Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft
File: uIazyxP9IWfYnRIYXpNQbdRcmvk.mft (raw, json)
Hash identifier: 7BR6zVrIrmFRBA/802ysKbW+2oZOOuOGEC5JpDimMYw=
Subject key identifier: 14:F9:3C:A0:AB:15:38:4B:C0:AB:5D:AF:3F:A2:FB:CA:ED:D2:A1:38
Authority key identifier: B8:86:B3:CB:13:FD:21:67:D8:9D:12:18:5E:93:50:6D:D4:5C:9A:F9
Certificate issuer: /CN=b886b3cb13fd2167d89d12185e93506dd45c9af9
Certificate serial: 0197C380A854B6F4DC7516F7391AB95873BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uIazyxP9IWfYnRIYXpNQbdRcmvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft
Manifest number: 0ADC
Signing time: Tue 01 Jul 2025 01:01:18 +0000
Manifest this update: Tue 01 Jul 2025 01:01:18 +0000
Manifest next update: Wed 02 Jul 2025 01:01:18 +0000
Files and hashes: 1: uIazyxP9IWfYnRIYXpNQbdRcmvk.crl (hash: Xg1O3IOfD1qPsFgxIUc37JiYToYHxVEiUuqGCA4Afdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uIazyxP9IWfYnRIYXpNQbdRcmvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:80:a8:54:b6:f4:dc:75:16:f7:39:1a:b9:58:73:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b886b3cb13fd2167d89d12185e93506dd45c9af9
Validity
Not Before: Jul 1 01:01:18 2025 GMT
Not After : Jul 2 01:01:18 2025 GMT
Subject: CN=14f93ca0ab15384bc0ab5daf3fa2fbcaedd2a138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:57:f6:ab:dd:f0:5a:bc:79:2e:eb:87:bd:b3:
6e:95:ca:75:ce:38:ff:4d:2a:d0:5c:6f:45:96:25:
07:f0:3c:3c:05:26:78:d6:7e:3d:ea:99:2e:a4:e5:
47:27:a6:7d:e3:7a:6c:8f:69:da:01:ee:89:4b:84:
21:72:06:b1:9a:a8:1e:88:be:22:e3:b3:bd:77:bf:
9d:ff:af:c5:5c:2f:74:c3:6b:55:9e:b0:a3:7e:37:
ea:42:2c:30:da:74:5c:fe:49:a9:9d:0b:19:51:f6:
65:db:5b:62:59:c7:af:c6:46:5c:60:e4:61:6f:86:
50:ea:5d:ec:34:ed:32:f4:37:69:8b:a9:97:e0:95:
40:10:f9:25:9c:c5:74:30:a1:c3:c6:ef:6b:5e:ba:
36:d3:e6:06:12:96:2d:a7:b1:04:cb:7a:6e:6e:ca:
1f:c8:2c:b8:a2:88:c6:43:ea:f6:71:21:bf:03:19:
2a:fd:5f:fc:61:c2:4a:5c:99:5a:f4:42:cb:a8:36:
b0:68:81:3a:75:93:f5:74:f3:76:02:ad:78:55:4f:
77:0a:ea:a8:ae:b9:f7:80:fd:2a:3d:98:c0:ec:f4:
b8:14:c5:fc:bf:f7:9c:5e:51:5c:5e:52:33:e6:f2:
ca:ec:b9:4f:89:f3:15:14:fc:e9:99:2a:3b:ec:f9:
8c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F9:3C:A0:AB:15:38:4B:C0:AB:5D:AF:3F:A2:FB:CA:ED:D2:A1:38
X509v3 Authority Key Identifier:
keyid:B8:86:B3:CB:13:FD:21:67:D8:9D:12:18:5E:93:50:6D:D4:5C:9A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uIazyxP9IWfYnRIYXpNQbdRcmvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ca:e1:57:4b:c8:d9:7d:79:8a:d7:a1:25:e9:ee:c2:76:40:
4e:77:7e:2a:f8:e3:64:48:10:56:90:1c:f9:3b:ae:ca:23:6c:
06:78:f2:c9:43:98:ea:c1:e6:dc:0c:dc:d9:46:5a:3e:08:d8:
e3:d4:24:59:b9:76:61:7d:d9:80:59:58:a5:f2:55:a1:9f:21:
b1:d2:28:9d:e2:de:fc:c9:8d:dc:1e:b7:d3:51:ae:a0:ff:20:
ab:e4:83:64:32:b8:9e:e2:4d:bf:07:0a:ab:75:47:1a:b7:cf:
b9:04:c5:78:c2:63:c4:9c:19:db:c1:b3:eb:c7:de:f6:b8:d8:
1f:bf:f5:e1:d5:b2:6f:79:84:c2:c7:a2:1d:1e:2d:3a:1e:66:
6a:b8:b5:c2:40:9d:7c:19:33:0f:14:4b:18:51:4f:fc:a5:d0:
38:c6:88:f5:b6:7c:e2:33:9b:76:8b:b9:22:0d:48:d9:b9:6b:
64:5c:3d:84:db:c7:d5:6d:76:63:b3:25:8f:cd:4e:ca:37:80:
2b:cb:d2:80:8d:2f:4c:36:9e:f4:c1:e1:2f:bf:97:4f:64:25:
6c:9f:03:23:85:74:5f:42:50:33:3f:3a:b9:11:b4:d7:3c:96:
36:c9:39:0f:9f:91:7a:ad:12:71:6e:27:a5:f1:f9:c1:e1:43:
79:e3:da:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:07:51 2025 by rpki-client