Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/bd335a-a55c-4555-a247-39961662353a/1/Un0m8LBCyUz2f2JeXY5i4qKudVI.mft
File: Un0m8LBCyUz2f2JeXY5i4qKudVI.mft (raw, json)
Hash identifier: z4RCGw0bhnUuDPrZyl/7Gq1ZQAQooZ3T4+8QkdOg55Y=
Subject key identifier: 9C:23:A1:45:21:86:B1:75:39:9C:90:88:0E:6E:6E:D5:E5:ED:DC:89
Authority key identifier: 52:7D:26:F0:B0:42:C9:4C:F6:7F:62:5E:5D:8E:62:E2:A2:AE:75:52
Certificate issuer: /CN=527d26f0b042c94cf67f625e5d8e62e2a2ae7552
Certificate serial: 0197B6D77DF498CD663BA714F414F8F0CAC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Un0m8LBCyUz2f2JeXY5i4qKudVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/bd335a-a55c-4555-a247-39961662353a/1/Un0m8LBCyUz2f2JeXY5i4qKudVI.mft
Manifest number: 057F
Signing time: Sat 28 Jun 2025 14:01:05 +0000
Manifest this update: Sat 28 Jun 2025 14:01:05 +0000
Manifest next update: Sun 29 Jun 2025 14:01:05 +0000
Files and hashes: 1: Un0m8LBCyUz2f2JeXY5i4qKudVI.crl (hash: ql1pMZitIrLjOmOcS/TCXEtAnTacTus57W6A1BXMw88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/bd335a-a55c-4555-a247-39961662353a/1/Un0m8LBCyUz2f2JeXY5i4qKudVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/bd335a-a55c-4555-a247-39961662353a/1/Un0m8LBCyUz2f2JeXY5i4qKudVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Un0m8LBCyUz2f2JeXY5i4qKudVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:7d:f4:98:cd:66:3b:a7:14:f4:14:f8:f0:ca:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=527d26f0b042c94cf67f625e5d8e62e2a2ae7552
Validity
Not Before: Jun 28 14:01:05 2025 GMT
Not After : Jun 29 14:01:05 2025 GMT
Subject: CN=9c23a1452186b175399c90880e6e6ed5e5eddc89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ad:28:1f:c3:8b:5d:77:b5:a4:39:73:ba:45:
90:df:4f:2c:04:17:95:4f:c8:67:ac:fc:e2:6f:c6:
29:f1:a6:22:c0:59:2f:87:7a:da:a6:83:09:11:ce:
bc:5e:67:1c:de:0b:56:53:45:4a:62:7a:09:6f:a5:
f6:b9:bd:a3:25:88:7a:69:fe:09:17:7b:cc:ff:f2:
58:63:ae:03:b2:b7:cd:a3:03:d7:34:93:45:c9:5b:
8b:77:e6:44:20:76:02:23:fc:a4:f9:84:ec:70:f8:
d2:a3:9c:e1:65:e4:28:28:d5:75:5f:e7:2c:b6:24:
78:88:12:46:af:88:74:0b:99:d7:46:ed:26:7a:81:
cd:48:be:b9:d6:57:a7:81:98:a3:f0:87:da:77:1d:
e4:a1:24:1f:8d:7c:70:ff:3a:d6:4d:f8:36:10:3a:
f2:33:ef:ce:03:a7:4f:68:cb:21:5d:0b:4f:b9:4b:
e6:7c:f3:98:d6:58:d3:08:20:ba:ca:2e:13:a4:e7:
0c:30:a5:37:a7:63:0a:90:95:0c:d3:50:53:78:f4:
b3:4b:fc:75:a8:dd:85:d5:64:cb:53:84:22:70:c7:
c7:c4:74:43:6c:0e:89:6f:8c:22:35:1c:26:e7:bc:
d1:74:9c:ed:55:1f:ee:b1:2b:de:c7:e5:7f:45:67:
ca:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:23:A1:45:21:86:B1:75:39:9C:90:88:0E:6E:6E:D5:E5:ED:DC:89
X509v3 Authority Key Identifier:
keyid:52:7D:26:F0:B0:42:C9:4C:F6:7F:62:5E:5D:8E:62:E2:A2:AE:75:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Un0m8LBCyUz2f2JeXY5i4qKudVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/bd335a-a55c-4555-a247-39961662353a/1/Un0m8LBCyUz2f2JeXY5i4qKudVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/bd335a-a55c-4555-a247-39961662353a/1/Un0m8LBCyUz2f2JeXY5i4qKudVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f5:07:01:3b:72:c7:7d:d9:fd:17:88:22:26:51:60:ec:7f:
20:1d:63:62:47:38:7d:33:27:da:19:54:61:64:d3:d3:63:c8:
fe:01:18:4a:ec:33:fc:62:c8:fd:74:1a:fd:3a:3a:0a:fd:33:
dd:2f:d0:83:37:5e:ae:5c:87:cd:c8:d6:de:a4:a2:69:45:aa:
0d:e2:81:09:be:1a:c4:e1:5b:f3:6d:40:06:8a:7e:f8:86:3c:
68:bf:43:c9:7a:e4:c1:91:3e:d2:2c:b6:13:d3:7e:6e:36:b4:
01:29:10:6d:d1:bf:1a:2a:ac:86:4c:eb:49:7a:df:25:ba:8d:
cb:60:bf:1b:95:20:05:54:6e:d3:49:44:1c:85:88:87:d6:3b:
0e:5c:b9:d2:29:83:19:a8:c9:3e:99:3e:e3:0b:2a:97:2a:68:
1a:03:3a:b1:1d:f7:53:08:3a:b8:95:4e:83:be:47:7d:7a:6a:
72:0d:57:7a:72:0e:d7:d0:61:d8:72:34:1f:f1:9b:29:a4:45:
0d:77:cb:f7:05:62:1c:48:1a:31:b9:38:a9:6b:10:63:ba:c2:
0f:3c:91:9b:ef:e7:00:86:02:ce:a8:18:21:da:57:ee:45:39:
44:2e:fd:8b:cb:3f:c6:33:6a:9a:55:81:f7:b2:ed:64:bd:04:
56:c2:73:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:50 2025 by rpki-client