
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft
File: uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft (raw, json)
Hash identifier: zs/LjgH/1h/9HBspwH64++wy2poXyBx2qcKDWqLGN1E=
Subject key identifier: 8E:0F:E5:9A:D1:05:96:95:B9:C7:30:03:8D:22:B7:90:CA:D1:A3:58
Authority key identifier: B9:1F:8D:B0:2E:2E:97:1D:54:F9:0E:EF:10:70:90:39:8F:CC:3D:92
Certificate issuer: /CN=b91f8db02e2e971d54f90eef107090398fcc3d92
Certificate serial: 0198D660A129199CBBCB0581BF83B4E4A36D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft
Manifest number: 088C
Signing time: Sat 23 Aug 2025 10:01:53 +0000
Manifest this update: Sat 23 Aug 2025 10:01:53 +0000
Manifest next update: Sun 24 Aug 2025 10:01:53 +0000
Files and hashes: 1: uR-NsC4ulx1U-Q7vEHCQOY_MPZI.crl (hash: F6ngmo/D1c+BvM8BbH36K34u6es/WJwpaXcHle99pD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:a1:29:19:9c:bb:cb:05:81:bf:83:b4:e4:a3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91f8db02e2e971d54f90eef107090398fcc3d92
Validity
Not Before: Aug 23 10:01:53 2025 GMT
Not After : Aug 24 10:01:53 2025 GMT
Subject: CN=8e0fe59ad1059695b9c730038d22b790cad1a358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:56:c0:bd:e7:37:7e:61:e5:2d:77:e0:ed:
fa:a3:ac:43:c5:fe:32:1b:b1:a2:1f:19:6b:01:2d:
01:70:09:c2:a0:40:35:9d:79:16:f0:ba:97:f6:e0:
61:61:50:7e:27:08:9c:00:fe:54:0d:73:8e:43:88:
88:73:b9:e7:9e:f4:4a:0f:75:64:68:2b:ea:ec:08:
04:b4:4f:85:40:5f:42:c4:4b:b5:66:86:c4:29:fe:
ab:63:ca:b3:1c:a5:f5:c0:03:4e:f9:8a:36:a7:9b:
0e:a8:ab:9f:3d:59:44:83:83:53:c1:df:95:22:e4:
2e:02:fc:15:6c:7c:8e:25:14:39:28:f8:2d:58:c3:
c6:36:a3:51:f8:96:fa:21:30:2e:ed:02:02:fc:2a:
4b:af:20:d2:5c:95:2b:56:b1:4a:89:62:d4:6d:9d:
34:b0:27:40:ff:b9:5d:85:7c:84:d4:ef:6c:21:7c:
07:45:94:d8:26:95:9f:bd:d4:b5:d2:35:65:36:9f:
21:78:94:a6:2b:85:b1:a9:36:f0:86:0e:6c:60:06:
2b:77:ac:2a:64:87:f4:de:74:ad:94:f8:91:1a:a5:
08:64:fa:d0:13:97:40:26:d6:f7:87:90:80:15:c3:
cf:c9:fa:8d:64:f8:89:fc:fa:a7:9c:ee:66:d3:72:
4b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0F:E5:9A:D1:05:96:95:B9:C7:30:03:8D:22:B7:90:CA:D1:A3:58
X509v3 Authority Key Identifier:
keyid:B9:1F:8D:B0:2E:2E:97:1D:54:F9:0E:EF:10:70:90:39:8F:CC:3D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:a1:27:2b:9f:b2:e6:94:10:70:d5:f3:5b:df:c1:40:e7:37:
fd:a4:96:cc:e7:82:0c:82:97:5e:e2:54:34:b3:b3:f6:2f:4d:
9b:cb:d6:98:36:be:12:07:67:24:de:f1:dc:b6:b8:9c:45:f6:
9a:81:7b:f2:84:a3:16:23:cd:3e:47:07:fa:0d:98:e4:f8:73:
62:11:4d:29:50:54:3b:13:23:61:b7:ad:28:88:01:4a:1e:c0:
1d:4d:47:3c:bf:7c:25:2a:c4:51:b4:0a:5d:b7:b8:cd:d7:e9:
2f:3f:87:a8:cd:74:e6:20:5a:2d:7d:fc:35:2b:31:f0:71:19:
93:11:08:97:07:31:64:16:69:74:be:57:70:7f:41:8a:86:9e:
57:9b:9a:fc:7e:9c:52:9b:b4:9d:20:1c:dc:1a:80:95:78:46:
4b:47:f7:42:9e:9a:41:04:a4:5e:6d:9f:93:33:45:ac:8d:ca:
cf:4d:24:64:30:4b:59:08:81:7f:e9:09:12:fe:7c:d5:38:ca:
a4:bb:42:cc:75:d0:e9:e0:d1:a5:12:46:c7:da:ac:11:c4:7d:
25:e5:1c:8a:a7:55:bc:20:b6:0b:f6:07:de:17:b9:cb:21:c3:
1b:54:4d:7e:17:70:71:72:f7:66:d9:86:e9:93:c5:72:82:e6:
9d:b1:55:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:42:07 2025 by rpki-client