Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
File: UrDyNFHcBfp-z50etB3T0TdWRTs.mft (raw, json)
Hash identifier: MqVBLBKaNqElVErXTV+7R11KcSAgWTpHIAQZIkWhYog=
Subject key identifier: E4:19:0D:10:EC:51:27:B7:42:2F:5B:A7:FD:5A:6A:FF:F7:C1:15:CF
Authority key identifier: 52:B0:F2:34:51:DC:05:FA:7E:CF:9D:1E:B4:1D:D3:D1:37:56:45:3B
Certificate issuer: /CN=52b0f23451dc05fa7ecf9d1eb41dd3d13756453b
Certificate serial: 0198D4E05C30DB60EB250E3ADDC0D0B20EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 03:02:10 +0000
Manifest this update: Sat 23 Aug 2025 03:02:10 +0000
Manifest next update: Sun 24 Aug 2025 03:02:10 +0000
Files and hashes: 1: UrDyNFHcBfp-z50etB3T0TdWRTs.crl (hash: YWnigBlHYEb2g/DR+nAHBm1oOxEz2UaOh1qSrORoSp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:5c:30:db:60:eb:25:0e:3a:dd:c0:d0:b2:0e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b0f23451dc05fa7ecf9d1eb41dd3d13756453b
Validity
Not Before: Aug 23 03:02:10 2025 GMT
Not After : Aug 24 03:02:10 2025 GMT
Subject: CN=e4190d10ec5127b7422f5ba7fd5a6afff7c115cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b4:d5:c6:ca:b2:80:a1:15:3d:fa:2a:92:70:
1b:d3:e5:4f:63:7b:f8:98:05:10:12:78:1c:aa:a7:
d6:c2:8d:e6:82:8e:54:9d:5c:b3:83:8e:3f:b2:13:
cf:48:cf:47:0c:eb:82:30:78:6f:d4:71:f8:16:e8:
1f:8d:37:fb:67:e1:3a:fb:ae:31:13:70:fb:cf:ef:
85:a7:b3:92:e5:d1:6c:a8:96:e4:a7:a9:a9:2e:d2:
de:76:21:b4:e3:1a:24:67:cd:da:7a:93:e2:6f:a3:
58:54:32:6f:66:3f:b9:b1:c5:70:1a:27:7c:4e:86:
93:0b:7d:a2:8d:cd:ae:b1:b1:2a:b0:29:31:9f:6b:
43:92:8e:63:e0:d5:70:d1:43:bf:a0:2a:71:93:1c:
21:cb:ee:5a:f3:f1:7c:e1:a9:9c:dc:76:2c:a1:99:
0c:7e:4f:b5:68:19:2a:11:ba:50:d1:a1:25:f9:5a:
f3:fb:97:1f:56:69:29:88:14:a9:94:51:cd:cb:c1:
6f:c4:b5:9b:a7:23:53:ae:a2:87:0f:3c:62:28:13:
44:32:0d:82:ec:21:fc:c4:ac:c6:e1:69:ad:bf:85:
7c:45:60:dc:f5:cb:ef:97:80:cf:2a:c6:2f:21:26:
31:39:6c:03:02:9e:2c:38:1a:d1:cd:94:8f:fc:bd:
34:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:19:0D:10:EC:51:27:B7:42:2F:5B:A7:FD:5A:6A:FF:F7:C1:15:CF
X509v3 Authority Key Identifier:
keyid:52:B0:F2:34:51:DC:05:FA:7E:CF:9D:1E:B4:1D:D3:D1:37:56:45:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ce:1d:46:9c:60:de:20:33:e0:a3:7e:f1:93:ae:e8:2a:09:
97:ea:2c:5c:bc:d8:c4:2a:ca:5b:9a:89:8b:f6:d6:ef:34:68:
b8:54:54:ff:7a:a3:9f:1a:1f:22:d9:8a:86:2e:a0:40:fe:84:
48:ed:52:22:62:62:58:dc:98:47:cd:c5:82:ab:94:31:06:76:
20:c0:a5:72:98:dc:7f:b6:83:a3:9e:ec:b6:69:c6:f3:f7:71:
ac:25:52:e8:9c:56:6b:fb:1a:32:78:dc:d0:00:c7:cc:88:0f:
1e:ec:51:28:93:ee:e5:e4:1d:58:1f:f9:e8:94:10:0e:3d:26:
0e:8b:92:0c:48:b4:06:89:5b:f6:6b:76:ab:c2:a9:93:70:50:
8d:72:51:86:c0:01:0e:53:eb:7f:2d:57:5a:b5:d4:ce:8f:96:
27:56:73:48:a0:86:6c:db:58:a6:ea:0b:d2:41:8c:c7:b8:90:
1c:09:26:1e:4f:de:b0:57:d0:a1:0b:42:a0:b7:20:a6:04:fb:
ff:c5:58:d8:8f:4b:4c:8a:48:31:9c:af:29:bb:31:76:15:d8:
a8:86:2e:1f:e2:cd:24:7a:e9:01:22:6c:7d:85:96:9b:d7:6c:
11:d7:a3:2b:d9:e5:1b:60:d6:b4:0a:6b:c3:4e:7e:1b:3f:5f:
16:85:cb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:03 2025 by rpki-client