Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/6e1f38-6807-4866-a9ed-43bf1c43ec0f/1/uF4L5rcnnN7PeL3WQQX4RD0MDAI.mft
File: uF4L5rcnnN7PeL3WQQX4RD0MDAI.mft (raw, json)
Hash identifier: c2yqcinw0asznMtbHsi8nwfcURPxfRU3VerFrkKPnXc=
Subject key identifier: 9E:5D:E1:F6:8E:2B:33:C4:CB:5E:6B:82:DE:E1:A4:2D:3E:F6:04:73
Authority key identifier: B8:5E:0B:E6:B7:27:9C:DE:CF:78:BD:D6:41:05:F8:44:3D:0C:0C:02
Certificate issuer: /CN=b85e0be6b7279cdecf78bdd64105f8443d0c0c02
Certificate serial: 0198D473841050C1355CE346D85838B8D03F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uF4L5rcnnN7PeL3WQQX4RD0MDAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/6e1f38-6807-4866-a9ed-43bf1c43ec0f/1/uF4L5rcnnN7PeL3WQQX4RD0MDAI.mft
Manifest number: 109A
Signing time: Sat 23 Aug 2025 01:03:16 +0000
Manifest this update: Sat 23 Aug 2025 01:03:16 +0000
Manifest next update: Sun 24 Aug 2025 01:03:16 +0000
Files and hashes: 1: uF4L5rcnnN7PeL3WQQX4RD0MDAI.crl (hash: 5aRF9wpYZAwWic8j1eVzfOurJZVw2xqQK7hcxf1Z0vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/6e1f38-6807-4866-a9ed-43bf1c43ec0f/1/uF4L5rcnnN7PeL3WQQX4RD0MDAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/6e1f38-6807-4866-a9ed-43bf1c43ec0f/1/uF4L5rcnnN7PeL3WQQX4RD0MDAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uF4L5rcnnN7PeL3WQQX4RD0MDAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:84:10:50:c1:35:5c:e3:46:d8:58:38:b8:d0:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85e0be6b7279cdecf78bdd64105f8443d0c0c02
Validity
Not Before: Aug 23 01:03:16 2025 GMT
Not After : Aug 24 01:03:16 2025 GMT
Subject: CN=9e5de1f68e2b33c4cb5e6b82dee1a42d3ef60473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:01:be:6e:ba:73:b3:bb:05:78:94:19:ed:40:
9c:0f:75:57:60:95:45:a3:86:80:da:6c:4a:e8:c4:
8e:9a:80:e9:68:2f:b1:15:8d:74:dc:61:f2:92:02:
88:f4:5f:c5:ad:ab:ec:7a:57:53:6e:ee:f5:ae:ae:
91:d0:de:d1:11:fe:83:b0:1b:bf:4b:c8:16:e4:7c:
1d:b2:5e:f3:b3:e8:3b:af:b2:32:89:b4:03:00:db:
58:49:c2:0f:2f:04:51:9d:63:75:01:21:bf:0d:09:
04:67:a2:65:42:73:de:49:65:92:a2:0d:3c:95:e0:
64:6e:99:24:a5:29:b6:45:fd:ae:9f:8f:0d:e5:5a:
83:05:b6:25:76:c4:93:2b:cb:6f:95:7b:32:f2:e3:
0f:14:50:29:ab:b2:96:f6:9e:d7:8d:fc:e8:5b:21:
e3:92:13:80:87:fe:02:4d:ca:94:1e:6c:4f:06:ef:
a8:f9:ae:3e:9b:78:9d:cd:49:4c:c3:99:24:7a:bf:
d7:3d:61:b9:d5:69:eb:e5:1e:33:35:56:a2:46:d8:
98:68:c5:0a:14:a7:60:2f:da:ca:ef:64:7f:ca:91:
d3:0f:95:44:d2:b5:c3:76:38:fe:b7:0f:82:a7:0f:
3c:a8:e2:71:2d:50:74:2f:a6:fe:2f:f9:a3:c2:dd:
84:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5D:E1:F6:8E:2B:33:C4:CB:5E:6B:82:DE:E1:A4:2D:3E:F6:04:73
X509v3 Authority Key Identifier:
keyid:B8:5E:0B:E6:B7:27:9C:DE:CF:78:BD:D6:41:05:F8:44:3D:0C:0C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uF4L5rcnnN7PeL3WQQX4RD0MDAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6e1f38-6807-4866-a9ed-43bf1c43ec0f/1/uF4L5rcnnN7PeL3WQQX4RD0MDAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6e1f38-6807-4866-a9ed-43bf1c43ec0f/1/uF4L5rcnnN7PeL3WQQX4RD0MDAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0f:bb:0b:19:a3:3e:68:29:b5:14:30:a0:24:0b:eb:1b:4e:
79:36:da:ac:ba:25:ef:7b:4a:aa:b1:7d:e3:1e:05:b4:18:90:
35:a2:21:25:e0:07:23:cd:aa:19:1f:a4:91:f7:ef:a7:6d:81:
72:6d:09:38:f8:6b:2a:a3:96:01:99:34:ea:63:d2:23:6b:39:
15:00:5d:2b:3c:a0:7b:a7:ba:88:d5:bc:4c:d9:eb:26:6f:7a:
ae:05:10:2f:dc:5a:23:b7:1b:0d:9b:93:7b:9d:61:76:3d:1e:
2e:48:90:88:f5:8e:1e:ce:db:80:e0:da:ba:81:8e:e6:8d:9a:
b1:78:9a:ab:7a:8d:5a:df:79:fd:80:8a:b4:e5:1d:c5:ca:76:
ee:dc:f0:dc:35:11:dd:75:cb:a7:d8:15:d7:15:73:9f:61:f2:
dc:87:b1:5c:49:f4:60:cf:11:49:95:e3:00:4f:fd:78:0d:14:
cf:47:0d:cf:ab:b2:7d:39:85:55:3c:7f:75:81:ff:85:85:b1:
71:a7:63:83:19:a3:18:d0:92:ed:de:c9:5a:a3:71:7b:cf:eb:
02:cc:da:bc:c4:60:0a:0b:cb:29:16:0d:47:91:6f:06:a6:f7:
77:fc:8a:2e:19:ee:40:3c:f9:37:d5:3e:85:13:a3:50:6c:c5:
a0:9c:4c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:44 2025 by rpki-client