Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
File: ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft (raw, json)
Hash identifier: Xh7OdvGO8HxZ8JXvjzH5zXuUpV4qmRM0QOBWrobYrT8=
Subject key identifier: 58:9F:BF:A2:D8:74:C7:FD:E8:91:88:F4:15:E1:E3:1E:99:38:EE:6E
Authority key identifier: BA:58:27:55:72:43:48:93:B9:CB:D1:4E:4A:DE:70:89:29:E4:67:F8
Certificate issuer: /CN=ba58275572434893b9cbd14e4ade708929e467f8
Certificate serial: 0198D473EE0F8F03523298AC24266D496213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
Manifest number: 1224
Signing time: Sat 23 Aug 2025 01:03:43 +0000
Manifest this update: Sat 23 Aug 2025 01:03:43 +0000
Manifest next update: Sun 24 Aug 2025 01:03:43 +0000
Files and hashes: 1: ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl (hash: xoxvzXvY/7ysITjOqLM2VemO6r/02IooOEMKNCh3Fm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:ee:0f:8f:03:52:32:98:ac:24:26:6d:49:62:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba58275572434893b9cbd14e4ade708929e467f8
Validity
Not Before: Aug 23 01:03:43 2025 GMT
Not After : Aug 24 01:03:43 2025 GMT
Subject: CN=589fbfa2d874c7fde89188f415e1e31e9938ee6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:ef:41:cf:09:3c:7a:73:f9:07:4b:9f:31:15:
f8:45:5f:31:84:81:71:de:fe:63:c1:aa:fd:4f:4c:
a0:eb:f2:f2:69:55:6e:de:50:6a:f0:c0:28:74:d4:
47:9a:4f:17:48:11:1a:2e:3b:c2:0f:8f:c5:d2:23:
d5:f7:20:a6:0b:6a:67:6d:95:4c:ab:b8:d6:23:08:
64:fe:67:09:f5:4c:27:a9:c9:31:2a:c7:26:fd:5d:
d9:c8:71:cc:52:2c:82:f2:5a:69:96:bb:5a:80:ca:
99:d4:16:57:55:3c:6d:59:f9:fc:8e:46:f3:6f:c5:
66:05:e3:56:d7:14:49:69:16:c5:b3:10:af:41:7e:
64:b4:9d:8c:50:44:5f:7e:0c:23:8a:12:5a:d1:8b:
50:b5:c6:0e:c0:fd:5c:72:e2:38:b8:cb:b5:7d:b9:
8c:0e:b4:29:db:8a:32:21:64:8f:91:d3:8f:63:99:
9f:5c:a9:bb:13:7d:5b:95:d9:94:c3:a0:a5:35:4d:
23:09:29:0d:be:7e:d0:8e:38:26:80:49:54:6c:7e:
b9:38:10:6b:f0:b5:74:6e:c1:67:6e:ff:6c:25:ef:
86:fc:83:e0:40:b3:be:6a:92:c7:c0:08:e8:d2:62:
b9:fe:0e:3f:a0:d9:f6:66:a6:ff:a7:d4:fd:4f:92:
00:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9F:BF:A2:D8:74:C7:FD:E8:91:88:F4:15:E1:E3:1E:99:38:EE:6E
X509v3 Authority Key Identifier:
keyid:BA:58:27:55:72:43:48:93:B9:CB:D1:4E:4A:DE:70:89:29:E4:67:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:fd:b4:e0:6d:e1:85:4b:ee:49:af:70:6b:39:35:5a:3a:16:
f6:02:a7:9e:ec:c7:4f:3b:3a:be:79:7a:77:ae:04:b8:30:3e:
f5:7a:09:f5:7c:c6:47:93:4a:38:36:4a:ee:23:1d:de:c4:cf:
9b:4b:1a:e4:72:3c:50:70:7c:83:53:38:04:87:bc:82:74:c9:
58:b6:6d:c1:e5:a6:5f:41:30:5b:00:44:20:a3:c6:22:81:23:
19:e4:06:11:3b:3e:f2:f2:b2:21:d0:28:25:9e:4c:2e:52:07:
b7:0a:11:d0:d2:f4:6a:ec:9a:04:11:5f:d6:eb:8b:0e:91:64:
d2:2d:64:9f:78:0d:f5:8c:53:dc:2d:e5:d7:9b:56:2b:43:d7:
3d:5a:0f:27:29:25:f0:86:10:23:d3:fc:74:c3:b8:0c:a2:67:
2c:8f:84:f7:9d:af:95:fe:3d:09:af:c0:e3:8d:cd:0d:d1:02:
45:ba:87:16:5c:68:60:9a:52:8f:7e:1a:ec:99:50:a0:dc:67:
e6:e6:42:a6:d0:f9:5e:c4:78:7b:a0:46:d7:4e:b5:a2:c4:c4:
c9:fa:bd:2a:99:00:3e:ad:f4:a4:72:dc:fa:9f:87:ae:f9:82:
73:d1:46:37:c6:11:0b:37:ff:f2:94:6d:9c:42:99:7d:4c:35:
c7:a7:c9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:41 2025 by rpki-client