Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
File: UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft (raw, json)
Hash identifier: MTwEWynKUhVtzvDfcLeWOUFuy/YF49oGfX1lergRknY=
Subject key identifier: 55:82:4E:F0:A3:9D:1E:34:14:54:48:E6:CD:15:2E:FB:4B:C5:73:33
Authority key identifier: 50:10:39:75:6C:CF:31:F6:4A:88:34:43:E1:F1:73:28:34:D2:B8:B2
Certificate issuer: /CN=501039756ccf31f64a883443e1f1732834d2b8b2
Certificate serial: 0198D4E0BC917C7A66A963A0D1BE478BE72B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
Manifest number: 09AD
Signing time: Sat 23 Aug 2025 03:02:34 +0000
Manifest this update: Sat 23 Aug 2025 03:02:34 +0000
Manifest next update: Sun 24 Aug 2025 03:02:34 +0000
Files and hashes: 1: UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl (hash: S/Ued7yKCdxCjq//nLxLuJMb7UQVdtmxGeafqw+wdpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:bc:91:7c:7a:66:a9:63:a0:d1:be:47:8b:e7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501039756ccf31f64a883443e1f1732834d2b8b2
Validity
Not Before: Aug 23 03:02:34 2025 GMT
Not After : Aug 24 03:02:34 2025 GMT
Subject: CN=55824ef0a39d1e34145448e6cd152efb4bc57333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d6:ad:57:fb:36:11:7b:39:4f:92:29:14:be:
77:d3:af:6a:63:c1:a1:21:8b:68:cb:d5:1b:1f:be:
74:0b:e2:31:00:ca:04:26:77:64:ee:88:42:5a:09:
eb:3f:9a:46:ff:cd:8e:9a:f5:cf:01:65:e1:32:38:
66:31:b1:bb:27:5d:35:30:73:44:78:7d:9b:0d:8c:
36:2f:37:3e:36:11:86:55:f8:86:67:44:a6:d9:99:
18:23:63:7d:a4:11:3b:00:a6:db:c6:4c:c3:46:9e:
3e:ce:66:17:75:79:14:fe:ce:df:dc:48:10:df:b7:
2a:cc:5a:62:cd:77:75:68:9d:46:1a:b2:9a:1f:b2:
48:6c:29:de:c2:cc:5e:fb:33:12:cc:fa:aa:60:d7:
b9:6f:3a:65:93:b7:30:31:7c:a1:1d:52:a0:82:08:
1c:39:84:7f:95:80:e7:82:53:fa:76:eb:eb:10:49:
eb:2c:e7:ad:96:30:a8:6a:96:3f:80:65:4d:72:d3:
d1:95:80:bd:b4:94:2a:e2:db:ba:4a:87:99:52:33:
55:89:3d:5a:ab:1e:0d:a3:14:b0:33:34:5f:a6:09:
83:eb:d2:7c:af:a2:38:df:7e:2f:df:14:f9:69:be:
0a:0f:82:e6:d5:88:a4:81:e6:fa:e2:87:52:5a:72:
e2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:82:4E:F0:A3:9D:1E:34:14:54:48:E6:CD:15:2E:FB:4B:C5:73:33
X509v3 Authority Key Identifier:
keyid:50:10:39:75:6C:CF:31:F6:4A:88:34:43:E1:F1:73:28:34:D2:B8:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ea:ef:57:c5:b4:cd:0c:a1:ea:23:65:f3:a0:45:af:e8:78:
28:18:26:67:83:b1:d3:d4:41:f3:cd:17:24:0f:53:22:22:c0:
a3:79:a4:73:d4:14:d1:66:f3:a2:b4:e3:10:c2:06:32:92:ac:
36:7d:97:9a:b7:3c:f8:1e:59:b0:85:d6:1d:ea:06:0d:47:c0:
39:67:cd:93:67:9a:c9:6b:b1:4d:f4:b1:6c:c6:d2:39:58:cb:
b6:58:7f:e4:4e:41:45:89:37:c8:f7:78:40:43:96:1f:24:20:
19:62:42:80:e4:fe:a0:e6:f4:5a:70:a5:f2:43:75:f6:76:68:
7a:3d:b6:e0:7b:50:a9:4c:4f:34:e4:4f:10:cd:ca:cb:ac:66:
24:c0:b2:28:1f:2e:f9:25:67:4d:03:81:8e:10:df:68:fd:65:
25:96:44:13:16:da:86:88:c3:67:f6:dc:4f:29:01:85:66:70:
d8:45:c6:c0:09:21:2f:3c:2e:d5:85:09:e8:0f:9d:c9:6a:01:
09:88:30:4f:50:e2:13:6f:72:12:1b:4f:ee:db:5b:7b:80:55:
de:db:5b:e8:03:6e:fa:db:d9:85:18:9c:00:08:48:e7:25:b0:
15:e0:e4:db:78:74:18:6e:81:d3:fd:83:eb:2d:7c:19:31:6d:
c2:79:bc:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:17 2025 by rpki-client