Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
File: UfKdGEvMUP5lTd70AV3hfSRv0qM.mft (raw, json)
Hash identifier: J2VrB6GYCQbkW5nnHFJbxe4ZnLKGbUPcvLAalGuGN74=
Subject key identifier: 08:04:2F:B2:06:53:17:D8:9E:B5:C5:BA:8F:DD:C0:EF:8B:FE:0B:B1
Authority key identifier: 51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3
Certificate issuer: /CN=51f29d184bcc50fe654ddef4015de17d246fd2a3
Certificate serial: 0198D7E1886BDFB76592710F5AEFBBA8F93E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
Manifest number: 3F
Signing time: Sat 23 Aug 2025 17:02:18 +0000
Manifest this update: Sat 23 Aug 2025 17:02:18 +0000
Manifest next update: Sun 24 Aug 2025 17:02:18 +0000
Files and hashes: 1: UfKdGEvMUP5lTd70AV3hfSRv0qM.crl (hash: S1DJHFcpaj5hSIPE/DSbY0IMvkycQe8+EBu5iOPsKVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:88:6b:df:b7:65:92:71:0f:5a:ef:bb:a8:f9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51f29d184bcc50fe654ddef4015de17d246fd2a3
Validity
Not Before: Aug 23 17:02:18 2025 GMT
Not After : Aug 24 17:02:18 2025 GMT
Subject: CN=08042fb2065317d89eb5c5ba8fddc0ef8bfe0bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:67:bf:fc:2d:a5:07:f3:e2:cb:e0:02:b5:bf:
9d:d6:30:97:99:d9:9d:2a:2b:16:8a:a6:44:5f:f8:
3c:31:33:e6:e1:da:9c:8c:42:96:e4:5f:6b:06:e6:
c7:69:e1:4f:99:c0:76:f0:a4:9b:60:2d:35:8d:d8:
64:b6:55:90:ae:7e:39:13:a8:ae:3e:b1:bf:1d:65:
9d:58:d1:33:a0:a6:a0:7e:ee:4e:51:20:5d:21:54:
7f:8a:e7:12:76:b4:43:6d:ca:c0:ba:e3:3d:78:75:
11:64:9f:19:fd:ef:2e:03:88:59:29:50:f8:9c:9a:
78:76:35:02:f3:f2:df:28:ec:71:34:1b:ca:ac:a6:
93:1f:f1:d7:2f:88:70:d5:a3:4c:79:48:c4:5a:dd:
cd:52:a2:8a:40:49:51:19:d5:08:d4:0d:c0:2e:68:
03:9e:a1:47:ce:05:b8:8a:4e:63:0d:f8:c7:c0:25:
25:69:45:07:38:c4:8a:53:f2:5d:28:d6:a2:c1:ab:
80:a1:32:36:8f:bd:e1:57:17:11:98:5e:46:7f:e3:
27:04:dc:64:20:40:a8:60:b1:d5:cc:b2:cd:71:61:
06:fe:6e:d7:06:5d:1d:93:88:9e:e1:3e:bf:00:ce:
31:d1:d7:d4:49:d5:e8:de:85:78:25:2e:a8:a9:9a:
a3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:04:2F:B2:06:53:17:D8:9E:B5:C5:BA:8F:DD:C0:EF:8B:FE:0B:B1
X509v3 Authority Key Identifier:
keyid:51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e7:79:2c:2f:3f:2d:e2:2f:38:c9:1e:3d:77:c3:14:1e:df:
41:a9:b9:03:9a:1e:d1:ce:10:3d:f6:8a:66:7f:58:34:9e:e3:
3e:cb:3b:b2:ae:88:54:50:ee:33:a8:23:7e:b1:4d:4b:c2:3b:
9b:53:e9:46:b3:43:1b:34:8d:ad:98:11:80:90:aa:21:fb:bd:
6d:41:64:12:d2:f3:bd:e7:f2:06:10:a4:0d:03:f7:9b:47:32:
09:30:00:27:ae:a0:a3:be:2b:ad:30:97:c8:6a:75:4c:13:3a:
63:0a:b0:05:76:8e:6d:3a:29:d6:22:b8:24:84:5c:57:c1:5b:
23:1b:2b:27:96:7a:10:0d:7f:e4:72:7f:f8:5f:9b:2e:ca:90:
9b:56:fb:80:87:a0:8e:41:40:fe:aa:9d:98:74:9c:41:ec:14:
42:a8:16:1a:cf:0f:d1:67:cf:05:96:eb:73:c5:bc:24:45:d8:
69:9d:e8:fa:90:98:c9:01:8d:df:4e:29:d2:2a:76:0f:aa:75:
4b:a0:c5:be:07:38:17:9c:b9:52:6b:85:df:f2:f9:7a:dd:c4:
13:77:a4:64:37:cf:5c:6c:81:22:26:ed:fa:c5:68:d6:ea:f4:
10:93:e6:17:99:11:5f:76:a8:b0:eb:43:ed:c6:2c:f6:eb:78:
f8:fb:07:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:46:16 2025 by rpki-client