Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
File: kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft (raw, json)
Hash identifier: XE5PP2G4HMnV+rDFIwhQBdKgLxPF4EfLfcMvPHwVjL4=
Subject key identifier: C8:4A:70:62:DA:6B:FE:B4:DC:95:8A:F9:13:1B:70:AC:99:B3:D3:1A
Authority key identifier: 91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63
Certificate issuer: /CN=9143c5f48c77a79c985f5e5362e082ad54e23063
Certificate serial: 0198D47340606736410AB079EC6248DFC940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
Manifest number: 0D2E
Signing time: Sat 23 Aug 2025 01:02:59 +0000
Manifest this update: Sat 23 Aug 2025 01:02:59 +0000
Manifest next update: Sun 24 Aug 2025 01:02:59 +0000
Files and hashes: 1: kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl (hash: dZUGxJuUIV5IzS5lQFc1gzatcVtDnCHs/pQVhKjONeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:40:60:67:36:41:0a:b0:79:ec:62:48:df:c9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9143c5f48c77a79c985f5e5362e082ad54e23063
Validity
Not Before: Aug 23 01:02:59 2025 GMT
Not After : Aug 24 01:02:59 2025 GMT
Subject: CN=c84a7062da6bfeb4dc958af9131b70ac99b3d31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:da:f2:ca:81:f6:2e:f8:b1:c1:a0:f9:23:7f:
41:d9:f6:e2:1a:bf:10:d0:4d:57:e6:36:b8:04:8a:
43:dd:ff:e6:70:12:68:9b:5c:8b:3d:80:4b:24:a6:
60:aa:73:6f:5c:fd:af:e5:7c:a7:47:7a:56:3b:f9:
cf:bc:84:ee:a3:cd:42:9a:e4:9b:36:43:d9:f6:40:
90:90:70:7e:b5:2a:3f:57:e2:93:73:5c:6e:c4:94:
84:e1:79:86:58:f7:93:0c:ac:0d:96:3f:9b:74:f4:
e3:b6:c0:3c:aa:f1:60:6f:1c:9b:8c:3a:09:46:28:
3e:00:47:03:66:69:02:b7:d8:ba:ef:d0:69:b6:82:
55:01:9d:f4:63:8d:7e:83:8c:11:37:d2:ae:a5:58:
19:35:6d:97:49:57:33:d1:fc:c9:ac:43:17:a5:46:
11:e8:38:3b:68:20:29:08:30:2d:65:a3:af:06:32:
3f:16:6f:4d:eb:d6:00:4c:6f:8e:e4:33:5c:92:e9:
35:e1:cd:9c:2d:ed:39:55:e6:aa:e2:62:2a:da:f4:
1d:18:d2:5f:77:78:98:c7:df:b5:0f:9b:8e:af:b4:
85:84:ac:9b:1a:7c:1d:56:2b:ad:3f:ab:33:17:9e:
2e:83:ac:43:fe:81:1e:4c:e0:10:f8:5d:2c:47:95:
f6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4A:70:62:DA:6B:FE:B4:DC:95:8A:F9:13:1B:70:AC:99:B3:D3:1A
X509v3 Authority Key Identifier:
keyid:91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d5:e4:fb:a8:91:2e:e7:9a:f5:03:00:47:79:28:5c:5c:f9:
ed:cf:34:f3:d8:8a:51:3c:3b:bd:cd:c7:3a:7d:a4:5c:97:c7:
4c:2f:5b:59:17:7a:0e:ff:a9:89:5f:2e:48:2c:28:9b:7e:f5:
df:7b:68:98:fe:47:32:28:1d:a7:ad:8b:2f:35:75:f5:42:43:
1d:14:cc:f2:60:a0:c2:a2:ef:72:90:2c:a1:93:96:09:bf:42:
67:9d:fd:dd:58:8b:5c:55:6e:7d:48:a0:e4:e6:b2:28:06:d7:
37:b2:28:e1:b9:7d:37:ab:bc:54:bd:7e:d0:03:dd:7c:4a:55:
0c:6d:e0:2a:0a:bf:2b:f6:03:95:d5:7e:34:b2:3c:3e:83:f8:
92:06:29:fd:55:ba:1e:f5:5f:4f:73:a9:ca:5f:19:0e:d9:4e:
ff:61:2e:3b:b8:d5:8b:60:fc:7e:02:e7:1c:e8:49:98:c2:15:
cb:d7:8c:bd:2b:31:92:4a:94:88:9f:b2:d6:6e:fe:3f:fd:ca:
7b:4c:08:de:21:31:b3:91:b6:70:bb:a7:76:e2:7c:b5:1f:c1:
17:9e:2a:12:6c:57:6e:90:64:71:7a:9c:09:8d:c3:0c:9f:4f:
44:03:7c:c8:c2:56:ac:fa:61:53:9a:11:17:c3:c1:d6:d2:4a:
bb:d9:ab:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:40 2025 by rpki-client