Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
File: ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft (raw, json)
Hash identifier: YmOz0igtSFv6zaXxEuIDX70hmnBDfGjRoM+GJmw+3PY=
Subject key identifier: DD:BA:0F:BF:18:45:FA:BA:3C:30:78:E7:F7:66:EB:B2:FA:16:AB:F9
Authority key identifier: B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2
Certificate issuer: /CN=b9aefe976787c2878e269d807cab98ad736d61e2
Certificate serial: 0198D4A7E2E2B276ADB7E09AF3A1AF71864D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
Manifest number: 13C2
Signing time: Sat 23 Aug 2025 02:00:29 +0000
Manifest this update: Sat 23 Aug 2025 02:00:29 +0000
Manifest next update: Sun 24 Aug 2025 02:00:29 +0000
Files and hashes: 1: ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl (hash: BEgIA7Tf57AwJ2iL1Erc5L0cMY8O131nvc3WWMhExP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:e2:e2:b2:76:ad:b7:e0:9a:f3:a1:af:71:86:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9aefe976787c2878e269d807cab98ad736d61e2
Validity
Not Before: Aug 23 02:00:29 2025 GMT
Not After : Aug 24 02:00:29 2025 GMT
Subject: CN=ddba0fbf1845faba3c3078e7f766ebb2fa16abf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8c:13:b7:e2:41:5f:c2:69:da:00:7f:5d:b2:
b7:94:2c:bf:91:c0:72:5e:e6:1c:06:7e:d2:ae:b4:
f5:b2:1d:2c:0b:f8:7d:3d:80:08:17:83:ed:28:89:
f3:67:50:82:1a:69:16:c3:c3:d4:e6:f5:c3:1a:bd:
f0:d0:b4:fb:3b:07:55:1d:93:b3:6b:4f:67:bc:cc:
ff:17:f5:5d:f6:9f:1d:10:e6:d0:e7:e7:04:83:2a:
83:c7:39:0c:16:be:f5:93:a8:3d:b4:9a:43:8a:bc:
30:75:5a:d6:4c:98:f6:51:3e:88:d0:75:e3:2f:d6:
cd:ae:a1:56:e5:8d:f9:7c:7d:46:9b:94:7f:0a:c7:
7c:72:38:ca:36:0f:db:5c:66:58:27:32:c9:ef:20:
5d:95:5d:3c:c0:92:01:73:d7:8c:54:ce:d2:5e:fc:
81:7d:1d:55:0b:05:c5:57:62:61:16:97:10:2d:d9:
d9:cd:5b:8b:14:e1:ed:84:06:38:1d:3e:a2:c8:ca:
6a:7c:4e:0b:28:2e:80:e5:17:37:39:8d:32:fd:ab:
a7:f9:5d:b7:7a:98:b3:23:5b:65:08:5d:1e:08:75:
25:59:3f:42:22:76:33:29:ac:e2:ae:a3:39:7c:91:
0b:f4:c3:7f:d6:ed:2a:11:8c:53:7d:cb:29:9b:05:
42:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BA:0F:BF:18:45:FA:BA:3C:30:78:E7:F7:66:EB:B2:FA:16:AB:F9
X509v3 Authority Key Identifier:
keyid:B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c2:f6:c4:5d:6b:d8:75:ba:74:73:09:fe:96:89:db:c3:46:
06:5e:d3:1e:e8:c6:fe:3c:49:63:9f:77:87:88:49:44:df:c1:
ce:be:9e:1b:c5:13:41:00:7d:87:af:14:71:ca:6e:72:c9:9b:
77:db:18:09:50:d6:e9:ea:cc:ee:57:51:75:8d:8e:8d:76:ef:
93:87:c2:e7:c5:4a:00:59:c6:8e:4f:26:27:27:fb:94:9e:d1:
89:31:40:e2:cd:ae:08:97:20:3d:2e:90:79:85:a8:b1:96:82:
d0:8b:c3:e3:53:44:7f:e0:88:1d:fa:6e:56:7d:47:53:da:d8:
3b:bf:37:04:4d:74:f4:23:5c:ed:e6:6b:11:ce:eb:69:d5:c8:
87:d9:5a:6d:ea:7f:d3:59:5c:ab:45:8d:e2:35:ba:65:32:7e:
4b:0c:4f:23:3d:f2:bc:1b:4d:38:d4:28:72:83:6a:59:32:52:
d9:c0:e3:e2:9d:37:81:71:92:c4:99:17:79:a0:bb:53:01:6c:
01:33:89:44:06:1d:cc:04:c5:78:d9:c4:81:59:cb:05:c5:02:
8a:ab:d3:49:e4:46:ca:73:c7:5c:a4:3f:bb:9a:54:a2:4b:65:
ce:7d:46:7c:bb:12:dc:f0:39:ed:dc:02:ed:47:36:1a:92:c8:
b4:89:36:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:32 2025 by rpki-client