Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
File: UZhWegOeXM4j7pN0CW7tV7u6KY4.mft (raw, json)
Hash identifier: OLWK9EtRMfpQ4dKA+4xfM6TsAqL2/veIP1xyjkm6/Rc=
Subject key identifier: 3E:F0:12:A3:CC:ED:68:18:DA:16:33:AB:5E:65:0D:61:93:88:52:8F
Authority key identifier: 51:98:56:7A:03:9E:5C:CE:23:EE:93:74:09:6E:ED:57:BB:BA:29:8E
Certificate issuer: /CN=5198567a039e5cce23ee9374096eed57bbba298e
Certificate serial: 0197B6A133FC1C70FC13D0B63F9FB537DC6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
Manifest number: 15AF
Signing time: Sat 28 Jun 2025 13:01:47 +0000
Manifest this update: Sat 28 Jun 2025 13:01:47 +0000
Manifest next update: Sun 29 Jun 2025 13:01:47 +0000
Files and hashes: 1: UZhWegOeXM4j7pN0CW7tV7u6KY4.crl (hash: AIeacJbjZ+F2fwvVTSgP/yoaB3BgdT/orGVdBSGu2rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:33:fc:1c:70:fc:13:d0:b6:3f:9f:b5:37:dc:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5198567a039e5cce23ee9374096eed57bbba298e
Validity
Not Before: Jun 28 13:01:47 2025 GMT
Not After : Jun 29 13:01:47 2025 GMT
Subject: CN=3ef012a3cced6818da1633ab5e650d619388528f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e2:21:ca:d0:10:21:3e:80:9e:82:05:42:91:
40:2e:56:0b:fc:46:4d:90:2c:3e:72:2a:11:fa:ca:
9c:cb:10:1c:36:5e:ae:6d:93:54:85:98:d3:51:2a:
45:f1:e4:42:c6:c9:59:67:c9:ed:aa:b4:5f:25:e0:
05:fb:91:c0:b5:ed:62:fb:1a:e8:d3:a9:f1:a3:f8:
e1:03:af:b8:da:c8:24:b9:18:f2:7e:8a:7d:88:e3:
92:68:b3:ae:43:f8:ff:7d:47:3a:d1:66:84:27:25:
cc:ca:80:19:d2:49:b3:b8:44:5c:35:60:50:15:bb:
15:44:e5:07:2b:d0:bd:f6:b0:7d:26:38:ab:7e:ed:
34:47:a3:a2:07:47:62:d1:da:d1:53:40:00:71:41:
f3:8b:ef:a7:48:57:09:67:8d:3e:cf:47:a1:a0:2d:
9e:69:8c:11:c0:dc:4c:21:96:97:c5:fc:05:6d:77:
10:c0:15:71:21:09:9c:4e:e2:f5:3e:77:19:bb:48:
9f:32:70:a9:03:5b:40:1d:80:bf:c6:dd:82:ed:77:
51:d7:3f:56:fa:4d:57:40:90:5e:7b:47:7a:21:50:
9d:4f:7e:56:8f:f8:a6:bd:02:2e:e0:54:c9:ff:53:
a9:68:0c:cf:a2:09:d8:06:93:57:ea:59:5d:50:6b:
89:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F0:12:A3:CC:ED:68:18:DA:16:33:AB:5E:65:0D:61:93:88:52:8F
X509v3 Authority Key Identifier:
keyid:51:98:56:7A:03:9E:5C:CE:23:EE:93:74:09:6E:ED:57:BB:BA:29:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:7e:d2:90:f8:44:29:74:32:ae:d6:66:96:b9:42:1d:3a:47:
53:48:dd:80:63:1e:4c:74:44:64:24:04:bd:3a:ca:1e:78:90:
13:af:a4:2b:ca:34:10:1c:77:e7:90:b6:0e:17:9c:b9:81:fc:
fb:96:70:b8:ca:b3:c9:88:1e:19:44:a0:52:3c:4c:65:e3:ae:
df:86:20:f0:8c:8f:02:53:8e:71:b8:65:11:98:38:e8:11:e2:
09:ba:0e:db:71:88:6c:54:60:a5:bc:ca:86:9b:ca:29:bc:32:
c0:93:a8:e0:e8:c8:24:13:7f:b1:9e:6e:70:78:14:a2:17:cd:
5e:fb:cc:0e:68:d1:04:1c:ee:22:00:db:4d:46:00:fc:e2:df:
c5:b9:73:79:60:1c:3a:44:41:02:79:57:6d:f0:47:19:e4:04:
c9:b4:9a:09:5e:79:54:76:de:cd:13:c4:c0:46:ab:d1:80:ca:
ca:73:9b:45:9c:30:c7:95:91:9f:00:ff:9b:1b:1c:9d:f9:7b:
6a:e3:ed:97:31:50:c1:36:22:a2:f6:8d:3a:72:7c:d9:2a:24:
28:83:f4:8c:ab:f3:d9:fa:83:2c:47:c5:d8:df:eb:0c:70:4d:
71:a5:f4:4b:4a:13:b5:73:6e:68:c5:c0:90:1b:ca:fe:a3:62:
1d:e6:e1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:04:02 2025 by rpki-client