Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.mft
File: uH9ej-619ec7CXtmZX7tjbl0pA4.mft (raw, json)
Hash identifier: aRA0L2eTX4547LQfUs3aiC8tbFdhvN1HOi+e3K8hnuo=
Subject key identifier: BB:EF:0A:21:CF:6A:A1:A1:92:AA:37:3F:8C:89:F9:10:49:6B:85:D4
Authority key identifier: B8:7F:5E:8F:EE:B5:F5:E7:3B:09:7B:66:65:7E:ED:8D:B9:74:A4:0E
Certificate issuer: /CN=b87f5e8feeb5f5e73b097b66657eed8db974a40e
Certificate serial: 0198D6611374710BDB3ABE5C8C34C382768C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uH9ej-619ec7CXtmZX7tjbl0pA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.mft
Manifest number: 0E27
Signing time: Sat 23 Aug 2025 10:02:22 +0000
Manifest this update: Sat 23 Aug 2025 10:02:22 +0000
Manifest next update: Sun 24 Aug 2025 10:02:22 +0000
Files and hashes: 1: uH9ej-619ec7CXtmZX7tjbl0pA4.crl (hash: kf3oeOU1BHmD0ODW6SDmimvAcwnWP0bkErchgxfZeDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uH9ej-619ec7CXtmZX7tjbl0pA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:13:74:71:0b:db:3a:be:5c:8c:34:c3:82:76:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87f5e8feeb5f5e73b097b66657eed8db974a40e
Validity
Not Before: Aug 23 10:02:22 2025 GMT
Not After : Aug 24 10:02:22 2025 GMT
Subject: CN=bbef0a21cf6aa1a192aa373f8c89f910496b85d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f0:aa:5e:79:a4:43:cc:08:d6:a5:69:cc:65:
39:3a:cd:c8:f9:04:8e:e4:c6:54:c5:06:a5:cc:72:
3c:2f:c1:bc:7d:2e:96:24:f4:cf:6d:fe:89:a6:b8:
57:4a:d5:2b:a0:6c:b2:27:61:7e:b0:fc:db:a9:99:
7f:2f:6c:a9:9e:4e:c8:c4:97:17:6f:42:d9:c3:eb:
99:30:c3:53:de:d1:45:79:71:40:58:bf:ee:15:49:
ed:76:81:f6:4a:e9:59:41:b1:9e:87:ef:0c:d2:36:
54:bb:16:8b:99:10:0d:0d:ce:8b:55:c8:f8:6a:c7:
42:33:2b:41:71:90:d1:ca:68:95:9d:e4:fd:f9:6b:
01:c1:96:23:9e:88:c5:43:fa:c5:37:43:80:3e:bf:
a3:e0:7a:31:b1:b9:af:09:18:cb:2d:aa:08:ba:fc:
79:31:9f:bd:55:cb:36:df:80:74:f8:94:78:f9:ee:
6e:71:d3:c5:bc:da:b0:f0:ce:8e:22:29:14:73:6d:
c1:2a:c9:4b:12:10:fc:c0:fe:27:09:2c:28:7e:c8:
14:75:ca:7f:d1:25:48:46:b2:67:83:c3:34:22:9d:
f9:83:19:f6:e0:7a:3c:f3:18:28:7c:56:50:f9:64:
aa:65:de:c9:fb:75:ff:e9:be:e2:47:1b:77:45:5c:
49:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EF:0A:21:CF:6A:A1:A1:92:AA:37:3F:8C:89:F9:10:49:6B:85:D4
X509v3 Authority Key Identifier:
keyid:B8:7F:5E:8F:EE:B5:F5:E7:3B:09:7B:66:65:7E:ED:8D:B9:74:A4:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uH9ej-619ec7CXtmZX7tjbl0pA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a0:dd:05:df:ab:63:28:3c:d7:a2:0a:e3:f3:4d:10:77:23:
a0:8b:9b:04:41:3d:1a:52:36:87:02:80:33:86:80:c9:e1:a9:
65:dd:b7:c4:75:e0:fe:9b:74:13:80:4d:5c:d6:b3:28:de:31:
b7:0e:55:60:59:f3:6c:76:40:8c:bb:8a:18:cf:d9:e2:93:1f:
99:9a:98:ef:c8:5f:0b:30:c0:08:76:58:29:ff:f8:af:e0:d3:
a6:bd:ec:b6:e1:e6:e8:90:ac:97:23:45:26:b1:b5:b4:78:e6:
31:ba:1b:ce:de:f4:fe:d2:b4:bf:b6:66:60:d5:f0:57:d9:5e:
1e:2b:64:1f:10:6d:5d:f2:8a:6a:32:68:7b:be:93:f0:48:9a:
7b:5b:76:c2:c8:22:30:1f:07:62:e6:b0:2d:6f:91:2a:f7:b0:
41:de:13:23:01:c8:e0:06:70:7b:da:ad:5d:29:e3:6c:ba:ae:
54:e6:10:a5:28:af:03:42:b7:cd:8d:6d:36:0c:4a:60:d5:2e:
e4:f4:7a:ee:7c:e4:6a:41:b1:cb:8b:21:47:4d:4c:04:d7:e5:
ed:34:bb:a6:0d:94:26:4b:78:84:38:a3:64:c8:fa:ba:ac:2f:
46:85:08:f2:4f:99:ac:ef:9a:47:12:89:83:42:68:d4:87:0c:
1e:d4:9d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:33:44 2025 by rpki-client