
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft
File: UZxxlGfHXvlxe8YrftrpALovRiU.mft (raw, json)
Hash identifier: b0IeG4sB0tegAnjPLyAaYV0WAWu8xsC/8DxMLV3Y9Sk=
Subject key identifier: 3D:DE:E5:77:D6:CF:4F:3D:7D:C0:48:BE:CC:87:CB:A9:0F:5B:24:B5
Authority key identifier: 51:9C:71:94:67:C7:5E:F9:71:7B:C6:2B:7E:DA:E9:00:BA:2F:46:25
Certificate issuer: /CN=519c719467c75ef9717bc62b7edae900ba2f4625
Certificate serial: 0198D84FAE4205B532B95907C272295F7CEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZxxlGfHXvlxe8YrftrpALovRiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft
Manifest number: 81
Signing time: Sat 23 Aug 2025 19:02:37 +0000
Manifest this update: Sat 23 Aug 2025 19:02:37 +0000
Manifest next update: Sun 24 Aug 2025 19:02:37 +0000
Files and hashes: 1: UZxxlGfHXvlxe8YrftrpALovRiU.crl (hash: zCMNRz9to6Se97RSEpXpmt0b+Y5F0gboWn/3LvwjhJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZxxlGfHXvlxe8YrftrpALovRiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:ae:42:05:b5:32:b9:59:07:c2:72:29:5f:7c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519c719467c75ef9717bc62b7edae900ba2f4625
Validity
Not Before: Aug 23 19:02:37 2025 GMT
Not After : Aug 24 19:02:37 2025 GMT
Subject: CN=3ddee577d6cf4f3d7dc048becc87cba90f5b24b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:58:d1:8d:df:fe:ed:84:11:5d:01:a5:79:0c:
51:d4:8b:32:dd:ec:3a:d7:cd:ce:fd:cb:99:71:6e:
3c:84:fe:1a:4d:6f:fa:d4:51:7f:71:6c:ae:f4:0b:
88:fc:6a:5f:34:64:36:16:cb:b5:33:f2:d9:c0:d7:
da:a5:84:a3:c3:a0:97:a1:c1:37:88:8e:ec:57:e9:
0c:22:e0:75:79:ca:50:f7:5a:29:ed:de:a8:c4:10:
97:20:f6:4b:b7:d8:18:ba:26:c6:cc:fc:fd:a1:c2:
77:d0:ae:f0:06:c4:ee:f0:07:a1:77:af:5b:96:9f:
7f:01:ca:39:23:e5:fa:94:14:00:00:f4:de:75:98:
fc:d0:b0:ec:39:c1:93:1d:2e:87:07:9b:ed:34:4b:
f4:d1:79:4d:97:24:76:0e:e3:d1:bf:40:2e:29:6a:
01:82:8e:59:a2:09:32:12:1b:9b:91:06:56:2a:72:
43:df:45:83:86:8c:d7:dd:3c:c0:5d:09:fe:6c:ae:
6d:73:b7:cd:73:a8:41:4e:4e:80:5e:14:bd:d3:2d:
59:09:49:ba:d3:0a:7f:eb:49:af:14:94:5a:cc:ad:
d1:48:06:ab:b8:d3:8f:f4:b3:f6:58:11:d5:93:24:
aa:65:88:0c:29:ed:40:92:35:c3:e0:e7:7f:bf:ef:
21:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DE:E5:77:D6:CF:4F:3D:7D:C0:48:BE:CC:87:CB:A9:0F:5B:24:B5
X509v3 Authority Key Identifier:
keyid:51:9C:71:94:67:C7:5E:F9:71:7B:C6:2B:7E:DA:E9:00:BA:2F:46:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZxxlGfHXvlxe8YrftrpALovRiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:90:dd:28:e8:29:9d:60:6b:9d:dc:df:37:a7:f4:ff:7f:5e:
54:a9:f9:95:da:02:f0:94:5a:80:be:f5:32:d2:8a:6c:6f:a7:
44:b9:be:ca:9c:46:6a:c2:79:af:bf:f4:f2:2e:af:eb:e7:03:
7a:14:74:d0:7b:3a:b9:7d:2e:1a:c0:eb:0e:45:a6:8d:df:ff:
23:68:89:dd:28:d7:72:1a:76:dd:6e:5a:76:a5:9e:7a:b7:33:
6e:74:7a:f8:02:36:af:e7:72:d7:c8:a3:c6:82:68:64:d1:d2:
a5:61:26:3e:0b:20:79:9e:65:86:18:1d:54:2a:0e:80:88:ac:
3d:00:aa:b0:b3:54:b3:6d:a4:d3:28:07:c9:e9:8b:9c:eb:fe:
55:3a:a1:f2:9f:2a:0e:01:8f:c0:81:c1:ba:bc:67:3c:44:b3:
86:0f:d7:bf:dd:6e:f7:2a:78:06:24:a9:a0:3a:56:4f:60:06:
11:89:35:39:05:77:f4:58:a7:99:c7:fe:49:56:ba:22:6a:a5:
26:83:fa:b2:91:f6:af:59:6c:3d:06:1c:66:c9:5b:09:28:66:
25:9d:25:57:69:7c:43:b0:b8:bf:74:ce:42:56:46:3f:a9:72:
36:87:f7:e7:d9:5d:fb:53:7f:65:ef:96:6d:4e:5d:35:cd:19:
8d:88:19:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:12:20 2025 by rpki-client