Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft
File: ur1G6GLeAxkf8xMazHjhlwlZahw.mft (raw, json)
Hash identifier: 3CrPwzUFz4c8ZxWPt6a3vYjKKsUAlCn0wFBODo+Q29E=
Subject key identifier: BD:16:54:37:3E:1D:D5:52:9D:D6:7C:2D:E8:D6:B8:6A:14:17:6B:F2
Authority key identifier: BA:BD:46:E8:62:DE:03:19:1F:F3:13:1A:CC:78:E1:97:09:59:6A:1C
Certificate issuer: /CN=babd46e862de03191ff3131acc78e19709596a1c
Certificate serial: 0198D4E09D76BBA4D011DC8F1A39951A7B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ur1G6GLeAxkf8xMazHjhlwlZahw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft
Manifest number: 20
Signing time: Sat 23 Aug 2025 03:02:26 +0000
Manifest this update: Sat 23 Aug 2025 03:02:26 +0000
Manifest next update: Sun 24 Aug 2025 03:02:26 +0000
Files and hashes: 1: ur1G6GLeAxkf8xMazHjhlwlZahw.crl (hash: vyo/NzMMcfO/QyBUwQSjbnyIoLcnS/TJu8KX/HMbwGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ur1G6GLeAxkf8xMazHjhlwlZahw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:9d:76:bb:a4:d0:11:dc:8f:1a:39:95:1a:7b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=babd46e862de03191ff3131acc78e19709596a1c
Validity
Not Before: Aug 23 03:02:26 2025 GMT
Not After : Aug 24 03:02:26 2025 GMT
Subject: CN=bd1654373e1dd5529dd67c2de8d6b86a14176bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cf:1c:67:8a:07:62:df:4f:c5:46:9b:cc:a4:
6e:a5:22:1f:0f:f8:22:76:1b:f2:0f:82:97:b7:94:
5c:6d:86:6f:18:b9:67:b0:0e:ca:fa:a0:47:91:68:
5c:17:84:ca:52:f7:90:e9:06:98:26:c6:fd:ff:6f:
1a:41:0b:21:a0:6e:e9:02:e1:78:7f:d4:13:e9:72:
a0:bd:9c:d4:ff:1c:a5:98:aa:11:68:c6:af:df:67:
9b:2e:e7:e6:44:d7:24:62:a4:14:ea:35:7a:1e:df:
f5:c7:58:8f:16:bd:18:c5:fd:85:0f:97:90:70:bd:
64:39:21:60:95:fc:3d:ef:44:c7:6c:ce:1d:c6:a1:
a3:5c:74:91:be:f2:cd:1e:d7:60:2f:64:c5:44:d8:
fd:8c:bf:e1:06:df:d7:ba:6a:cd:50:0b:15:7d:a7:
fd:0f:b3:ff:01:d9:23:2d:15:d9:38:5a:6d:fa:df:
35:56:2e:f1:71:3b:1f:38:7b:91:63:f2:b3:db:66:
18:66:96:2a:f9:b5:10:fd:1d:c8:a5:e6:e7:49:10:
c2:86:b4:69:08:4d:c3:c8:57:45:a0:be:10:d1:02:
3b:5a:c5:cc:2c:06:37:e2:18:95:98:00:78:6e:78:
33:22:6a:9c:68:09:eb:5d:8f:66:be:a6:94:51:72:
cc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:16:54:37:3E:1D:D5:52:9D:D6:7C:2D:E8:D6:B8:6A:14:17:6B:F2
X509v3 Authority Key Identifier:
keyid:BA:BD:46:E8:62:DE:03:19:1F:F3:13:1A:CC:78:E1:97:09:59:6A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ur1G6GLeAxkf8xMazHjhlwlZahw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:19:f5:86:bc:17:f5:55:09:47:75:5b:f3:a7:0e:f1:05:7c:
d0:8e:cd:4c:38:c2:cb:4e:1b:ee:91:6a:27:fd:46:64:99:7d:
ba:29:62:e3:ea:48:68:b6:4c:b1:52:f1:ce:56:c5:23:f7:cc:
ca:e0:3e:ff:2b:e9:f8:3e:98:71:6b:78:75:2b:f8:68:dd:d2:
55:b6:d3:a1:75:0b:25:87:25:a1:7f:f8:dc:50:45:26:6b:a7:
0e:a5:eb:2f:9e:48:65:11:93:5d:4e:21:f5:f6:ad:c3:c7:8a:
36:7c:58:49:ab:15:23:d4:27:61:a1:27:8f:8b:e2:47:41:c0:
bc:6f:30:39:9c:01:5f:d3:ec:92:22:a5:21:89:f0:8f:c3:d4:
52:03:60:e2:14:b1:9c:2d:2c:3a:25:58:c5:04:cb:c0:a1:ea:
eb:c5:e1:6a:7e:4f:a4:ce:ca:97:1c:17:5a:01:b3:72:97:94:
28:68:c0:55:8e:51:fb:40:7a:26:8b:84:6a:cf:5f:3f:d3:e2:
37:6d:44:ee:22:56:84:b7:c5:d9:85:5b:08:9b:7d:0c:4a:7c:
9c:27:62:12:9d:8e:eb:3a:58:2e:ac:ce:cb:f4:75:d6:d1:22:
bb:ec:d3:5b:2d:96:3f:90:a6:0d:6c:b4:a2:6c:19:46:5e:2f:
b0:06:eb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:39 2025 by rpki-client