Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
File: U-r4Oizdyf0L4onM-vMrMjMEz04.mft (raw, json)
Hash identifier: TyjesMLTYqPCZFf3V4QytR72THgt+0jZ2PQRatO1Zsc=
Subject key identifier: 98:28:94:D4:D0:BE:C7:54:94:9E:84:AF:84:B1:EC:03:E7:84:3E:DD
Authority key identifier: 53:EA:F8:3A:2C:DD:C9:FD:0B:E2:89:CC:FA:F3:2B:32:33:04:CF:4E
Certificate issuer: /CN=53eaf83a2cddc9fd0be289ccfaf32b323304cf4e
Certificate serial: 0197B745A91247DE9BF4AD1E0E16EC86814A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-r4Oizdyf0L4onM-vMrMjMEz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
Manifest number: 0C83
Signing time: Sat 28 Jun 2025 16:01:25 +0000
Manifest this update: Sat 28 Jun 2025 16:01:25 +0000
Manifest next update: Sun 29 Jun 2025 16:01:25 +0000
Files and hashes: 1: U-r4Oizdyf0L4onM-vMrMjMEz04.crl (hash: Mov1I27oXsy+mB5fD+Vay6Se3AOVfJ7gxPflpYIRBb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-r4Oizdyf0L4onM-vMrMjMEz04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:a9:12:47:de:9b:f4:ad:1e:0e:16:ec:86:81:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53eaf83a2cddc9fd0be289ccfaf32b323304cf4e
Validity
Not Before: Jun 28 16:01:25 2025 GMT
Not After : Jun 29 16:01:25 2025 GMT
Subject: CN=982894d4d0bec754949e84af84b1ec03e7843edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:73:ed:f6:77:f8:b5:f0:f5:d4:10:6e:29:fd:
98:d1:c2:eb:32:08:99:37:f2:d5:8f:c1:e1:3e:34:
5c:21:5f:e6:f0:90:29:44:af:59:b0:6c:09:98:71:
21:3e:68:a5:7c:66:2a:04:e4:6e:fd:07:fa:47:32:
2f:4e:0b:e6:8e:50:45:41:ab:ab:16:f4:fa:0b:bf:
69:17:8b:99:2e:b0:50:7f:2f:a2:6a:52:b9:dc:9c:
40:10:ff:53:74:22:16:c2:68:7b:d9:c5:54:ef:b3:
9a:73:a0:a2:9a:e5:d8:50:e2:3b:0d:f8:2a:20:ad:
af:89:bc:32:3d:b0:3c:39:2e:34:ee:23:48:a6:4f:
a8:c6:70:c5:df:cf:41:d7:ff:fa:77:fb:3f:7c:df:
5d:4c:e8:d0:87:fa:40:08:82:11:29:ba:17:1b:f8:
0e:08:71:ea:75:5e:44:6d:fa:13:79:48:39:0d:b2:
98:47:35:7c:8e:cd:fd:48:fd:9f:89:80:cd:8d:86:
27:6a:7f:1a:80:c9:2f:83:de:35:5b:d3:4b:19:ae:
03:cf:78:14:22:39:ed:87:c9:11:23:61:52:75:ae:
cc:3c:7d:96:7e:f6:2b:53:cb:bc:87:2a:ab:b6:94:
b8:c2:ea:2c:e3:17:00:70:2a:2e:d3:da:6d:19:23:
02:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:28:94:D4:D0:BE:C7:54:94:9E:84:AF:84:B1:EC:03:E7:84:3E:DD
X509v3 Authority Key Identifier:
keyid:53:EA:F8:3A:2C:DD:C9:FD:0B:E2:89:CC:FA:F3:2B:32:33:04:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-r4Oizdyf0L4onM-vMrMjMEz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ae:c4:45:37:66:5e:f9:b4:6f:48:15:8e:88:14:68:e6:c7:
e4:f3:a5:12:db:47:a5:47:8d:57:87:3d:12:b9:2a:75:79:89:
5f:f5:7f:7a:06:93:5e:5a:a2:54:bc:8c:94:ad:27:bb:e8:c7:
5b:f4:87:aa:33:69:29:4f:c3:b6:48:62:5c:e7:4a:96:09:f1:
04:b1:1e:5a:15:54:93:d7:4e:8d:01:8e:7a:be:3c:4a:d4:05:
8c:ca:a1:6a:f6:de:f1:bf:fa:fb:c1:98:cb:c0:3e:e4:bd:b7:
dc:53:af:1b:77:3d:39:4c:de:56:57:8f:51:30:92:22:b8:41:
42:43:0b:da:e9:5c:88:8d:3c:81:6e:83:b9:55:1f:04:e8:5f:
e3:24:f2:e3:f3:e2:83:22:47:71:0b:bf:dd:fc:22:07:c5:08:
3e:e0:5d:23:c5:61:11:19:d9:28:f3:c1:68:89:4a:18:23:62:
d6:6b:2c:b4:42:65:39:43:13:49:2e:9f:ba:fb:e2:48:c6:c6:
e1:3a:56:f0:38:7c:82:62:16:dd:47:aa:40:1e:cf:fa:d7:e8:
92:62:8f:80:55:f7:d7:92:fa:72:58:1f:1e:0f:b8:05:58:55:
18:53:63:03:28:9e:5a:8f:2d:fe:3c:5a:f8:98:5c:8d:1d:f0:
2d:1a:8f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:19 2025 by rpki-client