Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
File: u7kUAX20Xp91443ePwNXzitx2Cc.mft (raw, json)
Hash identifier: DAX9FggGZ4dlxoMkdj1ceCs1TLfcSflt1kVt961SExk=
Subject key identifier: E0:9D:1B:D4:33:5E:65:7D:61:36:06:43:41:6E:78:BE:7E:72:A0:7B
Authority key identifier: BB:B9:14:01:7D:B4:5E:9F:75:E3:8D:DE:3F:03:57:CE:2B:71:D8:27
Certificate issuer: /CN=bbb914017db45e9f75e38dde3f0357ce2b71d827
Certificate serial: 0198D65FF8508A0641433F284666A1C66B25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
Manifest number: 06F4
Signing time: Sat 23 Aug 2025 10:01:10 +0000
Manifest this update: Sat 23 Aug 2025 10:01:10 +0000
Manifest next update: Sun 24 Aug 2025 10:01:10 +0000
Files and hashes: 1: u7kUAX20Xp91443ePwNXzitx2Cc.crl (hash: LPrwz2euWPyBSg0RMCeJ2HrMwvtHL9mnfEoYeXzMlfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:f8:50:8a:06:41:43:3f:28:46:66:a1:c6:6b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbb914017db45e9f75e38dde3f0357ce2b71d827
Validity
Not Before: Aug 23 10:01:10 2025 GMT
Not After : Aug 24 10:01:10 2025 GMT
Subject: CN=e09d1bd4335e657d61360643416e78be7e72a07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:20:1a:f5:6b:14:78:0b:1c:04:da:13:03:75:
11:0b:51:55:6b:63:32:5a:30:36:fd:cd:4b:b6:8b:
68:c5:26:ae:88:86:ca:f0:a7:1a:01:6f:b9:fb:35:
71:53:6e:47:68:be:17:61:73:b9:8e:e4:44:a4:4b:
ea:d6:2a:fc:49:fb:31:83:3c:7f:f5:af:d4:29:48:
fe:05:86:a0:36:32:f6:7d:fa:e4:64:8f:94:e4:b7:
d8:66:63:e2:02:4f:3a:e6:9e:c3:45:a2:6f:49:b3:
70:32:87:da:85:a5:d5:04:a8:22:9d:5c:a3:25:e3:
81:3c:9e:ca:51:a4:8f:c3:95:d3:8a:21:08:33:d6:
10:2b:12:ee:0c:b1:0d:5e:18:54:0a:2d:9a:01:c3:
56:76:44:27:64:47:05:9a:b0:43:39:15:23:37:2e:
a7:c4:d2:b2:54:e8:81:52:24:c7:2a:69:e4:38:b8:
c0:ff:a1:e1:f2:30:3e:fe:69:d5:e6:71:c4:49:1e:
65:9a:2d:4f:a0:f2:8b:c4:67:b0:1e:47:0e:37:d5:
fb:61:37:cd:c6:29:9f:cf:0c:ad:12:dc:a8:74:61:
62:85:2a:e3:ec:5a:65:ca:48:ed:af:4d:5a:8b:43:
13:8c:ad:23:e4:0d:1e:68:fc:0f:ce:e2:f1:b6:ee:
8b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9D:1B:D4:33:5E:65:7D:61:36:06:43:41:6E:78:BE:7E:72:A0:7B
X509v3 Authority Key Identifier:
keyid:BB:B9:14:01:7D:B4:5E:9F:75:E3:8D:DE:3F:03:57:CE:2B:71:D8:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:44:5b:8f:cc:9b:2f:5c:cd:80:72:3a:9f:05:09:cb:67:f8:
fa:32:bb:19:c5:23:91:25:8b:a6:3b:ec:0a:5b:22:02:f5:a5:
d4:9e:6e:8a:63:05:fe:bc:b7:a1:d6:0e:13:57:b2:26:28:2d:
32:11:6e:18:0b:41:ef:28:7c:1e:cb:ce:7c:6a:03:09:89:3e:
20:b0:b8:ec:65:f9:a3:84:51:2e:ce:ba:db:ba:f7:52:86:4c:
d7:90:56:c2:ea:5a:74:b9:e5:7d:18:7a:c2:d4:e8:0c:31:84:
0d:03:81:aa:dc:fe:f1:f0:d4:43:6b:5b:d1:59:6e:1e:02:b4:
90:35:b8:b9:07:16:6f:9b:ef:18:7a:bd:d8:88:ea:75:62:1f:
42:6d:e2:90:52:99:c5:76:e9:ff:11:98:d2:c8:33:4f:70:6e:
ce:4f:d6:8d:30:e7:01:1f:3a:22:6d:f4:b8:cb:a6:b9:93:d4:
72:a7:44:ad:b3:51:27:75:11:c4:57:3b:4d:29:98:5f:8d:d2:
2a:83:19:bb:e9:c2:6b:0d:7c:06:56:ea:6b:7a:0c:0e:4c:b3:
a3:16:b4:82:3e:a2:8b:32:13:d4:eb:16:ea:ee:15:26:62:d9:
b8:eb:ed:9b:3b:8c:fe:e7:4b:df:49:0e:d4:da:00:58:d7:b4:
fc:ed:c4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:05:24 2025 by rpki-client