Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft
File: UB7eLUfXfhQKl78pidqCpYdzyMA.mft (raw, json)
Hash identifier: Q6RsiBVgMzp0negqLcozJ6HK8T77OvNmPGYzUdBJYkY=
Subject key identifier: AB:44:75:27:20:CC:11:BD:A7:9D:AC:60:EC:9F:83:49:82:8F:15:AC
Authority key identifier: 50:1E:DE:2D:47:D7:7E:14:0A:97:BF:29:89:DA:82:A5:87:73:C8:C0
Certificate issuer: /CN=501ede2d47d77e140a97bf2989da82a58773c8c0
Certificate serial: 0198D47313F8C60E8A245F8B96703E37C159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UB7eLUfXfhQKl78pidqCpYdzyMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft
Manifest number: 0D2E
Signing time: Sat 23 Aug 2025 01:02:48 +0000
Manifest this update: Sat 23 Aug 2025 01:02:48 +0000
Manifest next update: Sun 24 Aug 2025 01:02:48 +0000
Files and hashes: 1: UB7eLUfXfhQKl78pidqCpYdzyMA.crl (hash: ye2rISq9baa93dFo/Qh+6PeKVFIAgDEVxvJ9TKg3WhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UB7eLUfXfhQKl78pidqCpYdzyMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:13:f8:c6:0e:8a:24:5f:8b:96:70:3e:37:c1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501ede2d47d77e140a97bf2989da82a58773c8c0
Validity
Not Before: Aug 23 01:02:48 2025 GMT
Not After : Aug 24 01:02:48 2025 GMT
Subject: CN=ab44752720cc11bda79dac60ec9f8349828f15ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:82:4a:0c:4e:95:46:45:22:bd:55:31:83:86:
0e:f8:71:60:0a:4b:5a:be:62:9c:9e:7b:39:b4:d7:
51:19:72:48:c4:f9:c2:84:7d:fa:bc:1e:1e:25:80:
1b:51:7c:4b:33:18:e9:73:04:29:ef:e0:89:d0:cf:
81:10:7c:74:2c:7a:c1:25:17:42:c0:8d:c1:94:2e:
79:f1:ae:67:fd:14:57:38:cc:d5:a7:89:72:03:98:
f0:bf:17:21:4f:7b:a6:b8:1d:82:0a:db:66:b0:4e:
95:05:c3:8d:00:27:96:38:15:f9:8d:d7:04:42:a2:
68:39:a6:07:76:76:32:3d:9d:21:d1:79:c8:96:ae:
08:66:35:62:a9:8c:eb:9f:e3:5b:cf:b9:61:e0:ba:
c7:e6:b3:ff:06:4b:fa:37:a1:ba:ec:59:05:34:b4:
5c:3c:97:58:68:a2:9d:ec:2c:ed:d7:ea:ac:44:20:
2d:f5:4e:67:60:b8:21:b5:d6:58:cd:13:2a:31:3f:
fd:67:9e:6b:18:e4:cb:60:0e:b4:46:ff:f3:d4:80:
02:35:36:8c:fd:47:d8:01:39:47:2c:fd:d2:f5:a8:
ca:21:01:5e:de:da:4e:5c:0a:12:36:94:fa:61:f1:
b5:d4:3f:ec:89:ea:ff:e4:a8:2a:f0:5a:b8:8b:a2:
b9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:44:75:27:20:CC:11:BD:A7:9D:AC:60:EC:9F:83:49:82:8F:15:AC
X509v3 Authority Key Identifier:
keyid:50:1E:DE:2D:47:D7:7E:14:0A:97:BF:29:89:DA:82:A5:87:73:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UB7eLUfXfhQKl78pidqCpYdzyMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:00:b1:b4:48:a7:3b:ec:96:5f:af:38:56:07:f4:aa:67:99:
1b:68:5c:55:f4:74:4a:5d:76:ec:a3:b8:dc:fd:f9:69:bc:b6:
22:9c:8a:d9:2f:24:cc:11:1c:20:34:40:4e:4d:c9:6c:21:12:
8a:e3:66:7b:dc:87:ad:27:5e:c8:bc:81:79:0f:b2:00:a6:d0:
41:be:6e:aa:9d:2d:4d:08:89:68:92:b7:fc:a1:e4:89:e0:da:
77:c1:fc:90:3b:f7:00:5f:6d:61:f7:95:83:75:a6:73:e6:e7:
1e:db:90:3f:42:4c:af:e6:85:e8:72:ff:b3:d7:d0:fd:48:af:
cc:fc:35:c0:6f:c5:79:e7:35:bc:f5:82:f6:57:21:a5:fc:2b:
d5:4f:09:84:f0:8e:13:6f:b2:21:d5:eb:d8:3a:41:93:ac:72:
9d:d8:8f:39:22:4b:dc:c3:1c:02:11:8a:a6:16:3b:e7:a1:6b:
a2:83:78:c7:12:f2:b2:48:35:e4:91:ab:e6:b5:65:13:20:95:
77:71:6f:b4:8f:ae:32:0d:38:d7:e2:10:72:b3:74:6a:b3:09:
09:2b:5e:74:c0:1b:69:33:a8:87:8e:d2:4e:83:b8:16:cd:94:
50:d8:5a:04:0c:35:d2:84:ae:de:12:76:ef:69:fe:94:44:9c:
1f:5c:d1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:51 2025 by rpki-client