Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
File: ubjmb62BRkWYT9TqrTE7b-AFibc.mft (raw, json)
Hash identifier: ptjp0inF82e7SWMThGiRxsuR8ZCMmbC2Qk/DJvkpaRk=
Subject key identifier: 78:20:43:0D:0A:96:8B:DD:54:51:FC:AD:84:F5:56:88:91:7A:36:A2
Authority key identifier: B9:B8:E6:6F:AD:81:46:45:98:4F:D4:EA:AD:31:3B:6F:E0:05:89:B7
Certificate issuer: /CN=b9b8e66fad814645984fd4eaad313b6fe00589b7
Certificate serial: 0198D473C06F30CCB112A0107E9959F43575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
Manifest number: 0ACD
Signing time: Sat 23 Aug 2025 01:03:32 +0000
Manifest this update: Sat 23 Aug 2025 01:03:32 +0000
Manifest next update: Sun 24 Aug 2025 01:03:32 +0000
Files and hashes: 1: ubjmb62BRkWYT9TqrTE7b-AFibc.crl (hash: hhM6a4kUYi5id8mzHv2mG4WM5MIW9TMZEd/Qb2PNiK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:c0:6f:30:cc:b1:12:a0:10:7e:99:59:f4:35:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b8e66fad814645984fd4eaad313b6fe00589b7
Validity
Not Before: Aug 23 01:03:32 2025 GMT
Not After : Aug 24 01:03:32 2025 GMT
Subject: CN=7820430d0a968bdd5451fcad84f55688917a36a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d7:a8:3f:1a:3e:f5:db:6b:81:cd:4d:26:70:
a2:04:07:7c:a6:05:64:5b:0d:90:c2:43:c6:a5:b7:
b9:c3:05:6e:22:a3:08:cd:79:16:2a:e9:6f:a1:90:
98:aa:5d:69:6f:cc:6c:bb:fd:bc:5d:1c:7c:d7:b1:
88:f5:fd:20:3f:9c:35:b7:2c:a0:e1:9b:70:ce:56:
08:71:57:a0:aa:2a:05:5e:c8:81:5b:ef:a9:bb:00:
76:8e:0c:36:c8:92:23:2f:9f:1c:0c:ae:d9:1b:d5:
c6:15:58:b7:05:17:80:a3:8e:fa:24:d8:6f:4d:ff:
57:d6:dd:75:e1:29:64:01:75:4f:19:ca:ca:a7:01:
c8:e8:2d:43:b1:fa:d9:84:d3:f7:45:cc:1f:e4:20:
8a:39:97:1e:70:d8:40:fd:56:50:10:50:29:15:c5:
30:49:c8:4f:03:81:9f:50:07:36:ac:d1:d1:2a:66:
ef:0c:d4:0c:b5:c8:15:f9:20:54:16:bd:eb:5d:9a:
b2:42:ad:96:1b:78:36:e6:ed:aa:b7:e9:7f:52:34:
dc:f1:60:55:93:2e:94:e3:92:1f:df:dd:33:09:fd:
80:a8:41:f0:2e:85:64:b4:17:60:35:c2:b6:32:ad:
66:eb:41:dc:85:a5:50:6a:f3:15:a4:24:4b:31:ca:
4b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:20:43:0D:0A:96:8B:DD:54:51:FC:AD:84:F5:56:88:91:7A:36:A2
X509v3 Authority Key Identifier:
keyid:B9:B8:E6:6F:AD:81:46:45:98:4F:D4:EA:AD:31:3B:6F:E0:05:89:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:04:88:f7:34:69:16:7b:92:92:44:5e:73:26:0c:a5:4c:d9:
e2:41:d8:6d:2a:50:37:50:15:00:22:4f:06:6a:2f:d9:59:7c:
36:59:9b:19:84:c4:65:5d:4d:9b:43:e2:29:a1:6c:3b:b9:a9:
b8:20:8c:95:c7:69:cb:e8:3e:e6:b7:3b:c2:fe:5c:40:ab:79:
42:b1:71:d4:35:d4:50:77:42:5b:e0:3a:b3:e0:65:1e:df:9b:
18:86:d6:0e:73:68:63:16:f6:8e:e6:cb:e3:16:06:12:88:78:
19:64:8f:d3:0c:c6:2b:d0:b1:17:82:60:dd:cd:d9:50:fc:d1:
59:41:98:dd:d9:3a:95:51:7c:69:79:8a:3d:07:da:43:fb:38:
74:9c:c8:76:31:dd:10:bc:cd:91:6b:9d:b3:82:43:dd:25:1a:
e1:ce:af:57:bf:84:09:b7:4d:2b:70:4c:b9:fe:67:cd:28:82:
1e:fe:3c:ce:33:54:5d:fa:f6:ab:a0:04:f3:80:d6:e7:0d:51:
15:52:ca:21:31:cc:73:4f:88:8b:2c:70:29:ec:9d:6d:40:9d:
bb:e7:8b:aa:60:d9:69:27:27:71:38:01:c7:4d:28:2e:38:f2:
b2:c0:10:ae:00:39:d6:c0:80:6d:c4:84:05:75:27:45:ab:98:
38:db:d1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:46 2025 by rpki-client