Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
File: g-ULKlHI9a25N7IqkMcg9rBPKXM.mft (raw, json)
Hash identifier: /uVjRqroIxb1jshpsd/7g5CM1JYs0BimTfhgIlos328=
Subject key identifier: 84:A7:7C:07:9B:FC:5F:F1:4C:6F:1B:95:3C:92:25:9B:ED:27:26:E9
Authority key identifier: 83:E5:0B:2A:51:C8:F5:AD:B9:37:B2:2A:90:C7:20:F6:B0:4F:29:73
Certificate issuer: /CN=83e50b2a51c8f5adb937b22a90c720f6b04f2973
Certificate serial: 0198D4E02E89E076EEB41CF00876BF2FB8B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
Manifest number: 145C
Signing time: Sat 23 Aug 2025 03:01:58 +0000
Manifest this update: Sat 23 Aug 2025 03:01:58 +0000
Manifest next update: Sun 24 Aug 2025 03:01:58 +0000
Files and hashes: 1: g-ULKlHI9a25N7IqkMcg9rBPKXM.crl (hash: hrpny7a90Ghed7knTzmwjw+sgXQreoKPHJIXhnnf+u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:2e:89:e0:76:ee:b4:1c:f0:08:76:bf:2f:b8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e50b2a51c8f5adb937b22a90c720f6b04f2973
Validity
Not Before: Aug 23 03:01:58 2025 GMT
Not After : Aug 24 03:01:58 2025 GMT
Subject: CN=84a77c079bfc5ff14c6f1b953c92259bed2726e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:05:0a:bb:2d:73:42:25:d1:0b:8c:4a:c1:61:
b8:9a:22:f2:27:9b:39:11:f8:90:1e:a9:ea:c9:e5:
ab:aa:16:32:c8:60:ce:b6:96:dc:17:28:de:c4:02:
20:e1:ae:58:25:91:85:a7:85:91:87:78:1e:88:48:
03:5c:13:b8:33:11:87:cd:56:7a:50:1b:5a:78:a3:
a2:13:70:e5:d5:17:be:bd:78:ad:07:a1:41:ab:dd:
6d:f3:1e:7e:5d:a5:e9:a9:40:9d:5c:7b:6d:33:84:
9a:ec:bc:17:e3:a1:7f:cc:7e:ec:de:c1:d5:d2:a4:
5c:d5:06:de:11:1a:50:fa:f2:a3:57:0b:c8:40:68:
7a:10:0b:56:ef:ca:86:de:9a:ef:53:8c:4b:89:59:
27:ba:58:9c:a1:a9:69:d9:76:02:8d:33:2b:e4:79:
61:fd:ac:e9:a7:15:b8:01:b3:a4:e0:0e:5f:24:56:
e9:24:35:69:3c:28:49:ab:12:b1:9e:67:bf:7b:48:
6d:f8:70:c1:ba:8a:35:05:e5:a1:bd:a2:8f:a8:59:
1d:21:fe:fd:6c:e9:72:10:12:77:75:c7:bf:2e:55:
e3:e0:dd:21:67:a2:10:47:a8:68:ce:8b:9a:8b:cb:
9e:66:b3:e8:22:27:ea:70:12:60:60:ee:d4:b0:56:
2b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A7:7C:07:9B:FC:5F:F1:4C:6F:1B:95:3C:92:25:9B:ED:27:26:E9
X509v3 Authority Key Identifier:
keyid:83:E5:0B:2A:51:C8:F5:AD:B9:37:B2:2A:90:C7:20:F6:B0:4F:29:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:64:be:3c:b8:f3:9d:a7:5c:26:61:a9:34:19:48:c4:ca:33:
1b:b3:42:79:c3:9c:8b:4e:ca:0b:06:46:5e:8e:74:1d:7a:69:
c3:01:a3:24:55:9b:80:44:d8:24:01:53:18:96:ad:bd:52:00:
31:ab:4d:23:d0:18:1d:4d:04:ab:b7:c4:71:e9:46:62:af:90:
af:16:cd:1a:b2:39:45:d7:13:f0:1c:91:80:c3:22:6e:28:18:
64:68:d4:2e:ac:c7:b1:1b:18:00:ab:4e:f4:5c:2f:be:0f:ad:
bd:d4:bf:5c:26:f6:08:fa:50:06:6c:6d:44:a3:7f:18:2c:f6:
17:4a:b5:eb:73:d7:80:8e:99:73:8e:c2:86:8f:fd:01:1d:cb:
24:e1:af:b1:59:13:14:c2:d0:84:8f:a4:82:3c:6d:62:77:ba:
89:f3:36:ea:ae:68:4b:59:22:ee:35:81:33:7b:11:2c:96:83:
b2:33:79:c4:ec:7f:d9:f2:82:0a:4a:e7:e5:07:92:89:7b:0c:
0c:5b:41:2d:9b:42:66:94:a4:0f:a4:64:0a:c4:b7:9f:a2:ce:
9e:b0:f2:01:90:17:29:ae:83:a5:dd:e0:75:17:20:97:f9:3f:
73:43:f7:ae:30:96:4a:11:f8:cb:b6:8a:42:17:06:57:b0:2e:
e1:45:ef:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:13 2025 by rpki-client