
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/931702-c2dc-409e-b3ec-f3ba742d5040/1/_uXfTWBHvAq-eZp3LAhSusWN9Dg.mft
File: _uXfTWBHvAq-eZp3LAhSusWN9Dg.mft (raw, json)
Hash identifier: GcyOj+R22HoWHIOsoV1ywY+IrwC/QGKxpog7x8c3/qU=
Subject key identifier: 39:D0:B8:2E:2A:8E:00:C7:FC:BC:13:94:1B:DA:D3:A9:10:46:CA:91
Authority key identifier: FE:E5:DF:4D:60:47:BC:0A:BE:79:9A:77:2C:08:52:BA:C5:8D:F4:38
Certificate issuer: /CN=fee5df4d6047bc0abe799a772c0852bac58df438
Certificate serial: 0198D629815E55DEB16DD899571C24906BEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_uXfTWBHvAq-eZp3LAhSusWN9Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/931702-c2dc-409e-b3ec-f3ba742d5040/1/_uXfTWBHvAq-eZp3LAhSusWN9Dg.mft
Manifest number: 21
Signing time: Sat 23 Aug 2025 09:01:40 +0000
Manifest this update: Sat 23 Aug 2025 09:01:40 +0000
Manifest next update: Sun 24 Aug 2025 09:01:40 +0000
Files and hashes: 1: _uXfTWBHvAq-eZp3LAhSusWN9Dg.crl (hash: O7lZxM4yn/hJMvfAnU5GVafzHxEtbHrOZ6h5x4Nj9YI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/931702-c2dc-409e-b3ec-f3ba742d5040/1/_uXfTWBHvAq-eZp3LAhSusWN9Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/931702-c2dc-409e-b3ec-f3ba742d5040/1/_uXfTWBHvAq-eZp3LAhSusWN9Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_uXfTWBHvAq-eZp3LAhSusWN9Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:81:5e:55:de:b1:6d:d8:99:57:1c:24:90:6b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fee5df4d6047bc0abe799a772c0852bac58df438
Validity
Not Before: Aug 23 09:01:40 2025 GMT
Not After : Aug 24 09:01:40 2025 GMT
Subject: CN=39d0b82e2a8e00c7fcbc13941bdad3a91046ca91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9b:7d:f0:ca:9e:50:d1:12:3e:0f:30:04:e3:
9f:be:d0:13:b1:f4:e7:5b:31:ac:90:d7:44:fe:61:
9a:62:ec:81:db:10:3e:a6:23:d4:0b:d5:fd:7d:18:
d7:5b:15:4d:0a:50:21:1f:51:71:e6:4d:d7:b6:cd:
44:a5:4c:42:56:4f:d4:c5:13:0f:e4:94:13:e0:83:
49:0d:56:16:48:95:5f:09:c0:a4:38:68:cb:67:3a:
e4:ee:62:56:94:17:e2:82:b3:b9:13:87:a4:30:8b:
96:88:ba:ea:88:68:17:15:24:f1:84:26:0f:ac:f2:
a4:29:fe:ae:3e:30:e2:8b:f4:d3:27:d3:80:8c:65:
2a:60:86:4e:ed:5b:47:00:6f:9d:b0:53:1a:e2:25:
6b:c6:a4:40:7a:98:c0:cf:26:4f:cc:cc:28:55:16:
18:a3:78:95:25:8c:27:6d:9f:2c:3e:a8:41:73:33:
97:75:c4:52:9c:80:17:21:80:bf:d7:50:40:62:99:
56:29:67:de:53:0f:39:c4:b4:67:65:ce:8c:e2:55:
98:01:ba:6a:e6:1f:53:5f:a7:1b:91:66:7f:ad:03:
50:97:37:2d:f6:e4:4f:21:d3:d9:cf:cc:e4:6e:67:
5b:ec:cf:b8:a3:d3:93:c7:83:1e:05:34:b4:b9:ee:
b6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D0:B8:2E:2A:8E:00:C7:FC:BC:13:94:1B:DA:D3:A9:10:46:CA:91
X509v3 Authority Key Identifier:
keyid:FE:E5:DF:4D:60:47:BC:0A:BE:79:9A:77:2C:08:52:BA:C5:8D:F4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_uXfTWBHvAq-eZp3LAhSusWN9Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/931702-c2dc-409e-b3ec-f3ba742d5040/1/_uXfTWBHvAq-eZp3LAhSusWN9Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/931702-c2dc-409e-b3ec-f3ba742d5040/1/_uXfTWBHvAq-eZp3LAhSusWN9Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:1d:4e:b7:cf:b7:2f:8c:10:3a:bd:cf:9b:01:f0:94:8c:77:
d5:30:3b:07:77:04:39:6d:5a:a6:43:02:df:af:42:4f:f8:03:
4c:a0:19:0b:d7:de:85:c3:75:5e:df:fe:d6:8f:3e:fa:4e:26:
44:f2:e1:72:d2:bb:c3:17:b4:88:85:94:52:c1:0c:43:02:4a:
a8:be:da:43:aa:01:eb:02:3b:b8:3f:95:7c:67:c3:b8:84:4c:
b8:d3:7d:05:41:34:81:17:c8:cf:26:bd:45:65:d8:76:fa:64:
c2:be:40:02:86:b4:84:8a:3f:29:42:78:05:86:3d:61:d5:0c:
08:ce:a1:b0:4c:af:ec:e7:69:24:25:fd:09:67:a1:49:d9:5a:
a0:a9:63:3d:9e:6d:07:59:15:60:61:3d:a7:24:39:6a:e6:1a:
6c:da:a6:d9:94:d4:8a:d3:a6:73:de:6c:5d:d4:bb:79:76:7d:
3c:d3:e3:1a:e0:77:06:09:bd:ea:45:82:2b:10:56:b7:4b:b0:
16:c9:27:a3:78:bb:99:d6:74:87:b4:6d:2f:21:00:17:55:d8:
a3:41:2b:a0:df:26:39:34:4f:28:6b:02:d1:96:8f:d2:89:ff:
f4:7b:63:28:c9:a4:d3:60:68:d3:29:67:4e:17:00:72:bb:f4:
e5:82:8a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:08 2025 by rpki-client