Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
File: Uw4xZLFq4JEmhPqpDkORTeH91aU.mft (raw, json)
Hash identifier: hgH2KlzXOHbWapcOGv871UxeNKlBc06KgOXy1Hgcq8c=
Subject key identifier: 5E:EA:96:5D:B5:22:68:BE:AA:08:F7:78:B8:80:0A:11:AA:9C:D8:9C
Authority key identifier: 53:0E:31:64:B1:6A:E0:91:26:84:FA:A9:0E:43:91:4D:E1:FD:D5:A5
Certificate issuer: /CN=530e3164b16ae0912684faa90e43914de1fdd5a5
Certificate serial: 0198D65F00A3DB6FC7BFA50ED2805D1AC8BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
Manifest number: 0EFD
Signing time: Sat 23 Aug 2025 10:00:06 +0000
Manifest this update: Sat 23 Aug 2025 10:00:06 +0000
Manifest next update: Sun 24 Aug 2025 10:00:06 +0000
Files and hashes: 1: Uw4xZLFq4JEmhPqpDkORTeH91aU.crl (hash: 5lhG/7MKJAK1l4sZgpZZBSlI15Am+QeLJ1+6nx0dok4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:00:a3:db:6f:c7:bf:a5:0e:d2:80:5d:1a:c8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=530e3164b16ae0912684faa90e43914de1fdd5a5
Validity
Not Before: Aug 23 10:00:06 2025 GMT
Not After : Aug 24 10:00:06 2025 GMT
Subject: CN=5eea965db52268beaa08f778b8800a11aa9cd89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4c:87:62:6b:d1:43:ad:a5:b1:4c:7c:0f:3d:
b2:b7:83:be:20:a4:d0:b5:90:d8:28:ab:78:9b:26:
b2:59:aa:fb:b6:c1:f7:06:70:6f:d7:b2:de:d2:05:
60:c1:23:1f:b0:79:8f:9a:29:81:33:bd:fa:fa:c4:
3b:5b:ec:b4:bf:5b:ae:5e:7d:39:35:03:50:4f:01:
da:a7:a7:c4:17:26:b5:d9:7b:92:5c:07:d1:9c:64:
6f:1e:1c:f1:3d:19:2c:d3:ec:47:6a:4b:0a:8b:d6:
1a:90:64:85:85:f9:43:ef:63:8d:77:5a:52:c6:31:
6f:2e:0c:d1:9e:d5:bb:91:b8:62:53:d1:46:ae:4d:
a6:e5:0e:00:30:c5:1d:65:c6:01:1e:97:5b:38:b4:
d1:64:d2:fb:ab:f0:58:1f:d0:b4:fc:19:44:4d:f9:
0d:38:42:5a:2a:20:b2:21:b6:72:2b:0c:23:82:c5:
4e:d5:28:0c:96:fb:4c:4b:65:35:2a:28:e2:68:80:
26:63:5a:93:0d:4d:e0:37:bb:c5:88:2c:c4:4d:3d:
6d:e8:9f:52:c8:47:99:be:56:07:2a:ac:0d:96:55:
bb:7e:de:57:94:70:4e:55:fd:25:5b:aa:c1:93:f6:
6d:16:33:f1:cc:f4:34:61:44:0f:bc:0a:63:a3:86:
16:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:EA:96:5D:B5:22:68:BE:AA:08:F7:78:B8:80:0A:11:AA:9C:D8:9C
X509v3 Authority Key Identifier:
keyid:53:0E:31:64:B1:6A:E0:91:26:84:FA:A9:0E:43:91:4D:E1:FD:D5:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:4e:29:be:32:58:22:56:87:73:61:11:81:e5:a6:8b:28:88:
9f:00:f9:a5:4c:12:6d:4e:c9:75:ea:ba:51:a1:de:3e:76:37:
46:00:92:fd:71:ad:b4:87:2f:ea:73:41:d9:41:db:42:0b:b5:
4c:b1:f0:ca:b4:0c:0c:a5:c0:74:f1:af:bb:8a:71:d0:e3:56:
cd:89:4e:09:75:70:6c:d5:b5:e3:a9:27:f1:1f:fb:09:c0:b6:
25:08:12:74:7c:b5:45:a4:89:e2:d7:82:fb:57:92:9c:f6:21:
95:ea:9d:b8:90:38:49:58:a7:f6:86:24:bd:ab:42:20:c6:86:
c4:10:56:00:59:ea:4f:99:c9:d7:6d:54:38:3a:f1:22:2e:40:
6f:c8:fb:9c:af:fe:f2:bf:cf:de:94:ff:e8:5e:77:f7:24:73:
51:23:68:79:1e:68:3d:fd:b3:9a:93:67:2c:16:af:10:c6:fb:
bd:75:1a:86:51:64:68:ab:e3:6b:d2:4a:ba:e3:23:99:af:96:
36:7e:13:09:ff:00:48:69:eb:79:c8:29:78:11:8d:66:7a:28:
5e:50:78:9d:56:3b:1a:ef:df:3b:3c:36:3d:99:76:c5:81:ba:
37:44:dd:6e:1a:d4:83:4a:46:25:8d:b4:fc:95:2e:f6:cb:01:
71:62:72:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:05:01 2025 by rpki-client