Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
File: ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft (raw, json)
Hash identifier: /QFASbcE/EfFEHiqZK0ttLniwsqhSYhPN6OvLEUWyc8=
Subject key identifier: 2F:C7:4E:FB:EE:F2:65:64:1C:B0:3F:71:98:9C:88:C2:0F:6F:0D:2B
Authority key identifier: B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2
Certificate issuer: /CN=b9aefe976787c2878e269d807cab98ad736d61e2
Certificate serial: 0197BAB428E574481B17BE9ABCE31BAB9646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
Manifest number: 1330
Signing time: Sun 29 Jun 2025 08:00:58 +0000
Manifest this update: Sun 29 Jun 2025 08:00:58 +0000
Manifest next update: Mon 30 Jun 2025 08:00:58 +0000
Files and hashes: 1: ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl (hash: 0PI3H7zCGBlmWVsXXwc7ntiN1Ffz9SSqYQ4j4e0ifm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:b4:28:e5:74:48:1b:17:be:9a:bc:e3:1b:ab:96:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9aefe976787c2878e269d807cab98ad736d61e2
Validity
Not Before: Jun 29 08:00:58 2025 GMT
Not After : Jun 30 08:00:58 2025 GMT
Subject: CN=2fc74efbeef265641cb03f71989c88c20f6f0d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0f:74:91:48:66:45:88:cf:88:8f:9d:45:0b:
3d:48:b1:e7:6c:20:28:41:2b:47:56:f5:80:10:28:
fa:a3:62:97:f7:95:9c:02:cf:11:c1:bf:ba:6c:fd:
30:1f:d9:47:72:45:41:5e:79:64:ef:36:b9:67:2a:
7c:6c:5b:f8:86:c8:74:24:fd:12:28:e2:0f:50:f1:
06:1b:2f:dd:2d:81:c4:06:4f:0f:37:d0:8a:37:7e:
98:50:32:33:ab:67:6a:2b:be:c4:f5:a4:28:e4:8a:
78:6e:1a:ee:37:e1:8a:1f:b4:20:3f:38:73:13:8b:
15:16:af:58:d9:81:27:4c:07:c0:e1:26:bb:a8:32:
f0:eb:7e:e2:d7:88:85:7e:1a:da:4c:76:ca:8f:1f:
53:57:93:29:17:14:cc:90:08:ff:0b:b0:3f:e1:31:
21:c1:f3:b2:73:22:95:4e:34:8e:4c:dd:7f:48:d5:
3c:3e:f3:9e:32:f4:9f:d7:77:0a:70:d8:9c:86:3a:
11:a6:93:a4:7d:60:55:d1:99:e1:ae:7c:1a:76:bc:
79:74:50:c8:17:83:d2:0b:a3:c6:9d:c9:9d:cc:9a:
9b:24:c4:f4:76:9b:cc:76:21:da:09:d4:43:4f:43:
de:9b:ef:05:5e:a1:b4:61:c7:b9:03:cc:92:ac:ec:
0a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C7:4E:FB:EE:F2:65:64:1C:B0:3F:71:98:9C:88:C2:0F:6F:0D:2B
X509v3 Authority Key Identifier:
keyid:B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:25:6f:4a:8f:b1:e5:9b:05:1a:2e:55:4b:9a:aa:30:32:54:
ec:4e:f6:9d:9c:30:cb:e3:bc:a9:34:12:2c:ed:df:2e:cd:38:
3e:ab:6e:85:ff:c3:4a:ea:b4:82:9d:a6:e3:e5:04:91:48:55:
f9:39:36:69:ed:2d:9a:1b:20:bf:1e:a2:b8:92:31:86:50:2a:
10:fe:7f:3f:8a:09:c8:90:ed:bb:23:37:29:57:dc:57:96:43:
9f:9b:8a:b1:ed:fc:ec:b3:dc:f0:50:d7:88:7c:e8:26:5b:9d:
a3:aa:4d:48:f8:52:d0:88:de:b2:8d:ad:f1:df:8f:9a:f9:8a:
b7:c6:a7:e4:18:f3:e0:76:c4:e1:41:74:e3:24:95:91:b7:14:
f2:29:bc:8f:25:9e:88:31:1e:76:1e:4c:b3:e2:87:c7:32:91:
4a:d2:b3:a1:f8:c1:fe:5d:45:c4:df:6f:cb:11:d6:59:87:c2:
85:dd:bb:3a:0e:74:d7:bd:e3:d5:be:97:e3:05:2c:3d:f1:bb:
0b:1f:ef:10:a6:d0:e3:35:4c:38:a4:c5:09:b5:b4:b1:54:9d:
99:3a:bb:0a:e4:5f:07:16:2b:8e:0f:4d:ae:63:ef:a5:8f:8a:
96:77:a1:00:99:2c:86:1d:1a:72:f1:2c:08:a1:90:48:ea:3e:
34:9a:c8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:28:42 2025 by rpki-client