Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
File: ux1P6zEebC28c9UE_ISQzCFUY4k.mft (raw, json)
Hash identifier: N5u68kzcTXMRCXHyW+JpnaimnGSuK+sZmWFO4h70j8g=
Subject key identifier: 7F:99:E4:D8:5C:35:13:05:18:16:36:B2:61:15:3A:5A:AF:39:C1:D1
Authority key identifier: BB:1D:4F:EB:31:1E:6C:2D:BC:73:D5:04:FC:84:90:CC:21:54:63:89
Certificate issuer: /CN=bb1d4feb311e6c2dbc73d504fc8490cc21546389
Certificate serial: 0197B96ACA68801E347A5B4FFB4C11CB5BFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
Manifest number: 02F8
Signing time: Sun 29 Jun 2025 02:01:12 +0000
Manifest this update: Sun 29 Jun 2025 02:01:12 +0000
Manifest next update: Mon 30 Jun 2025 02:01:12 +0000
Files and hashes: 1: ux1P6zEebC28c9UE_ISQzCFUY4k.crl (hash: 7C3mqULnGFmOxL6lvgQ4gBVd64pSxO8wjV6EaQZolQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:ca:68:80:1e:34:7a:5b:4f:fb:4c:11:cb:5b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb1d4feb311e6c2dbc73d504fc8490cc21546389
Validity
Not Before: Jun 29 02:01:12 2025 GMT
Not After : Jun 30 02:01:12 2025 GMT
Subject: CN=7f99e4d85c351305181636b261153a5aaf39c1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2b:47:ba:de:0b:98:3a:7f:ff:b8:e1:3c:fb:
f8:1d:16:8a:d1:2a:cc:f7:b8:2a:59:7d:c3:e3:67:
87:2f:2c:a2:6a:1c:f0:7e:b5:1a:d3:b4:66:e9:5c:
38:72:33:6b:2d:5d:58:e4:fb:55:9a:d2:4a:80:6a:
23:2b:f4:13:14:fa:29:44:30:51:6a:15:2b:72:a2:
e1:2e:ef:9b:6a:d2:06:5c:df:8b:a6:e1:0f:82:d0:
52:cc:74:00:fe:e0:8b:c6:2d:57:02:eb:78:62:a3:
f3:54:e8:2d:ca:ad:c6:7c:4c:22:73:ce:5b:2a:52:
fe:23:53:87:b8:b0:83:a3:22:06:d1:43:3b:27:be:
3d:67:7e:0f:81:2e:74:6a:c6:29:63:02:97:c2:35:
e5:d2:7b:0a:ba:82:de:26:d2:6c:a8:91:b8:83:8e:
03:e5:70:ec:ea:cb:da:01:71:3d:cc:c8:53:e7:48:
aa:bb:c9:96:fb:0c:0a:80:3a:19:6e:61:f1:82:e6:
80:1f:13:93:b2:77:bc:4b:ec:82:35:99:d7:74:22:
91:84:42:29:e0:1b:32:3e:c5:b5:6d:61:5a:ad:dd:
25:13:bc:a2:67:f4:a7:51:d3:d5:f8:a5:87:5b:7b:
53:10:0f:23:80:01:c1:6c:2c:d9:1f:68:2f:cd:04:
42:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:99:E4:D8:5C:35:13:05:18:16:36:B2:61:15:3A:5A:AF:39:C1:D1
X509v3 Authority Key Identifier:
keyid:BB:1D:4F:EB:31:1E:6C:2D:BC:73:D5:04:FC:84:90:CC:21:54:63:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:76:74:40:04:54:e0:0c:b6:02:aa:7e:56:ea:34:29:6d:b8:
04:e4:58:8b:25:ae:ff:ba:1e:86:d8:10:78:df:a5:53:27:ee:
bf:e4:d8:c3:eb:90:8d:f2:c5:55:c3:85:cd:cd:f2:2b:db:00:
6e:87:2a:c4:a0:43:5f:29:4f:14:89:49:c8:19:29:2d:7c:de:
54:6e:f7:78:c8:e8:ec:9b:d9:fb:83:36:fc:69:a9:be:54:f8:
9c:9c:41:f7:65:3d:66:42:55:ae:78:0b:a8:60:8f:ca:3d:45:
20:ce:c6:77:65:21:f8:7d:ed:8e:1e:3a:c3:45:39:51:82:fb:
d3:fd:f1:1e:32:48:98:ce:41:45:a4:29:da:f4:c6:b4:b7:01:
28:3c:34:ab:25:dc:3b:04:b2:7b:9b:73:20:cf:60:e0:80:ee:
53:65:aa:bf:bf:d2:a8:73:0d:7a:88:39:26:35:45:8d:c8:4e:
cd:71:17:cc:6f:5b:4c:62:f3:e9:0d:6d:4a:95:fd:fc:85:3f:
0a:da:f7:e3:54:79:a4:92:b2:58:d6:3d:c8:23:90:fc:5b:d9:
ae:10:e6:3e:2a:fe:f5:d2:e5:bb:22:8b:2c:8e:87:91:35:69:
b4:d8:0c:07:a5:5e:53:aa:4d:cc:b2:84:b3:8c:54:f2:6f:1b:
d7:5d:fe:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:33:05 2025 by rpki-client