Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
File: uUZ8BbpC7h85pkpT4dA0Azbl48M.mft (raw, json)
Hash identifier: r9TwPg29XOMuCwwQkGZ5oVwWfCARlppWSw8DNn0ITx0=
Subject key identifier: 10:C0:0E:2E:A5:25:75:B7:F6:28:4F:28:EE:C9:1C:E0:B0:4C:E7:E0
Authority key identifier: B9:46:7C:05:BA:42:EE:1F:39:A6:4A:53:E1:D0:34:03:36:E5:E3:C3
Certificate issuer: /CN=b9467c05ba42ee1f39a64a53e1d0340336e5e3c3
Certificate serial: 0198D5BC2C1E07A81C4882B9EDDCA753847B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUZ8BbpC7h85pkpT4dA0Azbl48M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 07:02:15 +0000
Manifest this update: Sat 23 Aug 2025 07:02:15 +0000
Manifest next update: Sun 24 Aug 2025 07:02:15 +0000
Files and hashes: 1: uUZ8BbpC7h85pkpT4dA0Azbl48M.crl (hash: dUryykIknyOtuYr2sO+ID7waBuyEl2AreZk+X0BkA/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUZ8BbpC7h85pkpT4dA0Azbl48M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:2c:1e:07:a8:1c:48:82:b9:ed:dc:a7:53:84:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9467c05ba42ee1f39a64a53e1d0340336e5e3c3
Validity
Not Before: Aug 23 07:02:15 2025 GMT
Not After : Aug 24 07:02:15 2025 GMT
Subject: CN=10c00e2ea52575b7f6284f28eec91ce0b04ce7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4a:93:bf:b1:de:5a:fe:4e:0b:3f:97:bb:70:
65:8a:81:b6:b4:ac:4c:af:98:40:b1:f8:ca:43:e1:
f6:e0:6c:9f:45:ac:95:0c:14:78:20:22:c1:e7:55:
f4:7f:d0:8b:64:1f:35:9c:1d:ce:c0:58:68:94:19:
a3:c2:5b:7b:ec:b7:2d:a0:8b:55:18:59:8c:e2:15:
19:53:53:a5:51:7f:e0:8a:7f:57:b6:de:67:0d:15:
61:87:cc:86:6f:85:7b:fa:37:7b:54:04:be:c5:26:
6b:11:6f:28:0d:46:4c:ea:8b:dd:d6:94:b8:ea:f7:
7d:a9:c7:ec:ce:0a:e6:ee:98:02:85:c5:ca:35:d7:
29:dc:00:d3:28:28:db:de:dd:e9:09:4e:b7:8b:03:
74:0e:d4:59:d7:d9:74:13:04:7a:33:dd:26:f6:b9:
d2:6b:de:dd:33:11:15:23:5d:ef:f5:98:a0:22:da:
f7:30:f0:ab:a2:0a:97:fa:22:9b:f8:a1:cc:09:f5:
d3:cb:07:37:9b:fb:82:eb:f4:86:89:48:14:6e:2d:
0d:85:6c:b3:ff:1c:51:59:9c:5a:20:05:b4:f2:a5:
39:bd:35:86:5f:27:40:ca:73:1f:db:5c:53:04:54:
ab:23:82:fb:06:86:24:91:af:3e:b9:7a:1f:00:7f:
3b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C0:0E:2E:A5:25:75:B7:F6:28:4F:28:EE:C9:1C:E0:B0:4C:E7:E0
X509v3 Authority Key Identifier:
keyid:B9:46:7C:05:BA:42:EE:1F:39:A6:4A:53:E1:D0:34:03:36:E5:E3:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUZ8BbpC7h85pkpT4dA0Azbl48M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a6:da:ee:5c:98:20:58:d7:d9:8d:54:53:8d:d0:aa:bd:cf:
4f:f3:65:96:d3:29:18:7b:51:74:bf:3d:32:b4:2f:60:fd:e8:
9d:18:d4:bf:90:d2:db:e5:0c:7d:70:ed:1d:f9:2a:1c:6c:51:
98:88:7b:b1:7b:3c:9a:cb:45:cf:0f:81:0c:57:d2:33:f1:73:
d5:d9:26:80:a6:af:f0:d4:e8:46:15:99:99:c5:18:78:7c:7c:
6e:a2:c5:a4:8c:b6:f0:29:eb:c5:da:91:4d:01:d6:6f:89:70:
2d:36:c5:ff:16:68:58:4d:81:84:ff:72:b1:50:25:f6:3a:de:
fd:31:5e:a4:b5:32:72:a0:ef:f8:5e:00:b0:af:b6:ca:19:51:
12:d9:82:cc:98:37:a7:fc:fa:96:f1:7c:5c:2a:0d:52:3a:e7:
43:98:a7:19:e4:e7:10:17:5b:d2:37:3a:d0:eb:0c:2e:0a:62:
76:1e:75:7e:e5:bc:70:f7:9f:33:76:00:fa:a5:a4:7d:49:05:
b8:34:1a:c5:ec:54:43:64:85:40:5f:c0:14:d2:0a:94:ac:26:
a3:48:9f:27:37:0e:91:4a:f0:f4:57:39:f6:14:95:4e:19:91:
37:c6:8e:22:68:cf:5f:2b:24:80:5f:59:ce:11:75:f1:67:46:
a9:64:fe:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:33 2025 by rpki-client