Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/6e1f38-6807-4866-a9ed-43bf1c43ec0f/1/uF4L5rcnnN7PeL3WQQX4RD0MDAI.mft
File: uF4L5rcnnN7PeL3WQQX4RD0MDAI.mft (raw, json)
Hash identifier: vynTnPViIBxF7vIT87w+T3yQ+zSgU4R2+LHaj1fE6rs=
Subject key identifier: B9:28:CC:14:78:3E:D0:DA:23:91:1D:15:56:FD:A8:97:F4:57:4C:7F
Authority key identifier: B8:5E:0B:E6:B7:27:9C:DE:CF:78:BD:D6:41:05:F8:44:3D:0C:0C:02
Certificate issuer: /CN=b85e0be6b7279cdecf78bdd64105f8443d0c0c02
Certificate serial: 0197C614842B152724ABA7291DD49BC72E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uF4L5rcnnN7PeL3WQQX4RD0MDAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/6e1f38-6807-4866-a9ed-43bf1c43ec0f/1/uF4L5rcnnN7PeL3WQQX4RD0MDAI.mft
Manifest number: 100E
Signing time: Tue 01 Jul 2025 13:02:02 +0000
Manifest this update: Tue 01 Jul 2025 13:02:02 +0000
Manifest next update: Wed 02 Jul 2025 13:02:02 +0000
Files and hashes: 1: uF4L5rcnnN7PeL3WQQX4RD0MDAI.crl (hash: 0FIYFiD0MdYMh2PeahA3NVlyuSRxmHtzytCl+st2e2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/6e1f38-6807-4866-a9ed-43bf1c43ec0f/1/uF4L5rcnnN7PeL3WQQX4RD0MDAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/6e1f38-6807-4866-a9ed-43bf1c43ec0f/1/uF4L5rcnnN7PeL3WQQX4RD0MDAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uF4L5rcnnN7PeL3WQQX4RD0MDAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:14:84:2b:15:27:24:ab:a7:29:1d:d4:9b:c7:2e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85e0be6b7279cdecf78bdd64105f8443d0c0c02
Validity
Not Before: Jul 1 13:02:02 2025 GMT
Not After : Jul 2 13:02:02 2025 GMT
Subject: CN=b928cc14783ed0da23911d1556fda897f4574c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f9:41:4c:cb:ae:cc:1e:34:88:ba:23:bd:39:
85:1d:27:30:17:27:90:0e:53:a4:86:6e:41:1c:24:
86:78:fa:81:a4:3e:d9:0c:f5:74:80:69:73:4c:14:
72:5b:b3:61:c7:31:f6:2b:94:1b:0e:5a:f0:40:bd:
7c:d6:79:45:f1:20:7a:11:83:3c:1b:ca:6d:ce:1c:
7f:78:47:e2:c7:35:58:95:07:5c:73:6c:2d:30:12:
f6:22:31:56:1e:a0:1e:ce:85:6c:0c:27:b8:93:4d:
35:e5:c5:aa:2a:42:a3:c2:e9:d9:f5:e8:3a:ee:57:
34:67:12:5a:d3:e2:3c:2c:d1:0e:c1:4a:2f:ad:ec:
5f:a9:34:1a:f0:59:4b:96:81:22:58:5d:e2:6b:85:
2d:73:18:2c:7b:1a:b0:a2:cc:be:f3:ee:ab:6d:ef:
68:2d:d0:cb:16:fa:ff:e1:85:2f:1b:e1:6d:02:26:
7a:ba:dc:e4:d7:8e:dc:b5:d5:91:75:53:0f:31:da:
cd:46:b6:35:d4:b5:03:43:fb:e2:55:4c:99:29:6e:
62:13:12:4b:aa:59:78:8a:44:db:98:dd:fb:d8:68:
76:6c:4d:d4:eb:d3:31:37:1d:ac:e9:0b:40:7a:12:
ba:9b:e7:ba:1e:55:86:a1:4c:cc:98:93:e0:5b:55:
49:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:28:CC:14:78:3E:D0:DA:23:91:1D:15:56:FD:A8:97:F4:57:4C:7F
X509v3 Authority Key Identifier:
keyid:B8:5E:0B:E6:B7:27:9C:DE:CF:78:BD:D6:41:05:F8:44:3D:0C:0C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uF4L5rcnnN7PeL3WQQX4RD0MDAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6e1f38-6807-4866-a9ed-43bf1c43ec0f/1/uF4L5rcnnN7PeL3WQQX4RD0MDAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6e1f38-6807-4866-a9ed-43bf1c43ec0f/1/uF4L5rcnnN7PeL3WQQX4RD0MDAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:91:31:0b:bd:5c:e2:24:f2:cf:f2:5b:7c:84:6b:a8:e9:e4:
fb:a4:0e:9a:76:d2:39:b1:26:d4:f6:f1:7d:e9:0b:88:8c:49:
e3:b8:19:ee:35:4d:8e:29:d9:0b:a1:42:34:e8:5a:f0:7d:59:
e7:76:89:6c:b9:2a:8c:1a:d7:71:4c:51:16:cf:a3:ae:60:d9:
7a:e9:a1:27:95:6c:70:67:7b:8b:f3:43:a9:52:ab:0e:ed:16:
18:31:92:b6:97:50:74:d9:ba:18:dd:92:85:32:e0:c7:67:70:
d2:37:dd:f0:3e:53:35:c1:ef:62:2d:e9:38:4e:78:5a:66:3e:
46:21:82:52:e6:27:11:f1:53:b2:8b:f5:69:3b:89:26:30:62:
9d:03:63:1f:5e:ff:bb:01:83:3a:0e:76:c2:df:94:3a:f0:69:
c7:11:fa:40:b9:90:97:4b:9c:81:3c:e0:92:a8:70:df:d8:20:
d7:4f:b6:8f:cd:84:11:ed:63:c4:fc:35:da:87:09:0b:e1:65:
fe:86:6d:db:c5:70:2b:fd:86:e9:ce:0d:26:2b:8e:c5:ab:04:
72:7d:24:9f:93:f0:fb:65:47:34:67:ec:25:9f:3f:c8:81:02:
4e:48:a4:94:66:b5:85:78:fa:92:39:0a:fc:d7:a7:83:d3:6b:
ba:95:33:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:36:48 2025 by rpki-client