Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
File: Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft (raw, json)
Hash identifier: ei+KHzYN65vj3o4ukrJZPFbmS2EA8uc3IaVWlHU9XnM=
Subject key identifier: 94:45:32:E6:EB:22:B0:E0:3E:B7:96:6D:E5:3A:0A:54:8B:C0:BB:A0
Authority key identifier: 53:1E:DB:25:54:D2:5D:1C:10:D8:71:4E:81:D3:6C:C2:95:D9:6B:F9
Certificate issuer: /CN=531edb2554d25d1c10d8714e81d36cc295d96bf9
Certificate serial: 0197B6A1066CB891A2DEB65BC7ED8071E716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
Manifest number: 0AC1
Signing time: Sat 28 Jun 2025 13:01:35 +0000
Manifest this update: Sat 28 Jun 2025 13:01:35 +0000
Manifest next update: Sun 29 Jun 2025 13:01:35 +0000
Files and hashes: 1: Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl (hash: 4R4YPyRT/saBEGa0Ycwk/VE+C2lmVh5iIL3bBk4yTbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:06:6c:b8:91:a2:de:b6:5b:c7:ed:80:71:e7:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=531edb2554d25d1c10d8714e81d36cc295d96bf9
Validity
Not Before: Jun 28 13:01:35 2025 GMT
Not After : Jun 29 13:01:35 2025 GMT
Subject: CN=944532e6eb22b0e03eb7966de53a0a548bc0bba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5d:ec:85:8b:2f:03:ba:ab:07:73:39:93:82:
dd:e2:b5:dd:fd:b3:68:fe:d2:ca:fd:d8:4f:7c:b5:
f7:bf:c9:a0:4d:67:e5:ae:03:f0:41:4c:50:ee:2b:
81:f5:02:15:99:4d:9c:55:98:5d:f2:e2:82:53:4f:
bf:33:f8:04:d8:7a:1f:a1:8f:db:ae:d6:ab:f4:bc:
8b:0f:71:02:03:9c:4b:3d:75:5a:88:33:d7:4a:2a:
00:f1:27:ed:f4:2a:2f:26:e0:63:b8:02:63:b9:b4:
f3:f8:1a:97:4d:74:75:12:61:d6:6c:22:7f:ad:a1:
17:3f:b3:07:72:57:5a:e4:cc:72:ed:8a:64:dd:1b:
4d:be:f5:bf:c3:b8:39:a0:cd:b6:4c:66:d6:ae:23:
a3:53:58:2b:7b:89:df:76:ec:1e:d8:df:5e:25:96:
59:e5:8e:f5:6a:b3:9a:0c:cd:9e:2a:74:fa:57:1e:
02:54:39:99:a9:11:2d:73:57:17:00:3a:0f:4f:ee:
01:bd:60:5d:6d:cf:0b:ea:b7:cc:02:03:af:7f:2d:
41:5c:7c:26:34:3c:de:7a:88:c3:c4:b9:a5:74:4c:
8d:82:4e:86:41:ac:95:03:58:c3:84:4f:21:e7:e1:
ff:52:ce:0b:c9:5f:10:bc:ad:26:4e:9b:81:04:e5:
a9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:45:32:E6:EB:22:B0:E0:3E:B7:96:6D:E5:3A:0A:54:8B:C0:BB:A0
X509v3 Authority Key Identifier:
keyid:53:1E:DB:25:54:D2:5D:1C:10:D8:71:4E:81:D3:6C:C2:95:D9:6B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:07:e3:90:3c:e1:a2:51:a0:e0:12:09:52:6b:b5:ef:da:1e:
ec:90:39:bc:48:27:68:63:09:f5:aa:aa:96:04:9b:5e:d5:a3:
d0:17:65:bf:a9:7e:dd:f6:6d:f5:88:a9:e0:29:ca:04:2d:20:
ff:d8:3f:37:24:63:5f:9e:4f:f3:05:00:e7:d1:80:78:ae:53:
48:88:f6:2e:8a:84:bb:dc:f8:8e:ae:76:fc:7b:e0:73:5c:48:
2d:c3:80:1a:3b:bd:66:ad:b6:f9:ce:55:8a:6b:70:e2:45:76:
46:fa:75:6f:f8:53:31:e5:5b:c7:6c:8a:17:8c:16:7c:13:3d:
ec:11:d0:85:67:da:cf:ad:32:21:57:79:5a:7f:6a:bf:c0:74:
02:b3:16:63:f2:12:8c:f4:c0:4c:6c:a6:a1:22:ad:ff:c3:69:
54:b6:c7:62:d6:e7:a0:a6:c3:bc:a7:f7:fc:7e:66:c0:e3:ee:
92:83:73:33:32:37:9b:1b:aa:54:10:27:1e:44:50:54:41:e0:
0d:b0:5f:ef:0f:5c:e7:0f:6b:51:18:0e:2b:09:7e:a4:c9:2e:
16:f7:90:d2:b6:e7:07:2f:b5:43:f5:37:33:a5:97:91:3f:21:
94:26:89:00:82:93:ee:8a:54:90:97:d0:d2:86:fb:0d:78:23:
b8:f3:9d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:08 2025 by rpki-client