Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft
File: 1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft (raw, json)
Hash identifier: As4tjyVDDYqsOZtDIqJutOar6hR0hvpyBZnl8JP5SZM=
Subject key identifier: 51:66:16:51:BC:C9:82:2D:64:1D:9A:FE:74:6F:E6:FE:CE:44:62:4C
Authority key identifier: FA:EB:F1:07:F0:5F:BA:9D:4E:4C:A6:1A:EA:0C:17:72:51:9F:5E:38
Certificate issuer: /CN=faebf107f05fba9d4e4ca61aea0c1772519f5e38
Certificate serial: 0198D583C290E40DAE7C157780717735D5CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uvxB_Bfup1OTKYa6gwXclGfXjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft
Manifest number: 0C
Signing time: Sat 23 Aug 2025 06:00:38 +0000
Manifest this update: Sat 23 Aug 2025 06:00:38 +0000
Manifest next update: Sun 24 Aug 2025 06:00:38 +0000
Files and hashes: 1: 1-uvxB_Bfup1OTKYa6gwXclGfXjg.crl (hash: 8zrzMEYehd9/9R2QRNFqmPHNQgIySKXV56yZGve9+zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uvxB_Bfup1OTKYa6gwXclGfXjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:c2:90:e4:0d:ae:7c:15:77:80:71:77:35:d5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faebf107f05fba9d4e4ca61aea0c1772519f5e38
Validity
Not Before: Aug 23 06:00:38 2025 GMT
Not After : Aug 24 06:00:38 2025 GMT
Subject: CN=51661651bcc9822d641d9afe746fe6fece44624c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:61:44:24:7d:30:71:72:c6:e3:d4:52:e2:b6:
4c:c0:56:80:f6:7c:58:3b:5f:e1:ee:88:95:fa:2e:
98:8a:d9:5b:7c:de:6f:c1:05:ec:50:9e:13:70:40:
81:c7:8c:50:fa:45:ee:49:ca:50:d0:8a:0f:9e:a5:
48:99:67:df:3d:e6:0d:a6:04:4c:ae:09:06:65:05:
07:58:63:9a:46:b5:7e:7b:e7:98:dd:5d:5a:47:82:
8b:17:70:cf:36:cc:65:ae:7f:1b:4c:a8:01:ae:66:
43:a3:12:86:87:22:c7:9d:e7:05:5a:d8:12:33:5f:
15:84:3e:30:b4:ce:11:a8:95:84:55:a3:d4:30:b1:
8f:33:04:ce:6f:74:85:d3:e0:f9:b4:ff:a0:2d:23:
5f:c6:22:17:57:a9:4a:9d:31:3e:9e:48:ff:d9:cc:
36:0d:b4:cd:4b:e9:b8:f0:32:16:cc:0f:ee:f6:cf:
23:67:f6:dd:bb:7f:be:fb:a7:0c:00:b3:2b:4d:05:
4d:e8:7c:6f:e7:32:9d:61:4a:f4:77:5c:57:d9:b1:
d4:a4:df:ff:40:99:f2:45:d6:91:6e:60:60:f9:40:
d4:bf:d1:ba:46:f8:5f:0f:88:1d:64:5c:17:23:5a:
fa:46:b0:95:97:be:db:e6:e6:31:cb:2e:2f:53:8a:
9d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:66:16:51:BC:C9:82:2D:64:1D:9A:FE:74:6F:E6:FE:CE:44:62:4C
X509v3 Authority Key Identifier:
keyid:FA:EB:F1:07:F0:5F:BA:9D:4E:4C:A6:1A:EA:0C:17:72:51:9F:5E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uvxB_Bfup1OTKYa6gwXclGfXjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:1f:8f:fd:e9:da:ed:be:8f:a9:62:36:92:43:e1:fa:ef:49:
bc:a6:26:a5:c2:b4:59:2d:56:f4:59:96:41:3c:d2:91:6e:15:
7f:ed:be:f9:35:72:92:e2:13:fc:2b:64:5a:60:34:21:9d:98:
06:b3:2b:4d:8e:e2:bf:05:97:c8:e9:c9:d7:a7:19:c0:45:0e:
63:af:a9:cd:e4:90:72:b3:e1:e2:ae:8f:9c:1d:94:41:44:45:
67:cf:ae:72:ea:b4:3e:e1:83:ba:a1:9c:8e:ad:c3:97:9d:fa:
cb:0a:c7:67:83:cd:32:63:0a:06:8e:7e:5c:4f:61:db:2b:a0:
97:7f:25:99:15:d0:80:05:f4:d4:fb:55:0f:6c:ad:72:6a:15:
9a:ea:cb:9f:33:03:6f:55:6b:04:e4:e7:42:0f:f4:97:fe:5d:
a7:82:1b:3f:44:dd:f1:26:08:a7:29:9f:fa:64:7f:87:ff:f3:
c9:fb:63:f5:a4:55:fa:12:22:5d:cc:38:74:7d:4f:e0:32:d2:
3f:7a:13:2e:39:5c:a0:6e:5b:f8:32:5f:7a:c5:7e:9e:64:88:
d0:c5:dc:3e:58:a2:cb:51:7b:d4:bd:78:ee:c8:0c:0e:c4:df:
39:14:e3:a8:1d:04:96:6f:68:cf:2a:32:a4:1c:20:6f:8f:79:
bf:0e:ac:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:07 2025 by rpki-client