b0:e5:4f:24:41:68:94:86:8c:f7:5c:59:
18:70:d9:57:c1:e4:a1:eb:d6:c4:ba:44:70:26:86:
f5:7b:81:ed:df:0d:74:ae:50:b3:ee:e7:75:f6:1a:
71:fc:71:11:08:7d:2d:5c:9d:d4:67:72:41:20:20:
26:10:41:40:c2:1b:e2:56:5e:17:8b:4e:b9:3f:74:
63:45:9c:f5:86:fc:de:2b:3b:4c:e2:a9:cf:ee:ee:
44:74:b4:21:26:eb:1f:d4:36:76:3b:15:3d:ed:42:
d0:36:90:da:c2:b7:81:a4:19:40:48:ee:25:cb:89:
96:9b:61:43:25:a5:20:39:bd:4a:49:e3:c6:05:36:
aa:67:1e:71:4b:43:7c:84:ec:c5:8f:d4:dc:a5:70:
6c:bf:64:af:74:1e:7c:99:61:f0:13:81:46:db:bf:
8e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8A:62:1D:F2:EF:7F:D4:8C:B7:99:60:AD:5D:41:F6:DF:0C:3F:B9
X509v3 Authority Key Identifier:
keyid:B8:52:B6:A4:D4:5A:C8:AE:1A:ED:54:C6:F5:AC:8E:D6:FF:3C:1D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFK2pNRayK4a7VTG9ayO1v88Hdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:4e:70:f7:00:cd:9c:56:77:e0:20:ac:12:07:00:c1:00:27:
58:55:53:c8:70:d9:19:c7:07:31:bf:53:1f:a2:a6:50:ee:c5:
37:dc:dc:a2:f9:7a:e2:be:bc:05:ed:9e:58:f7:e8:79:68:b8:
fd:0b:73:31:7b:72:21:63:c6:81:03:58:11:e8:56:d6:d0:6d:
4f:0d:39:ef:de:de:99:82:50:5d:1f:9f:ce:bf:c1:9f:fc:82:
d9:4a:cd:5c:0e:25:86:33:1d:26:7a:9b:73:1f:08:5c:a8:e9:
25:f0:2a:35:27:bc:ac:4f:17:83:a1:ee:12:fc:1d:60:80:e1:
ca:4e:5e:bf:d6:4a:97:cf:7d:8d:71:aa:80:83:6c:9e:0f:65:
c1:93:5e:d8:ae:13:a6:30:2c:13:7d:30:d6:c4:56:75:84:7a:
10:7d:18:f4:79:6a:3a:c4:a7:d5:6f:fb:7e:db:66:e0:1f:85:
b2:3b:ca:9f:79:67:4f:5e:06:e5:55:f4:91:ac:86:ba:45:93:
98:08:a5:db:35:96:3f:e8:5d:9f:05:b7:5b:a8:76:ca:3a:20:
6c:27:e9:58:0b:11:89:d9:62:f1:78:0d:95:0a:f1:b9:0b:e7:
4a:d3:24:ce:87:bd:03:3d:ce:52:e0:03:02:59:e7:d6:52:6a:
e0:34:94:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:43:11 2025 by rpki-client