Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
File: ulnZ9a887kQgFLc1lhxzuWkmDhk.mft (raw, json)
Hash identifier: 7QjJR/JXNDgJEMGoelkId2xPZSH5YsWyeNZ0mBOqXFE=
Subject key identifier: 6E:FE:35:F6:36:0A:A1:61:79:76:4A:3C:E5:40:0E:DE:B6:80:43:7E
Authority key identifier: BA:59:D9:F5:AF:3C:EE:44:20:14:B7:35:96:1C:73:B9:69:26:0E:19
Certificate issuer: /CN=ba59d9f5af3cee442014b735961c73b969260e19
Certificate serial: 0198D4745555C1599D70077BFB2CACAC6BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
Manifest number: 1644
Signing time: Sat 23 Aug 2025 01:04:10 +0000
Manifest this update: Sat 23 Aug 2025 01:04:10 +0000
Manifest next update: Sun 24 Aug 2025 01:04:10 +0000
Files and hashes: 1: ulnZ9a887kQgFLc1lhxzuWkmDhk.crl (hash: Y4s3M5p93iAEkwiaVfn4G4Jq4p/HFZrpxxajWnA3Gfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:55:55:c1:59:9d:70:07:7b:fb:2c:ac:ac:6b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba59d9f5af3cee442014b735961c73b969260e19
Validity
Not Before: Aug 23 01:04:10 2025 GMT
Not After : Aug 24 01:04:10 2025 GMT
Subject: CN=6efe35f6360aa16179764a3ce5400edeb680437e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8d:a7:5a:8f:33:d0:d7:ee:15:c8:6c:ae:ce:
e4:51:88:63:b8:03:0d:ec:14:e2:80:d7:53:f2:c1:
1f:26:d3:26:b6:69:08:ae:c1:a3:29:43:9f:0f:22:
e4:f0:4f:74:b2:de:cd:62:86:d4:1a:a2:3e:d7:f6:
6a:8a:fb:b4:71:74:7a:02:14:7b:51:68:31:cf:8d:
ab:0b:32:e3:13:fe:2d:fc:62:de:15:8c:ff:6f:ea:
34:b6:5c:48:cc:5d:8e:17:24:04:eb:ae:8e:d2:5d:
cb:2b:85:24:41:33:84:8a:3e:17:17:84:00:97:b0:
fc:c4:84:d7:ab:67:f9:c3:ca:5e:a7:1b:56:c2:a2:
9a:8e:67:e8:49:30:33:bd:05:b6:b0:15:35:8f:12:
dd:cd:53:bf:d2:32:f9:fb:da:47:d4:99:b7:d0:a5:
92:b8:94:f2:d3:64:a5:fb:88:a0:d4:9c:3e:34:f2:
f8:e3:74:58:b0:3d:a6:54:61:62:75:5a:24:e7:8e:
75:21:ee:8c:1f:c1:ab:6a:54:c9:9e:2f:26:b4:93:
92:8d:84:6f:6a:b6:c3:a9:ee:11:fd:a8:25:03:ea:
c4:ee:bc:b4:6a:5f:dd:c5:ee:de:c8:36:49:63:31:
c9:80:b0:7f:a7:ef:85:7f:74:97:a8:a0:66:4d:4a:
bb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FE:35:F6:36:0A:A1:61:79:76:4A:3C:E5:40:0E:DE:B6:80:43:7E
X509v3 Authority Key Identifier:
keyid:BA:59:D9:F5:AF:3C:EE:44:20:14:B7:35:96:1C:73:B9:69:26:0E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:22:b7:bb:bc:83:25:c0:de:c3:60:0b:e9:b0:48:5a:6b:85:
7a:d2:8c:46:28:a8:aa:ff:2e:0a:fc:8f:c6:d0:96:c8:8b:c7:
82:e8:12:95:11:18:00:19:31:4b:a9:83:9d:cd:6f:8a:f8:ce:
c3:25:31:4f:cc:42:87:de:c6:61:a9:4e:27:cd:b7:3b:75:c2:
6b:19:b0:db:7b:6f:4f:14:53:34:66:98:29:94:d3:ce:64:50:
6c:bc:e9:37:25:8d:eb:9f:89:ee:97:c9:4b:85:01:f9:fe:fc:
50:50:2b:22:e1:b9:43:92:51:03:c0:69:ce:ba:a5:af:4d:cc:
f8:24:08:5b:52:6e:cc:e0:07:f3:e0:5a:aa:3e:0a:1a:d3:0f:
b4:6b:e2:e5:0b:f0:f3:98:8b:1a:27:21:37:30:9f:da:29:46:
db:93:cb:79:dc:8a:dd:39:79:ff:c2:74:90:b0:e0:55:ad:2d:
98:3a:78:ca:4d:40:c3:11:29:2a:ee:95:e1:dd:47:45:93:b6:
a6:1d:1d:96:1f:f4:9a:e7:c8:af:f9:fb:c4:25:a3:a7:e3:6c:
70:16:5b:16:d2:a6:e5:51:8a:ea:bc:3d:22:45:d5:49:04:14:
b7:b8:fb:fd:94:a6:6d:9b:d2:5b:59:c0:38:aa:eb:c3:33:00:
6c:b4:24:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:41 2025 by rpki-client