Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft
File: uLhsyEeC6kEMbYfCzTv4agaqF7s.mft (raw, json)
Hash identifier: mBrRfUzM693QRNaQ9Qkc+SuWArBs988NarasusW8M4A=
Subject key identifier: 2D:89:32:D7:84:F1:0C:36:0F:D0:F4:97:E2:FE:11:4D:56:EF:8B:FA
Authority key identifier: B8:B8:6C:C8:47:82:EA:41:0C:6D:87:C2:CD:3B:F8:6A:06:AA:17:BB
Certificate issuer: /CN=b8b86cc84782ea410c6d87c2cd3bf86a06aa17bb
Certificate serial: 0198D705A8D101802CD2B7F35E455D78DE88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLhsyEeC6kEMbYfCzTv4agaqF7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft
Manifest number: 0CDB
Signing time: Sat 23 Aug 2025 13:02:08 +0000
Manifest this update: Sat 23 Aug 2025 13:02:08 +0000
Manifest next update: Sun 24 Aug 2025 13:02:08 +0000
Files and hashes: 1: uLhsyEeC6kEMbYfCzTv4agaqF7s.crl (hash: eMBY+32QPl37rQ44rjJ7fAAg1on25mZRu+XfVWSv6Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uLhsyEeC6kEMbYfCzTv4agaqF7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:a8:d1:01:80:2c:d2:b7:f3:5e:45:5d:78:de:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8b86cc84782ea410c6d87c2cd3bf86a06aa17bb
Validity
Not Before: Aug 23 13:02:08 2025 GMT
Not After : Aug 24 13:02:08 2025 GMT
Subject: CN=2d8932d784f10c360fd0f497e2fe114d56ef8bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:52:6d:97:04:f5:2d:04:b0:71:5e:77:6a:3a:
b9:73:3c:13:ae:1c:e9:2a:cc:16:e2:1f:f2:93:57:
34:ab:4c:26:f2:cc:4f:c7:0a:81:46:c6:b6:eb:cf:
a1:b7:7d:75:88:f0:ee:39:4e:58:6b:81:b3:7d:8a:
4b:e7:63:fe:f1:dc:96:c6:f6:37:7f:14:ea:9f:63:
d0:c9:6f:1c:e4:6a:8f:fe:08:75:4d:d1:2b:cb:b7:
cd:a9:cf:80:25:ce:90:ae:e8:dd:14:c6:7f:7b:64:
51:a6:35:b5:97:95:58:cf:f0:a1:ef:74:5d:47:85:
0e:8e:09:75:25:c1:f5:a0:8b:51:ad:19:b0:b3:03:
43:31:c4:ab:72:46:14:11:71:65:b5:3a:20:01:f0:
1a:2a:ce:f5:80:d6:0f:d1:90:04:67:fe:23:19:9f:
b6:b0:72:56:8b:a6:6b:a7:25:bc:b9:4d:65:b4:22:
85:03:0a:66:55:d8:b9:e3:49:ed:ef:ae:52:0f:20:
f8:cb:b1:86:4b:fa:de:a6:ed:34:9b:4b:32:3b:eb:
fc:e7:45:31:ba:28:36:47:e2:d8:82:3b:2e:c8:a6:
54:9b:e5:07:28:10:64:15:c3:e9:03:15:58:48:db:
2e:bc:34:c2:5e:35:a7:f5:ff:85:ed:f9:76:d1:66:
67:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:89:32:D7:84:F1:0C:36:0F:D0:F4:97:E2:FE:11:4D:56:EF:8B:FA
X509v3 Authority Key Identifier:
keyid:B8:B8:6C:C8:47:82:EA:41:0C:6D:87:C2:CD:3B:F8:6A:06:AA:17:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLhsyEeC6kEMbYfCzTv4agaqF7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:cf:7b:50:2b:5e:19:80:a5:39:39:98:80:cb:93:32:38:6b:
a9:de:4f:78:0a:1a:44:ad:7e:ba:c2:b1:24:d7:22:ad:71:bf:
15:3f:75:c4:50:20:40:1c:c4:28:ec:9a:5a:dd:0e:ef:6e:a3:
70:db:f1:17:37:04:5d:43:b4:59:ed:24:e0:3a:3f:d2:da:b9:
72:d1:24:5d:c4:c1:80:28:e4:06:20:c2:26:3d:3c:c0:e5:08:
c1:a2:9a:bb:5a:b6:14:6b:44:62:d6:d5:db:5c:f1:cf:f2:78:
5d:6c:c9:72:fc:fb:d0:ca:4a:dc:61:c3:ef:6f:0e:da:92:01:
de:b1:51:aa:c2:4b:a2:c1:3f:79:38:7c:65:59:45:78:01:28:
08:d4:eb:6e:00:b5:8a:a9:47:55:2d:3c:21:2d:65:6e:2a:10:
4e:1b:41:e3:e1:ba:a1:eb:38:23:bb:e6:c4:77:2d:84:91:e8:
c4:1b:b1:3e:91:72:52:a3:c8:fb:7a:89:82:63:3f:2e:d2:82:
dc:cd:8b:fc:14:4b:32:d3:8f:e0:d5:c4:d5:8f:9c:98:b3:35:
e5:58:d8:9d:c1:86:e8:e8:c5:8c:43:aa:79:7e:ca:85:ef:0b:
a9:5e:cb:97:25:04:e0:d3:b5:b7:21:66:f6:3f:2a:05:b4:d9:
d3:fb:41:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:27:12 2025 by rpki-client