Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
File: UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft (raw, json)
Hash identifier: tue+sNcDghuBHfKx+iQ1i3ZraXoP1+E/Adhk2njvR1g=
Subject key identifier: 37:DA:3B:88:42:FB:33:36:36:02:47:D5:76:7C:95:F7:F3:62:5A:CD
Authority key identifier: 50:9F:39:1F:29:D9:20:78:BA:6E:2C:76:FA:A2:F8:AE:94:73:43:E6
Certificate issuer: /CN=509f391f29d92078ba6e2c76faa2f8ae947343e6
Certificate serial: 0198D660C854D7121730E2F5A29000EC2D31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:02:03 +0000
Manifest this update: Sat 23 Aug 2025 10:02:03 +0000
Manifest next update: Sun 24 Aug 2025 10:02:03 +0000
Files and hashes: 1: UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl (hash: Qc83VKE1bDwI330RiuHG1bgRNqIFA2vub106ObGjCxg=)
2: VIK5LfegEju3TUqgukYni1TBj7k.roa (hash: FcCMQfjXZEhJ1ZtbvXFYBrE4X/DK9/KBh+K8ZP9nlZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:c8:54:d7:12:17:30:e2:f5:a2:90:00:ec:2d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509f391f29d92078ba6e2c76faa2f8ae947343e6
Validity
Not Before: Aug 23 10:02:03 2025 GMT
Not After : Aug 24 10:02:03 2025 GMT
Subject: CN=37da3b8842fb3336360247d5767c95f7f3625acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b7:b1:82:f6:eb:8a:15:fc:3f:ae:05:4a:e6:
25:7e:bb:2a:5c:e2:13:41:6d:10:57:69:41:d8:ce:
fe:b2:b7:8f:2f:5d:5b:e7:e2:ae:24:36:8b:1e:b7:
2b:68:89:bd:a8:d8:45:90:70:08:bd:43:f3:b8:c3:
81:6a:df:b5:59:67:42:c3:67:53:93:ed:14:7d:20:
e0:bd:e9:6a:2a:30:c1:e1:f1:ef:4d:51:79:52:30:
47:e4:40:1e:d2:a9:6c:63:34:b9:17:d4:7f:0a:9a:
cb:a5:ca:47:aa:bf:b0:4c:ca:60:e1:69:dd:56:20:
a3:1a:6c:9a:ed:61:d3:35:a7:1a:37:3f:0d:6b:09:
79:72:a9:5b:7e:c8:1d:ca:ce:43:fd:db:9e:0b:ae:
be:dc:62:93:5b:ec:d5:02:a4:57:5f:d1:3e:95:46:
5d:ea:58:14:f2:43:44:2e:0a:a6:b6:da:4a:1c:2b:
c7:b6:00:07:71:1e:8e:ee:04:53:7c:39:36:d9:ab:
37:14:8e:9e:ed:f9:df:60:7c:5e:27:f8:83:14:98:
32:f7:86:39:8c:2a:1e:a9:3c:0d:c7:49:2e:c2:bb:
07:d4:17:e8:c9:b2:42:39:f4:36:6c:b1:8e:00:5b:
a3:21:d2:9e:f5:3e:6c:4d:67:1a:f1:d5:2e:07:a6:
59:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DA:3B:88:42:FB:33:36:36:02:47:D5:76:7C:95:F7:F3:62:5A:CD
X509v3 Authority Key Identifier:
keyid:50:9F:39:1F:29:D9:20:78:BA:6E:2C:76:FA:A2:F8:AE:94:73:43:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:45:0d:28:be:a1:1a:b9:d4:cf:29:9c:be:ff:9e:76:88:de:
32:b0:f3:d6:4e:df:87:e4:f9:32:a6:e1:4e:15:ea:66:6a:ac:
40:c6:d5:70:09:70:14:60:22:8d:ab:6a:68:4c:fe:62:a1:19:
07:f5:7a:21:f4:bd:b4:37:cd:5a:ab:db:38:e4:1a:e4:cd:6d:
12:24:2f:b0:aa:69:37:b9:94:05:2b:f6:62:10:c0:22:16:84:
c3:81:1b:1d:82:9d:d0:22:9e:da:5a:23:db:24:43:0f:7c:af:
ff:9b:ae:c1:13:06:65:81:6d:f5:2e:96:d2:93:17:32:77:0b:
4e:d1:b1:2c:9e:19:6a:27:60:88:04:8e:1e:e6:72:c6:cf:cd:
c3:d3:d7:62:67:8a:cb:58:4b:91:e5:b8:52:f6:14:c5:38:5b:
e3:79:91:9b:dc:91:d1:c5:f4:cd:90:ce:91:c4:5f:a7:99:2a:
1e:bf:0f:4e:34:2e:95:23:3b:47:29:e0:eb:30:c0:96:af:71:
e7:4c:b0:49:62:32:fc:50:e3:50:bf:91:e7:e2:05:52:e5:9b:
f3:fe:91:e3:61:05:26:fe:be:db:92:fe:a2:0e:50:20:dc:21:
8a:f1:ee:05:8d:be:3d:52:7c:5b:4e:d9:c1:6a:0b:0e:0e:ff:
a5:a6:f3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:43 2025 by rpki-client