Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
File: cUKDDu7SiwS83QP6P9pIxUha_P4.mft (raw, json)
Hash identifier: h9qqrEnKwjPfzgs9JODzwy6XrxN9qpqZZhfBt8+Ifqw=
Subject key identifier: 85:96:64:7A:26:60:50:EE:89:60:8F:B1:E1:A1:AE:BC:38:8B:EC:0B
Authority key identifier: 71:42:83:0E:EE:D2:8B:04:BC:DD:03:FA:3F:DA:48:C5:48:5A:FC:FE
Certificate issuer: /CN=7142830eeed28b04bcdd03fa3fda48c5485afcfe
Certificate serial: 0197CDCDB001939575D6D330DF59034BBA99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
Manifest number: 0E94
Signing time: Thu 03 Jul 2025 01:01:38 +0000
Manifest this update: Thu 03 Jul 2025 01:01:38 +0000
Manifest next update: Fri 04 Jul 2025 01:01:38 +0000
Files and hashes: 1: cUKDDu7SiwS83QP6P9pIxUha_P4.crl (hash: fZRfjwE8lOKOYbkW4w9Z66K0l5r79oWr0k+Tc65TmnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 01:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:cd:b0:01:93:95:75:d6:d3:30:df:59:03:4b:ba:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7142830eeed28b04bcdd03fa3fda48c5485afcfe
Validity
Not Before: Jul 3 01:01:38 2025 GMT
Not After : Jul 4 01:01:38 2025 GMT
Subject: CN=8596647a266050ee89608fb1e1a1aebc388bec0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5b:31:36:29:87:4b:dd:05:70:20:f0:c5:d3:
99:1c:35:2b:1c:cf:30:3b:00:06:02:e9:ff:8f:90:
4a:1e:d3:4f:9f:ee:e5:aa:fd:04:4c:f5:06:66:96:
62:6c:80:db:06:db:37:90:5c:1f:39:b2:c2:92:6f:
7d:05:2c:5f:90:6a:97:59:71:62:27:2d:03:e9:17:
28:e7:3a:0b:a1:11:f8:66:ed:f5:f3:4b:f9:2d:24:
e4:76:c2:ff:d1:96:25:8a:ce:c5:00:b1:90:e7:45:
90:2f:6e:14:8e:e9:9e:fe:fc:0b:3c:b7:9a:94:2a:
7a:86:a9:fb:35:af:20:76:35:bb:ae:74:8e:eb:49:
2e:89:0d:a1:6c:54:87:f6:a4:6e:87:c7:8d:de:ce:
2f:20:db:6d:d2:56:02:07:5c:c0:90:47:39:6e:dc:
f6:31:fd:5f:1e:fd:eb:2e:88:ae:0c:42:f6:cd:08:
a9:06:75:94:f2:5e:db:ca:35:f0:2c:e9:5a:7d:1b:
38:39:01:10:6c:77:51:b6:8c:1f:b8:05:01:46:8d:
c9:13:8a:06:d7:20:a9:54:06:35:af:3b:d1:17:b4:
1b:da:b5:64:6e:cb:65:b5:87:f1:f6:a7:e3:54:9d:
61:84:04:92:87:de:36:cc:4b:9d:06:24:c9:05:57:
52:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:96:64:7A:26:60:50:EE:89:60:8F:B1:E1:A1:AE:BC:38:8B:EC:0B
X509v3 Authority Key Identifier:
keyid:71:42:83:0E:EE:D2:8B:04:BC:DD:03:FA:3F:DA:48:C5:48:5A:FC:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e7:05:9b:b9:d9:1e:6e:a5:7c:26:03:74:82:c9:f3:f4:c3:
71:e9:5a:4b:8f:f5:20:8c:9e:d4:f5:a1:60:6d:ee:10:cb:fb:
d5:f9:9c:c3:a1:79:ab:2d:46:2e:39:43:cc:1c:ba:ce:2c:5c:
b0:59:50:6e:a6:c6:fe:32:12:1c:82:fd:a2:04:58:52:b1:58:
44:be:19:a2:93:0f:1d:6d:49:72:db:4e:b9:7f:74:89:3b:a9:
29:0f:4f:ec:07:6c:11:27:e0:db:b2:da:73:d1:40:ba:b0:4a:
cb:c8:ad:5d:94:7f:ad:5e:4e:d0:06:1b:45:48:94:20:dd:30:
a1:cc:76:32:e6:47:11:7d:88:bb:d3:7b:c1:0a:98:cc:09:fd:
95:20:0c:38:69:5d:4a:74:ec:3e:6e:c8:c0:66:6e:52:5a:9c:
d4:b0:2c:23:a5:93:44:cc:4b:7a:6c:cd:53:b5:34:a8:a8:08:
4c:9b:18:7a:d4:72:de:3e:e0:0a:d8:a2:5b:a5:2b:0c:2a:98:
e2:8b:a1:2d:63:6e:74:30:7a:c7:a6:f7:b2:7a:fd:b3:e5:ee:
f1:75:0a:ad:f6:cf:55:a5:92:ee:55:86:18:32:79:ff:6d:25:
81:0b:39:a5:24:c5:80:46:dc:e9:02:5f:98:5c:2b:74:15:92:
0d:ba:5e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:29:25 2025 by rpki-client