
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8ec120-aca7-4445-9a69-a0a10ecb42a9/1/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.mft
File: UWHWKAvSDXvN_WUlEJpD4uo8Yq4.mft (raw, json)
Hash identifier: DCOljscopip5n/90PZ44nny071dP1xyGZ8ggfOMxLIE=
Subject key identifier: 87:46:A9:C4:CE:C0:2F:E6:95:34:4E:66:24:2B:06:0F:A0:BF:96:42
Authority key identifier: 51:61:D6:28:0B:D2:0D:7B:CD:FD:65:25:10:9A:43:E2:EA:3C:62:AE
Certificate issuer: /CN=5161d6280bd20d7bcdfd6525109a43e2ea3c62ae
Certificate serial: 0198D6298065E3A20A9F9A734532D92C8F3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8ec120-aca7-4445-9a69-a0a10ecb42a9/1/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.mft
Manifest number: 07
Signing time: Sat 23 Aug 2025 09:01:40 +0000
Manifest this update: Sat 23 Aug 2025 09:01:40 +0000
Manifest next update: Sun 24 Aug 2025 09:01:40 +0000
Files and hashes: 1: UWHWKAvSDXvN_WUlEJpD4uo8Yq4.crl (hash: FAfhtEg1LVtFYVi6n5k5l9Z9Kq5/B1FIg3ZTzpZ2W0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8ec120-aca7-4445-9a69-a0a10ecb42a9/1/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/8ec120-aca7-4445-9a69-a0a10ecb42a9/1/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:80:65:e3:a2:0a:9f:9a:73:45:32:d9:2c:8f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5161d6280bd20d7bcdfd6525109a43e2ea3c62ae
Validity
Not Before: Aug 23 09:01:40 2025 GMT
Not After : Aug 24 09:01:40 2025 GMT
Subject: CN=8746a9c4cec02fe695344e66242b060fa0bf9642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9c:49:8c:c2:2a:2a:20:97:ea:e6:0e:bd:ae:
2e:4d:cb:89:bd:84:19:ba:31:54:ea:8d:5e:bd:3d:
e1:ba:a0:42:2b:66:e4:15:96:b4:cc:10:be:37:e7:
35:35:6d:59:a2:d4:ce:1d:46:09:34:08:9f:00:37:
2b:51:7d:88:1f:b6:ba:6d:96:73:6a:f7:3c:bf:1c:
3f:38:a6:fe:0f:9a:56:e0:f6:cd:4c:c9:03:ae:cf:
a8:a7:0c:17:c5:50:78:1d:07:18:04:45:07:59:48:
ee:3d:a4:1c:b4:50:bd:3c:ff:0c:5e:0c:fd:cb:9d:
49:7b:58:d9:24:0e:eb:10:af:59:ab:52:51:84:7d:
cb:9d:bc:93:cd:d8:78:ce:88:ca:6b:4b:7a:49:c7:
87:51:46:ba:1b:de:37:a0:44:60:f8:d5:b1:43:89:
f0:03:28:11:49:3e:6e:6e:88:1b:eb:47:16:81:f4:
36:af:72:0c:58:44:e8:7c:94:9f:98:46:67:a1:6d:
b0:29:2e:a5:76:44:4f:4e:ec:13:26:72:30:27:1e:
e8:36:b0:f4:62:71:c0:35:08:47:74:57:40:f9:aa:
2e:1b:04:bf:f2:cb:c6:94:05:aa:bb:54:73:89:05:
bc:25:c0:97:80:c9:bd:5d:c4:d2:cf:c0:dd:a6:02:
8c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:46:A9:C4:CE:C0:2F:E6:95:34:4E:66:24:2B:06:0F:A0:BF:96:42
X509v3 Authority Key Identifier:
keyid:51:61:D6:28:0B:D2:0D:7B:CD:FD:65:25:10:9A:43:E2:EA:3C:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8ec120-aca7-4445-9a69-a0a10ecb42a9/1/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8ec120-aca7-4445-9a69-a0a10ecb42a9/1/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ee:0f:b2:af:9a:f4:b3:d0:44:4d:09:ff:18:10:b9:04:29:
89:9e:bf:93:a0:b0:cb:60:15:1f:40:6e:1b:f1:22:8e:3f:67:
8f:4b:4c:43:d6:02:4d:e5:b6:0d:b4:62:c3:05:7e:94:de:d7:
07:e5:df:ee:7d:a0:23:4c:b1:ad:96:bb:9b:a4:22:68:44:e7:
c5:18:9e:5b:72:c2:b6:de:88:4e:81:1b:7b:ec:36:63:52:61:
f6:30:7f:0d:ab:b2:b2:5f:f2:80:37:fd:51:c3:43:94:73:6d:
79:2e:a8:06:aa:6a:af:90:fc:52:e3:09:8d:96:2b:dd:77:ec:
a4:29:54:79:af:f8:1a:09:24:2e:ad:5e:e0:5e:ae:e3:5a:8e:
dd:cb:dd:a5:d1:92:86:59:11:84:d4:4d:a0:f8:27:50:6c:68:
c9:cb:9d:ce:b9:60:fe:87:69:7a:69:04:83:e6:2e:2b:26:26:
c1:35:6b:8f:f7:4e:51:d8:de:7e:1d:30:f7:d4:8a:17:1d:3b:
35:93:d7:dd:34:e5:97:7e:8c:e8:16:f2:94:09:87:1c:22:a1:
0a:60:98:0e:75:78:2c:02:4b:9e:51:7f:29:d1:74:8b:3b:54:
d6:af:95:02:5b:36:1f:1c:51:a9:78:dd:b5:3f:66:07:d6:94:
d9:0b:3e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:25:28 2025 by rpki-client