Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.mft
File: Unzgu6rDVu3srWci8qhvjgZJCY4.mft (raw, json)
Hash identifier: Laau6D2v+OqTSlOkxLGjEjf8hvZJULZyPF1jTJ5iVT4=
Subject key identifier: A8:1B:62:25:D6:68:64:9E:E6:53:71:43:B0:C7:53:96:26:EF:83:B8
Authority key identifier: 52:7C:E0:BB:AA:C3:56:ED:EC:AD:67:22:F2:A8:6F:8E:06:49:09:8E
Certificate issuer: /CN=527ce0bbaac356edecad6722f2a86f8e0649098e
Certificate serial: 0198D516340BDDA76D26E0A8E9DF0FD3B211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Unzgu6rDVu3srWci8qhvjgZJCY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.mft
Manifest number: 15D9
Signing time: Sat 23 Aug 2025 04:00:58 +0000
Manifest this update: Sat 23 Aug 2025 04:00:58 +0000
Manifest next update: Sun 24 Aug 2025 04:00:58 +0000
Files and hashes: 1: Unzgu6rDVu3srWci8qhvjgZJCY4.crl (hash: 1GwkKFgGwBbobCSNeOG7nCcgq8GP1C9POM+HcHEDQBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Unzgu6rDVu3srWci8qhvjgZJCY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:34:0b:dd:a7:6d:26:e0:a8:e9:df:0f:d3:b2:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=527ce0bbaac356edecad6722f2a86f8e0649098e
Validity
Not Before: Aug 23 04:00:58 2025 GMT
Not After : Aug 24 04:00:58 2025 GMT
Subject: CN=a81b6225d668649ee6537143b0c7539626ef83b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a0:c9:f7:a9:17:2b:ba:04:8e:df:2d:90:fa:
65:ae:e7:62:2e:48:63:51:01:96:80:6b:c7:a4:41:
bb:62:ac:8a:a9:ae:f7:3d:27:07:4f:0a:87:ae:fd:
59:f9:55:c8:cf:d2:5c:1f:34:e0:db:ce:4a:d4:ae:
7a:ad:87:73:3d:cc:99:2a:19:b5:47:10:6d:8c:0b:
37:ac:3e:eb:40:fd:e8:0b:d4:75:d6:31:f4:5f:bc:
7c:31:34:20:23:e9:4c:fa:ab:99:a4:5a:f4:cc:42:
72:64:86:56:1d:c4:56:12:c7:d6:4d:b9:ad:eb:31:
1d:19:ee:ee:30:5b:13:3d:18:08:e8:b8:d3:4e:a4:
05:3d:e9:33:1f:35:c2:5b:f2:4f:8b:1b:4e:35:74:
9f:7d:7c:b8:17:0f:9b:6e:19:95:ba:00:02:2b:5c:
d2:54:ae:90:69:59:27:72:b9:8f:67:83:73:cc:e3:
62:10:2c:a8:b3:b2:5d:b1:de:f5:a4:f7:44:d3:62:
18:37:74:20:7f:a7:5a:d8:07:62:2a:93:18:bb:27:
3d:be:15:a2:7b:81:85:84:62:b6:ff:f3:50:6f:1a:
e5:d9:10:55:9e:3c:d6:c8:d4:33:6f:fc:61:4e:92:
0e:8e:0b:f6:35:b3:e6:55:66:f0:d0:62:86:e7:d2:
ba:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1B:62:25:D6:68:64:9E:E6:53:71:43:B0:C7:53:96:26:EF:83:B8
X509v3 Authority Key Identifier:
keyid:52:7C:E0:BB:AA:C3:56:ED:EC:AD:67:22:F2:A8:6F:8E:06:49:09:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Unzgu6rDVu3srWci8qhvjgZJCY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:22:bf:52:a3:e7:03:24:4d:2e:05:1d:a3:c6:e4:78:cb:58:
2a:6d:df:e2:e5:f6:c2:53:b2:39:67:1c:2a:dc:0b:ec:c6:5d:
9e:2b:29:10:9a:53:53:20:dc:ed:27:ac:7a:59:df:40:dc:86:
18:e3:55:68:db:2f:7f:07:bb:81:ea:d8:0b:76:51:a9:9f:96:
44:01:0a:c4:c9:e7:ac:ac:f2:d8:9e:9a:03:29:8e:3d:69:01:
ce:ce:9b:13:24:fc:56:ad:03:96:80:ca:6d:f0:ff:a7:57:72:
5d:80:16:00:77:6a:35:17:1c:a5:89:c1:d4:d1:98:32:b2:f4:
e6:20:1e:a4:3a:6e:f4:43:87:d6:3d:5a:c1:92:ec:27:9c:ac:
1b:19:2a:0d:a2:ba:9e:e8:9b:aa:89:c9:e7:27:f6:96:07:c4:
9f:7a:67:b6:6c:05:9a:60:87:43:b2:75:98:48:10:14:2b:f9:
4f:01:f9:b0:2a:db:53:d8:d4:6d:21:7f:30:31:08:54:f6:e4:
d5:e4:37:e9:3c:b4:96:2c:4a:4e:31:d3:63:d3:5d:f8:47:8d:
21:ad:11:41:da:35:f1:83:a4:ad:bf:78:ce:db:54:05:3c:52:
63:e7:73:37:5a:82:d0:61:b7:86:57:82:5c:3b:29:2d:46:95:
07:d3:ee:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:04 2025 by rpki-client