Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
File: ux1P6zEebC28c9UE_ISQzCFUY4k.mft (raw, json)
Hash identifier: B2RwdKqiej2IW6vVMwragScmNpSzIkUv3k/mftWeRfQ=
Subject key identifier: F0:20:AE:55:51:31:C5:67:6F:41:52:E0:8F:AD:0F:A2:D3:71:4B:A6
Authority key identifier: BB:1D:4F:EB:31:1E:6C:2D:BC:73:D5:04:FC:84:90:CC:21:54:63:89
Certificate issuer: /CN=bb1d4feb311e6c2dbc73d504fc8490cc21546389
Certificate serial: 0198D54EB164E2E385CC86A618560F779EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
Manifest number: 038B
Signing time: Sat 23 Aug 2025 05:02:40 +0000
Manifest this update: Sat 23 Aug 2025 05:02:40 +0000
Manifest next update: Sun 24 Aug 2025 05:02:40 +0000
Files and hashes: 1: ux1P6zEebC28c9UE_ISQzCFUY4k.crl (hash: U923dhjMJ/9y6dHXrLSKYdIl8fzJBmx1LerAur9BurY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:b1:64:e2:e3:85:cc:86:a6:18:56:0f:77:9e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb1d4feb311e6c2dbc73d504fc8490cc21546389
Validity
Not Before: Aug 23 05:02:40 2025 GMT
Not After : Aug 24 05:02:40 2025 GMT
Subject: CN=f020ae555131c5676f4152e08fad0fa2d3714ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:51:57:96:03:f5:13:07:54:64:c6:6c:0e:c9:
65:c0:d4:83:28:c2:bb:63:80:97:63:dd:9c:51:72:
8c:6f:ec:78:18:b9:6e:70:39:1a:d9:f8:81:50:39:
13:20:0b:c2:8c:19:48:2b:11:2c:3c:2a:87:19:a9:
9f:91:42:63:74:4f:81:bd:b0:96:06:d6:5f:9c:4f:
5e:29:b2:54:57:62:f2:40:39:4b:e2:32:e4:37:af:
b9:df:5e:6b:0b:00:42:83:9b:0a:5e:48:2d:ef:dc:
ce:a5:73:5b:2d:ff:48:09:af:8d:06:94:27:83:b2:
af:b8:50:b4:6d:8c:6c:93:87:f9:8d:d7:ab:f8:77:
54:cf:6f:b9:c1:ce:2d:70:4f:dd:21:3e:9f:62:82:
fa:5b:95:69:f0:13:55:19:b0:e5:1e:22:7a:df:d4:
7d:0c:30:8a:61:0c:ae:31:d6:e9:75:7b:45:42:3b:
3c:d4:cb:90:7a:20:7a:6b:30:39:7d:73:30:87:e9:
7c:03:7d:93:1a:ec:97:b9:16:45:0a:58:73:20:7e:
37:dd:0e:e0:41:9a:e2:d0:b7:36:cf:76:84:98:57:
09:a2:4d:21:1e:7a:3e:67:3f:bb:e0:10:86:85:c5:
f7:bf:f8:ee:d6:8f:38:ea:06:08:d5:18:57:14:6f:
06:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:20:AE:55:51:31:C5:67:6F:41:52:E0:8F:AD:0F:A2:D3:71:4B:A6
X509v3 Authority Key Identifier:
keyid:BB:1D:4F:EB:31:1E:6C:2D:BC:73:D5:04:FC:84:90:CC:21:54:63:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c5:f7:33:3c:63:7e:24:91:05:b6:4b:22:27:14:e0:25:77:
fd:07:c6:43:df:ed:ec:f4:3f:50:7f:db:04:a0:42:39:df:19:
66:84:7c:06:bb:df:44:c4:4b:d5:0f:e5:6b:40:f2:5a:cd:c7:
c3:a1:df:e1:9c:7b:0d:ae:54:16:4e:df:d2:ee:99:d4:9e:18:
7a:29:3f:ec:a0:91:25:e8:e1:7c:c3:da:8a:56:7a:c8:9b:12:
c8:dc:b8:65:a0:6e:83:dd:66:e7:91:0a:41:f2:57:13:12:86:
b7:5b:94:eb:00:57:6a:94:cd:ff:43:73:0d:20:be:f6:3c:a8:
eb:54:e9:d9:bd:dc:71:63:56:e0:44:17:db:fe:c1:81:7f:48:
4a:7e:56:b2:7a:1c:73:e9:65:27:c4:be:db:cc:8e:81:ef:7d:
be:f4:07:4b:6e:f2:ac:44:c3:b7:71:ab:d2:75:c4:aa:0c:10:
2f:09:d2:13:18:17:e0:00:7c:31:21:47:7f:aa:89:81:f9:75:
af:04:7f:69:a1:d0:24:27:0f:9e:17:70:77:48:f5:0b:5a:f1:
be:f3:78:e7:ae:21:da:a0:6d:5e:1a:87:65:07:37:64:ad:35:
16:3c:30:88:8d:37:f1:76:99:09:6b:80:ca:80:f1:3c:58:62:
f0:81:67:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:17 2025 by rpki-client