Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
File: ubjmb62BRkWYT9TqrTE7b-AFibc.mft (raw, json)
Hash identifier: iUkJSsR332EG3W94M1lWZTpsZDrHIo6j4aS03dtF6NM=
Subject key identifier: B7:BB:FA:16:51:2D:47:80:26:6F:3E:0C:C0:63:D0:8A:E1:69:DD:BF
Authority key identifier: B9:B8:E6:6F:AD:81:46:45:98:4F:D4:EA:AD:31:3B:6F:E0:05:89:B7
Certificate issuer: /CN=b9b8e66fad814645984fd4eaad313b6fe00589b7
Certificate serial: 0197B6A14160DB7110EEF296FDCEA422B9B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
Manifest number: 0A39
Signing time: Sat 28 Jun 2025 13:01:50 +0000
Manifest this update: Sat 28 Jun 2025 13:01:50 +0000
Manifest next update: Sun 29 Jun 2025 13:01:50 +0000
Files and hashes: 1: ubjmb62BRkWYT9TqrTE7b-AFibc.crl (hash: c3GOkxysff8Rd3nVvnxKHvnB9PXAKy/Bt3mgXLIb0aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:41:60:db:71:10:ee:f2:96:fd:ce:a4:22:b9:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b8e66fad814645984fd4eaad313b6fe00589b7
Validity
Not Before: Jun 28 13:01:50 2025 GMT
Not After : Jun 29 13:01:50 2025 GMT
Subject: CN=b7bbfa16512d4780266f3e0cc063d08ae169ddbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:aa:a1:d8:4e:65:3c:3e:50:4e:a2:44:09:cc:
fe:ca:5b:6b:62:ad:d2:5d:a9:1b:46:51:54:99:9f:
42:41:cb:2f:63:bb:0f:62:16:63:24:b2:d3:1f:93:
cc:4c:3a:70:2f:cd:f6:03:f7:da:da:67:5e:f6:ef:
0f:4e:f3:dd:87:39:a5:18:44:b0:f8:ec:d3:ce:eb:
78:d3:0c:25:bf:89:61:08:a7:4a:f1:cd:c2:82:58:
d7:7e:0c:ff:3c:fc:19:f7:08:71:cc:bc:d4:aa:52:
4b:1f:3b:5d:7e:a6:db:12:bc:0d:df:56:3c:fc:6d:
12:f1:41:3a:9c:62:d6:00:80:7a:4c:67:e8:6a:e1:
86:15:30:7c:17:74:6e:ea:cb:5e:d0:22:40:6e:df:
5b:77:41:84:25:7b:28:e5:05:1e:82:5f:af:87:6b:
97:e2:0b:80:bb:58:30:21:3c:f7:e5:d3:75:e7:fa:
52:ca:79:70:36:d9:ab:f5:b2:c7:8d:f4:ef:ae:d6:
97:16:3e:bc:78:08:f4:e4:58:fc:5f:f3:f4:86:20:
c7:15:94:af:a1:1e:2d:90:08:c8:c4:31:23:23:79:
d9:c6:6b:04:50:43:ae:f7:e6:67:0d:3d:ef:c5:9f:
99:d0:a6:90:80:7e:be:e9:72:94:1d:a7:3e:56:2f:
6f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BB:FA:16:51:2D:47:80:26:6F:3E:0C:C0:63:D0:8A:E1:69:DD:BF
X509v3 Authority Key Identifier:
keyid:B9:B8:E6:6F:AD:81:46:45:98:4F:D4:EA:AD:31:3B:6F:E0:05:89:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1c:86:8e:4f:45:a0:10:5d:fa:cb:fd:f0:96:d8:54:0c:4d:
47:fb:c9:5d:35:6d:67:3d:0c:ce:1d:35:29:59:46:ac:f3:10:
e2:4f:24:e1:88:97:fa:e0:48:a0:2e:e2:a5:5f:62:04:b8:17:
79:f5:2e:db:81:88:98:87:a3:27:ae:86:b3:b7:3a:bf:77:19:
f4:93:fd:85:e2:28:fc:37:b7:e5:78:d8:1a:95:52:53:d9:06:
1f:0c:f7:b2:32:34:3e:af:44:ad:d9:28:20:75:54:8a:2d:20:
04:a1:24:9f:6d:a9:d4:e9:59:24:5b:c8:6f:c7:ba:b2:de:c2:
0b:98:3e:9c:82:5b:8a:9c:00:3a:63:38:0c:ee:39:02:43:98:
9f:23:9b:69:a3:b3:e9:15:ea:bb:a4:83:94:61:c2:56:63:fe:
97:9a:c4:6f:47:22:a8:cd:55:0d:90:62:09:4c:4c:56:44:ba:
8d:80:85:d6:cc:f7:d6:8d:4f:4f:77:37:b0:b8:ac:d1:f9:88:
1f:ee:45:26:f8:dc:84:cd:ec:1a:a0:bd:d3:87:f7:d6:17:e5:
e9:be:6f:71:d1:a2:a5:be:a6:7d:44:5c:88:44:64:c0:28:3d:
34:ad:8f:8a:42:c1:bf:6d:58:f3:01:2a:fb:24:1d:7b:73:07:
1a:b3:1f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:14 2025 by rpki-client