
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
File: u_D5EC2y6-GvHQdRaEQ4anlj71w.mft (raw, json)
Hash identifier: Hf1HQs5/QzRaZD15YJyDk/frlcdY5fzLgkG5mtwg5+s=
Subject key identifier: 03:88:E2:DF:2E:EA:B2:79:70:B1:80:B8:2B:1E:C1:69:2A:C3:A6:AE
Authority key identifier: BB:F0:F9:10:2D:B2:EB:E1:AF:1D:07:51:68:44:38:6A:79:63:EF:5C
Certificate issuer: /CN=bbf0f9102db2ebe1af1d07516844386a7963ef5c
Certificate serial: 0198D583699D9AAD459F4E6E3688E4FAF6A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
Manifest number: 054A
Signing time: Sat 23 Aug 2025 06:00:15 +0000
Manifest this update: Sat 23 Aug 2025 06:00:15 +0000
Manifest next update: Sun 24 Aug 2025 06:00:15 +0000
Files and hashes: 1: u_D5EC2y6-GvHQdRaEQ4anlj71w.crl (hash: zBjr4JTU5VgPH18jzSYAmf+JHSvNVz6baKhT8bRdfoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:69:9d:9a:ad:45:9f:4e:6e:36:88:e4:fa:f6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf0f9102db2ebe1af1d07516844386a7963ef5c
Validity
Not Before: Aug 23 06:00:15 2025 GMT
Not After : Aug 24 06:00:15 2025 GMT
Subject: CN=0388e2df2eeab27970b180b82b1ec1692ac3a6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8f:c8:56:10:17:9d:0f:69:df:6a:33:5e:62:
56:97:1a:a6:19:96:92:a3:a9:1b:3b:5f:45:b4:fa:
1a:8d:e7:15:aa:bc:7d:8f:7e:6c:e7:9a:b3:f3:41:
d8:9f:3f:03:24:fc:25:28:6d:99:c6:44:1a:a7:5d:
a1:24:f1:5e:8a:5a:19:47:88:e1:79:21:ba:88:e0:
5f:54:7d:fd:70:3a:44:48:43:39:9e:64:be:53:75:
3b:54:50:a3:9f:c8:9c:a2:87:11:ea:4e:f6:70:37:
1d:04:9a:06:6d:83:c2:17:44:5b:af:64:3b:81:53:
0f:db:0c:2f:8b:d2:f7:3b:0f:78:1b:9d:37:58:0c:
d1:a0:9b:85:f4:f6:21:a6:3f:98:ab:1b:4a:0a:63:
e9:9f:82:d0:56:7a:0c:28:50:ff:c6:5c:5d:a0:e5:
5f:46:8c:66:54:cf:72:42:8d:80:06:c7:11:87:26:
f9:a2:bb:b2:ac:ae:bd:13:54:23:7b:9c:35:8c:04:
82:2e:f5:af:00:d2:b5:59:47:a3:22:dd:b2:86:a9:
43:9f:25:13:5b:f6:4f:77:6e:54:82:b2:1a:5f:a2:
98:52:c2:fa:6e:97:bc:70:75:9b:59:13:a8:2f:4f:
5d:3c:3e:8c:5e:30:32:ac:32:a6:51:4f:0e:71:c7:
b7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:88:E2:DF:2E:EA:B2:79:70:B1:80:B8:2B:1E:C1:69:2A:C3:A6:AE
X509v3 Authority Key Identifier:
keyid:BB:F0:F9:10:2D:B2:EB:E1:AF:1D:07:51:68:44:38:6A:79:63:EF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:63:ba:6f:7a:08:f1:51:23:c1:53:12:05:53:d2:ee:b8:76:
68:fc:fa:37:b3:16:70:61:3d:69:30:92:8c:0e:eb:3f:1c:1e:
83:e5:92:73:11:1f:40:91:4e:11:a4:1c:8e:ba:84:f7:78:f6:
da:13:17:e9:bf:fb:47:52:e5:f2:e3:d8:0f:3e:8c:a7:19:6f:
09:df:2b:91:8b:24:91:d2:c7:d7:c5:e9:46:4f:5f:b0:8b:a0:
9a:3c:49:e4:76:cf:e7:fe:08:1e:00:f8:07:f9:f1:b3:49:6a:
03:8f:41:3c:31:33:19:35:ae:df:a4:bb:3d:03:56:ed:6c:d1:
7a:79:01:59:90:ef:88:fa:e2:23:a8:88:83:ba:32:fe:86:68:
ca:e1:6b:43:1d:da:d1:2d:88:44:91:9f:d8:2c:e6:d9:28:42:
58:51:f2:b4:c1:d0:ee:a4:d5:c7:53:be:d1:e3:b3:9d:40:40:
c1:c6:b2:15:e3:67:e2:d9:2b:fe:51:1c:67:ee:86:78:b8:94:
70:e0:25:bf:4f:74:99:75:15:6b:76:6c:77:e1:fb:f3:a7:61:
7a:b5:a9:90:71:ce:d0:88:6f:87:dd:2e:f7:af:14:e6:6b:5f:
e7:5f:7d:6a:5f:b8:91:86:43:a7:78:3a:ab:36:62:2d:fe:ae:
53:91:c8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:01:36 2025 by rpki-client