Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
File: ujSP3hs60izyj-ZAMK4v5PIst_s.mft (raw, json)
Hash identifier: kF9ppP38BtLgu7T768lKqKwKpYwT4pbjBvBc0Bln9lA=
Subject key identifier: 8D:25:1E:04:9A:06:22:DD:C2:BC:82:6E:F4:FC:F0:4E:A8:84:43:9A
Authority key identifier: BA:34:8F:DE:1B:3A:D2:2C:F2:8F:E6:40:30:AE:2F:E4:F2:2C:B7:FB
Certificate issuer: /CN=ba348fde1b3ad22cf28fe64030ae2fe4f22cb7fb
Certificate serial: 0197B6A0A375CEA23D592B346A1C424A409A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
Manifest number: 1294
Signing time: Sat 28 Jun 2025 13:01:10 +0000
Manifest this update: Sat 28 Jun 2025 13:01:10 +0000
Manifest next update: Sun 29 Jun 2025 13:01:10 +0000
Files and hashes: 1: ujSP3hs60izyj-ZAMK4v5PIst_s.crl (hash: 9wG5LHbYVeHZJVrXqRmWec+AEJzQXtRMFowXEg5HmNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:a3:75:ce:a2:3d:59:2b:34:6a:1c:42:4a:40:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba348fde1b3ad22cf28fe64030ae2fe4f22cb7fb
Validity
Not Before: Jun 28 13:01:10 2025 GMT
Not After : Jun 29 13:01:10 2025 GMT
Subject: CN=8d251e049a0622ddc2bc826ef4fcf04ea884439a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:81:42:08:aa:c8:bd:bc:3a:61:9e:4c:63:fb:
bb:a9:3e:77:3c:b8:ef:58:dd:30:76:63:87:c1:f1:
07:cb:93:1e:2d:ef:a5:ca:a0:5d:d0:4e:d9:2a:b2:
d7:be:6b:d5:5b:bc:32:3d:e9:a2:ec:39:15:ab:99:
8f:bd:d7:39:ba:8a:3f:4f:e0:bd:f1:72:3f:58:c7:
d7:5f:52:7c:c3:d3:e4:39:e2:09:01:aa:ef:dd:b4:
f0:bb:a4:31:19:54:47:1b:36:63:3c:62:59:fc:21:
cd:52:ce:8f:54:23:f6:43:d2:1c:75:ea:c0:fc:d1:
dc:a3:80:64:ea:30:54:a7:ad:cb:b6:16:27:8f:b5:
59:c6:9e:47:ac:8d:e6:d8:b3:85:00:c2:a9:71:fb:
e8:34:27:1a:db:40:5a:a8:e2:5d:f5:bd:71:25:bb:
34:3f:d3:2b:a9:75:31:ea:9b:80:26:49:10:73:3e:
a7:bb:4e:0c:36:75:d1:7a:0e:e4:b8:fa:81:fe:f4:
c5:ac:6d:3c:97:cd:37:ed:d0:b3:68:30:10:a1:e1:
fc:2c:99:8f:3a:85:66:e9:b2:33:da:7a:31:93:a0:
0c:0c:fc:46:5b:07:0a:ae:08:6f:49:be:d1:f7:76:
a5:74:68:09:58:66:60:c2:0f:d6:a3:61:25:a3:fb:
d1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:25:1E:04:9A:06:22:DD:C2:BC:82:6E:F4:FC:F0:4E:A8:84:43:9A
X509v3 Authority Key Identifier:
keyid:BA:34:8F:DE:1B:3A:D2:2C:F2:8F:E6:40:30:AE:2F:E4:F2:2C:B7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:89:63:8d:e6:e0:c5:23:77:03:66:ac:13:6e:dc:a0:4b:38:
65:57:b6:61:f4:3a:f6:fa:3b:09:e6:9b:8a:e5:6f:bf:04:f0:
67:12:d4:b4:ab:11:ee:25:23:70:85:fc:c6:a5:66:ff:83:29:
93:2e:16:1b:98:90:f9:a3:7f:71:2c:6f:32:d1:8a:0a:2a:ab:
64:d1:87:45:a7:c9:d6:d4:cc:fd:d3:27:d0:9e:eb:2e:d4:36:
ab:f2:49:86:17:e5:74:f7:b4:10:2c:b3:8d:7a:f4:3e:ce:5f:
49:98:56:8f:22:20:26:64:1c:e6:12:62:fd:a1:61:88:00:6c:
c4:31:b5:e2:2e:15:dc:28:c2:86:29:7b:4d:2c:86:34:ce:9e:
68:1d:4c:00:64:11:63:9c:67:9f:99:2f:a7:c6:43:c0:77:b0:
d3:94:b3:2e:8d:be:9b:1b:23:52:62:00:9a:c5:32:b9:fe:d8:
e5:0e:8e:da:e7:99:55:ac:3a:09:cd:e9:ad:ce:96:33:4a:e7:
fa:9a:39:05:6d:6f:03:a3:28:be:35:20:82:87:02:d1:b1:0d:
11:49:ac:53:7e:3e:06:95:cb:40:b0:c0:df:35:f7:47:74:e4:
76:75:79:8c:1d:da:75:4e:6f:7b:49:4c:5c:88:86:98:26:87:
3d:d7:ba:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:14 2025 by rpki-client