Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
File: u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft (raw, json)
Hash identifier: 5sQZyvnECTYSAsvDl4h9LRDIstndSCRtnHf5UdEQoXc=
Subject key identifier: F9:52:10:8D:30:D0:4D:47:AA:8E:1E:D9:97:97:BF:6B:0F:6A:75:8D
Authority key identifier: BB:4B:19:38:66:8B:27:B0:52:C6:83:D1:E2:60:C0:CD:3D:56:87:5B
Certificate issuer: /CN=bb4b1938668b27b052c683d1e260c0cd3d56875b
Certificate serial: 0198D4A85F020DFF9891FC29EEA6BDA31913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
Manifest number: 03D0
Signing time: Sat 23 Aug 2025 02:01:00 +0000
Manifest this update: Sat 23 Aug 2025 02:01:00 +0000
Manifest next update: Sun 24 Aug 2025 02:01:00 +0000
Files and hashes: 1: u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl (hash: Z0bjpUPwRgFnXhD9hGkNwBKUWm2zE7N2whJc2tqyTIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:5f:02:0d:ff:98:91:fc:29:ee:a6:bd:a3:19:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4b1938668b27b052c683d1e260c0cd3d56875b
Validity
Not Before: Aug 23 02:01:00 2025 GMT
Not After : Aug 24 02:01:00 2025 GMT
Subject: CN=f952108d30d04d47aa8e1ed99797bf6b0f6a758d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a2:bd:bc:0d:e3:93:28:80:60:7a:2c:9f:2e:
fa:81:88:93:f5:0c:34:c2:e5:e6:e6:60:e6:a9:65:
ec:5e:fa:ed:fe:2a:0f:af:7b:a8:d2:88:17:93:8e:
06:b4:3b:21:3c:3a:4e:0e:bd:84:22:dd:ee:e0:80:
5e:a6:28:89:25:f6:8c:8f:10:a6:cf:4f:2f:52:00:
3f:85:45:8e:36:d5:39:5c:30:4b:c9:d2:34:8a:3e:
d7:0e:07:00:3b:5a:f6:5a:88:b6:00:57:c7:4d:dc:
76:41:66:bf:3c:54:cc:25:aa:68:a2:75:a9:9d:8a:
ff:6f:88:76:93:a8:64:25:bd:18:72:85:84:0f:3e:
30:a2:54:bd:34:69:17:23:39:30:6d:04:c3:d1:ed:
59:96:24:dd:4a:11:64:83:07:02:ce:01:6c:a7:1b:
22:e9:33:bf:d3:90:ea:6f:63:53:ea:f9:e6:fd:e3:
be:43:5e:2c:2f:9d:57:59:7f:ea:ba:9f:57:3a:f6:
6f:86:88:ed:8b:57:ba:88:93:4b:a5:42:07:c0:f3:
4d:eb:19:72:28:d4:77:ba:13:bf:f4:83:6f:8d:8e:
0b:30:ea:45:c4:eb:69:5d:17:e8:4f:6c:b7:03:4a:
7d:96:0b:3c:f6:1d:0d:d6:a1:d8:ae:a5:25:ff:37:
01:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:52:10:8D:30:D0:4D:47:AA:8E:1E:D9:97:97:BF:6B:0F:6A:75:8D
X509v3 Authority Key Identifier:
keyid:BB:4B:19:38:66:8B:27:B0:52:C6:83:D1:E2:60:C0:CD:3D:56:87:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:f0:da:6d:1a:95:5b:95:87:62:14:81:6a:07:60:d6:82:98:
dc:90:cd:c0:98:ad:4d:b7:1f:e0:07:35:41:0f:c0:48:96:4d:
bf:1e:d5:8d:27:7c:ef:fa:cb:c3:0c:35:92:ce:fc:58:f8:43:
2b:83:dc:9f:a6:17:45:18:ef:c2:aa:24:0c:56:47:bf:20:c3:
a6:25:0f:b9:11:e2:74:53:f1:8e:f9:c9:ed:95:a5:8c:df:93:
8b:01:59:b3:5f:79:e0:78:80:c2:f2:ad:1c:bc:26:a4:ad:a0:
24:ac:37:94:e9:f3:69:b1:d9:68:2f:ec:4f:8c:d3:57:ff:b6:
79:77:b5:e4:03:a7:f7:f7:12:ca:40:79:99:b5:20:68:4a:59:
f7:31:0a:45:d5:7a:92:9d:ca:69:5f:08:6d:b5:4d:49:26:a6:
c6:8b:f9:4b:b4:b7:50:53:a8:b1:0f:ba:a9:aa:77:20:bd:bf:
08:f8:99:90:2d:db:ff:13:0f:83:b4:01:97:c4:a5:c6:de:4a:
7f:14:b7:b1:a8:2a:46:72:14:a3:ad:1c:64:72:22:93:a6:07:
3d:2a:cb:07:72:58:47:74:b3:1b:93:e4:b1:42:4a:36:20:44:
05:c7:3b:47:a3:03:8a:da:af:e8:6e:c7:bc:d0:50:b5:dc:5a:
90:a7:45:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:45 2025 by rpki-client