Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
File: 1-uafCinvjYwi2dbs3jowfYlNXBk.mft (raw, json)
Hash identifier: aKTJzjM8rw0cSzs2/LSH3l4pE41yxlBI2V5ZMDb2V+I=
Subject key identifier: 33:30:EC:06:65:06:24:B9:AB:93:D4:D8:4A:EE:8B:1A:55:0D:E0:21
Authority key identifier: FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19
Certificate issuer: /CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19
Certificate serial: 0198D58373DE2655AC1E03DCB7965AC96801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
Manifest number: 06F8
Signing time: Sat 23 Aug 2025 06:00:18 +0000
Manifest this update: Sat 23 Aug 2025 06:00:18 +0000
Manifest next update: Sun 24 Aug 2025 06:00:18 +0000
Files and hashes: 1: 1-uafCinvjYwi2dbs3jowfYlNXBk.crl (hash: s3Fphh6/xYIOv/PVEFQWGVrMu1FVGouKhVCcG1Rct5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:73:de:26:55:ac:1e:03:dc:b7:96:5a:c9:68:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19
Validity
Not Before: Aug 23 06:00:18 2025 GMT
Not After : Aug 24 06:00:18 2025 GMT
Subject: CN=3330ec06650624b9ab93d4d84aee8b1a550de021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f2:64:86:42:8a:9a:76:57:b5:8a:a4:45:2b:
a4:7e:ef:42:bb:14:bf:f8:df:7b:ac:38:c9:1b:86:
60:17:49:cd:78:02:7c:af:b2:a3:64:43:a5:06:87:
f7:88:2c:96:89:79:c0:ae:b8:f2:c0:ab:98:cd:db:
eb:cd:91:17:4c:7e:a6:c3:25:3f:62:f1:ff:99:07:
82:34:a5:42:c1:07:c1:07:79:ea:55:44:a7:d9:3b:
37:39:ce:b4:55:7c:3d:72:9c:4a:1d:a4:3d:aa:d7:
1a:6b:1e:73:98:b3:0b:4b:06:16:71:c6:36:c4:03:
a7:c9:23:4a:f5:bb:6f:5c:a9:e9:b5:7f:82:af:b8:
b0:c9:3f:25:10:17:65:d6:6a:09:4a:11:32:f3:85:
dc:b7:5d:5f:97:62:b8:b7:a3:4a:54:f8:5d:bd:20:
fb:be:9e:4f:e2:32:28:d4:9f:df:81:9d:f2:55:3e:
5d:e0:c5:01:c5:19:65:c3:ab:b7:6d:e3:80:6e:f8:
1f:a6:bf:46:ee:60:a6:3b:b7:eb:cf:8c:0a:ed:64:
59:a9:7e:0d:3e:c8:6f:3c:80:40:90:1a:19:66:b9:
0a:3e:86:fa:46:8d:14:a2:6f:36:c7:f5:13:19:52:
7a:8d:dd:45:d0:a4:b0:bd:23:ab:60:58:ae:08:4c:
f7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:30:EC:06:65:06:24:B9:AB:93:D4:D8:4A:EE:8B:1A:55:0D:E0:21
X509v3 Authority Key Identifier:
keyid:FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:67:e0:90:f6:14:67:1f:2a:a3:67:c8:b7:88:53:6f:59:e4:
26:c3:c4:f3:1b:35:e9:88:db:de:9b:1a:ba:fc:8a:c5:1f:c4:
03:31:7d:19:cb:f6:5c:9a:83:b8:9b:ed:76:c8:ff:91:77:e3:
dd:7a:90:96:ff:85:37:77:f6:7b:92:b6:99:a6:45:fd:94:71:
9e:02:33:e3:48:3d:77:63:cf:1f:d9:2c:b7:23:b0:57:c4:19:
21:21:71:7c:db:5a:ad:2b:aa:32:72:95:de:26:48:d4:c4:72:
23:8d:c5:df:0c:dd:c2:bb:a7:cf:7b:51:cc:7b:90:c3:6f:fc:
7f:d9:c7:b1:c2:9b:73:77:30:85:e7:80:58:cc:92:01:08:bd:
cc:0f:f8:a6:6d:5d:a1:e2:64:b6:76:5d:5b:1e:85:5c:9b:be:
31:08:4c:13:95:3f:21:d1:4d:e8:99:6c:7f:0f:c5:c1:2e:68:
d3:b0:ff:10:6f:a1:64:62:57:b6:29:98:0a:56:69:9f:46:a0:
c1:9a:84:2f:60:ab:a4:27:58:a2:87:28:5d:ba:7a:7e:9b:78:
dd:d0:f8:e6:c4:13:38:8a:58:3a:f7:90:eb:93:82:b6:7a:32:
58:e5:c3:03:2b:88:04:44:8d:31:09:38:f7:03:f7:a0:05:2f:
2e:ae:50:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:47:50 2025 by rpki-client