Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.mft
File: Unzgu6rDVu3srWci8qhvjgZJCY4.mft (raw, json)
Hash identifier: ZDJfDwPUdtvO+F3XgMLVFwsEyzTFsNgtEMA48B2qepU=
Subject key identifier: D4:5D:AD:B4:18:AD:B5:8D:89:E5:C1:77:66:56:65:33:5C:6E:E7:21
Authority key identifier: 52:7C:E0:BB:AA:C3:56:ED:EC:AD:67:22:F2:A8:6F:8E:06:49:09:8E
Certificate issuer: /CN=527ce0bbaac356edecad6722f2a86f8e0649098e
Certificate serial: 0199FC8FA68D126D0786FB9D6AAFF6960DB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Unzgu6rDVu3srWci8qhvjgZJCY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.mft
Manifest number: 1672
Signing time: Sun 19 Oct 2025 13:01:36 +0000
Manifest this update: Sun 19 Oct 2025 13:01:36 +0000
Manifest next update: Mon 20 Oct 2025 13:01:36 +0000
Files and hashes: 1: Unzgu6rDVu3srWci8qhvjgZJCY4.crl (hash: aH+jJ/Gw2qA2Z4k7oXR/sSF8FkwFUMKR6GZfMXJJKcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Unzgu6rDVu3srWci8qhvjgZJCY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:a6:8d:12:6d:07:86:fb:9d:6a:af:f6:96:0d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=527ce0bbaac356edecad6722f2a86f8e0649098e
Validity
Not Before: Oct 19 13:01:36 2025 GMT
Not After : Oct 20 13:01:36 2025 GMT
Subject: CN=d45dadb418adb58d89e5c177665665335c6ee721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e8:7f:f1:b3:2f:10:3f:41:ec:22:c3:05:fd:
c0:e8:0b:fa:14:6f:5f:3e:3a:09:50:69:70:3f:78:
84:47:ba:ae:87:a0:27:ad:ea:65:a0:e1:15:94:04:
30:80:4c:c9:e7:fe:a6:d7:20:e3:49:1e:d5:8b:b3:
e3:83:7f:65:ec:35:eb:03:3d:96:5e:38:e6:22:f3:
25:ec:6a:fa:0c:cc:1c:54:0b:21:3f:5d:16:03:17:
de:2c:e4:fd:0d:50:ce:63:9c:60:83:a6:70:8c:ad:
81:4a:72:d5:c7:b9:b7:d3:2c:82:b9:0e:3d:dd:f5:
db:58:c1:d8:1c:cf:d4:9d:42:08:29:f8:44:cc:7e:
b0:31:d3:9e:66:c6:b3:4a:0d:90:ba:fb:4f:e5:63:
7b:47:0a:d6:d5:bc:fb:62:2d:65:4b:ae:f3:9c:31:
26:d1:a7:2d:2c:b9:d7:c3:91:19:47:90:17:98:40:
c5:4c:f8:c4:e1:71:eb:8e:4c:e4:91:7f:01:c2:bd:
6d:ab:a4:c3:51:64:0c:8c:2d:a0:c7:97:fc:e7:17:
d2:3a:21:13:74:dc:d6:86:34:42:1d:41:04:58:80:
f5:80:c3:6f:a6:9e:af:3c:3e:cb:da:6b:bc:eb:1c:
29:dd:e1:12:dd:fa:51:41:a2:45:58:10:b9:bc:2b:
42:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5D:AD:B4:18:AD:B5:8D:89:E5:C1:77:66:56:65:33:5C:6E:E7:21
X509v3 Authority Key Identifier:
keyid:52:7C:E0:BB:AA:C3:56:ED:EC:AD:67:22:F2:A8:6F:8E:06:49:09:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Unzgu6rDVu3srWci8qhvjgZJCY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:84:9b:33:cc:84:97:cf:d5:0c:f0:b6:a7:09:27:da:0c:c4:
ed:68:0c:60:76:09:da:f3:18:88:97:e0:7a:a9:15:db:e5:39:
87:2c:74:ab:23:93:29:5a:b7:bb:84:5c:08:db:74:9a:4b:7f:
cd:74:94:37:8a:fc:47:10:83:68:ca:b8:22:b0:42:3f:f4:b6:
18:c0:cd:16:ee:05:ca:49:7f:22:8e:ba:b0:db:59:78:38:8b:
cb:2f:6a:0f:2a:63:b1:a6:df:9b:f0:af:18:ee:06:e0:e3:c0:
08:22:67:8c:26:13:df:fc:52:4d:1b:b3:7f:32:60:a6:7e:cd:
a2:cf:b6:5b:ec:49:49:00:90:4e:e2:30:b0:8a:74:59:87:a6:
0f:93:54:a0:43:b4:45:a4:8e:5c:96:98:ac:1f:a1:2f:f2:8c:
53:6b:8c:9e:a1:8f:39:64:96:74:c5:78:f3:d6:e5:7f:4b:03:
30:e8:8e:a1:a4:a8:44:94:e4:79:cd:5f:33:08:24:7a:88:35:
33:f7:64:5e:a7:26:39:31:13:a3:85:90:c7:97:cf:7f:88:1e:
3f:17:16:af:ea:bf:cd:05:e1:e5:97:da:76:95:e7:a6:d4:5a:
da:9c:0c:17:d0:34:ff:c7:0a:99:d2:b1:81:c3:f7:80:94:05:
68:83:31:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:11 2025 by rpki-client