Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft
File: UnFDjiPOkl5mwlmYEiG1toOi8I8.mft (raw, json)
Hash identifier: A6kM9KxhMV+pRey7ZnAAfX6wLZw4FCt4uVnbi9vrncg=
Subject key identifier: 40:FB:A4:4A:95:02:CD:BE:C3:DC:64:4B:CC:30:2C:B4:46:FB:5F:73
Authority key identifier: 52:71:43:8E:23:CE:92:5E:66:C2:59:98:12:21:B5:B6:83:A2:F0:8F
Certificate issuer: /CN=5271438e23ce925e66c259981221b5b683a2f08f
Certificate serial: 0198D65F24A7915F2A032B6F6C4F38A6740C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnFDjiPOkl5mwlmYEiG1toOi8I8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft
Manifest number: 0BAE
Signing time: Sat 23 Aug 2025 10:00:15 +0000
Manifest this update: Sat 23 Aug 2025 10:00:15 +0000
Manifest next update: Sun 24 Aug 2025 10:00:15 +0000
Files and hashes: 1: UnFDjiPOkl5mwlmYEiG1toOi8I8.crl (hash: gifgEhIpK5pxkjtHjmqHLgVvQnBxqe9TicqQGipcJyI=)
2: b23Ppzc40t1gh2jcC0tEEtTjq-Y.roa (hash: PLO31FJDvhLM1rCGRuVKcX7pZ7U9Xsy2KrFDiy0XrKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UnFDjiPOkl5mwlmYEiG1toOi8I8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:24:a7:91:5f:2a:03:2b:6f:6c:4f:38:a6:74:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5271438e23ce925e66c259981221b5b683a2f08f
Validity
Not Before: Aug 23 10:00:15 2025 GMT
Not After : Aug 24 10:00:15 2025 GMT
Subject: CN=40fba44a9502cdbec3dc644bcc302cb446fb5f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:62:2b:9f:cc:28:c5:5e:56:5e:8d:15:d1:45:
fe:b2:ba:51:4a:b5:94:e9:5f:bd:4e:00:50:75:8c:
06:27:f3:3c:2f:d0:78:a0:82:8a:f7:30:03:68:1b:
11:95:77:b8:cc:f2:b1:5e:dd:25:76:09:63:bf:a6:
f1:b5:76:7c:96:d0:15:f6:6b:ae:30:ee:2b:a8:f1:
67:ca:7e:c4:7d:b2:47:58:9f:1f:ce:9d:b3:ab:92:
6f:63:ee:3f:1e:29:4b:11:85:33:ab:b4:d5:e0:a5:
29:18:97:08:1b:14:ad:d3:d7:9f:d3:88:f6:f5:a9:
d1:38:37:64:19:51:29:82:93:1e:a0:05:fc:00:17:
28:35:6c:e9:d4:df:de:d6:01:58:31:8c:51:1c:66:
7c:03:ed:d4:7c:ee:3c:3d:05:27:65:4b:ec:47:ba:
bb:d2:43:de:23:23:ff:04:4d:0e:af:f7:91:a3:b6:
54:73:84:77:11:a4:20:55:6b:aa:6c:57:01:67:5d:
d5:61:c6:5f:45:85:fe:59:da:12:cd:e6:8b:72:78:
27:c7:64:a5:9a:74:55:f4:bb:89:6e:49:31:21:26:
a2:b7:5f:09:b1:be:58:ac:81:e9:55:c9:68:26:e1:
9d:d8:88:43:77:f2:b0:86:ee:8e:93:fe:19:3f:d8:
88:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FB:A4:4A:95:02:CD:BE:C3:DC:64:4B:CC:30:2C:B4:46:FB:5F:73
X509v3 Authority Key Identifier:
keyid:52:71:43:8E:23:CE:92:5E:66:C2:59:98:12:21:B5:B6:83:A2:F0:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnFDjiPOkl5mwlmYEiG1toOi8I8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:8f:5d:af:c7:6d:a9:63:0b:5a:b1:d1:18:01:88:79:91:5f:
67:d6:fc:0f:5d:2b:ec:bb:74:89:e0:7f:88:06:1d:a3:3a:da:
02:6c:69:78:f4:78:1f:27:e0:32:eb:69:0f:c8:2f:ac:99:6f:
02:66:9a:e0:fc:d7:16:14:64:ba:64:07:73:f8:be:56:fe:5f:
5b:1c:64:f0:ff:c7:a0:b5:ae:bb:55:64:0f:38:18:de:b0:82:
17:db:f3:6f:2e:19:d1:e9:a2:6c:92:b9:15:9b:ac:5d:cd:28:
4c:31:db:80:0c:57:04:37:dc:bd:99:5b:e4:eb:13:d9:66:f2:
3d:6b:d9:8a:7e:3c:23:5f:fb:9b:12:12:d9:ec:92:e4:7d:a9:
1a:75:ad:ad:da:74:3d:14:d9:3e:19:6d:54:14:8b:32:6f:28:
97:d3:ce:51:28:e8:c5:d3:47:77:df:94:0f:2d:12:01:65:fb:
62:35:42:27:96:0b:8c:c5:81:fb:dc:55:00:b4:2a:0f:c3:ea:
0d:40:9a:97:40:6a:2e:5b:50:f2:5b:37:58:2b:d9:23:d8:c2:
7a:86:1c:66:9c:50:6c:76:6d:74:ec:2b:1b:33:72:b7:d6:81:
a2:0a:5b:45:c7:6b:e9:28:9c:bd:0e:af:11:0f:41:21:7e:90:
fc:f5:16:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:07:05 2025 by rpki-client