Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
File: uji5p2P2XAJ6o92th8GI2nikvZc.mft (raw, json)
Hash identifier: ynQJncAQUc14FfPjksi6VcqdEerD/vIs3tClws+qXpk=
Subject key identifier: 67:38:3D:FE:28:25:16:7B:D5:4F:89:3F:21:DD:67:C9:E8:C1:67:02
Authority key identifier: BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97
Certificate issuer: /CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97
Certificate serial: 0197B8FD1C07623CAED332EC8D8339D3E951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
Manifest number: 15B3
Signing time: Sun 29 Jun 2025 00:01:24 +0000
Manifest this update: Sun 29 Jun 2025 00:01:24 +0000
Manifest next update: Mon 30 Jun 2025 00:01:24 +0000
Files and hashes: 1: uji5p2P2XAJ6o92th8GI2nikvZc.crl (hash: 4pJVjAO7ZPuZ0MpVRVhR234XiFMZF2UfOom5a3YxVzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:1c:07:62:3c:ae:d3:32:ec:8d:83:39:d3:e9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97
Validity
Not Before: Jun 29 00:01:24 2025 GMT
Not After : Jun 30 00:01:24 2025 GMT
Subject: CN=67383dfe2825167bd54f893f21dd67c9e8c16702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fc:b7:c1:14:e8:2d:3c:9f:ef:db:14:81:89:
a4:93:dc:72:cd:8b:7e:d7:f7:54:db:6b:50:29:4c:
79:76:96:b8:9b:07:7c:d2:06:82:ea:c6:42:ca:fd:
79:06:4b:9a:8d:44:63:a7:c7:89:6a:b3:01:59:09:
ca:f8:ef:db:eb:88:c6:5c:f4:f6:18:2d:8a:0e:0b:
44:c6:5f:48:e2:63:6a:3c:52:ed:38:4e:11:05:34:
96:79:d5:92:7b:1a:38:67:7f:cd:41:aa:2e:53:e9:
05:40:d3:51:84:19:a5:00:85:7b:20:48:d3:4c:bb:
b2:79:10:40:c7:6f:24:25:30:b9:35:f3:43:51:e5:
14:1b:c5:55:75:8a:65:f9:9b:3e:c3:a6:55:42:ac:
ad:6b:d3:1c:47:76:9a:2d:72:15:f9:1c:ea:1d:b9:
42:68:af:9c:27:05:fb:55:37:38:ca:5d:37:61:e9:
6d:84:8e:0d:c9:15:7e:1d:7d:a8:07:47:c2:4e:c9:
a1:30:05:1b:14:45:26:c7:e6:11:4c:24:17:7a:ec:
86:ac:7b:c7:65:ca:ca:16:06:a6:a4:c1:34:22:bb:
8d:9e:c5:18:73:01:5a:9b:2c:26:1d:87:13:0c:53:
10:59:e9:40:9a:f0:2a:39:ac:d4:25:92:f8:14:4b:
49:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:38:3D:FE:28:25:16:7B:D5:4F:89:3F:21:DD:67:C9:E8:C1:67:02
X509v3 Authority Key Identifier:
keyid:BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:4e:6e:06:db:a4:5b:23:a6:87:2c:8f:51:f1:95:8c:3f:a1:
ce:c7:99:a5:6f:27:6b:a0:a6:6f:88:c4:bd:27:67:0a:ef:69:
42:1a:e6:97:7d:1e:1b:d8:55:62:c6:2b:af:ac:6c:6b:07:a1:
4b:93:38:e8:36:7a:34:49:eb:62:d7:39:1f:05:a6:c3:e1:be:
73:1d:3a:5e:5c:db:24:4f:74:e2:30:4f:b5:58:d2:4e:7b:b0:
16:43:4a:85:1a:56:a2:63:ce:da:ae:16:33:53:78:40:77:47:
38:f2:d0:99:e1:98:a9:06:0a:d5:f8:c5:d2:c3:81:0a:84:56:
fb:ca:5a:9d:15:0d:4c:c4:8c:b0:4f:76:0f:55:d2:a0:06:b8:
d5:c5:1b:38:2b:fa:7a:f9:e9:cf:25:07:55:29:f5:eb:ad:4d:
56:e9:68:ab:4f:f3:53:ff:41:6e:f7:b5:9d:3f:cc:71:15:aa:
2e:2e:b1:99:b1:b9:08:7c:8c:fc:41:97:46:14:3c:39:0c:2a:
d5:de:e5:db:b7:23:a0:85:4f:1d:9d:2a:1e:4c:4e:07:09:31:
69:c1:45:99:dc:95:ad:77:c0:61:8d:26:da:bd:77:a4:06:37:
27:9a:aa:10:d7:20:b7:0b:39:f3:6d:44:54:b7:95:db:af:dd:
47:a0:36:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:08:38 2025 by rpki-client