Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
File: Ul0cSVWy778Anp5Bsecupt_4JLM.mft (raw, json)
Hash identifier: adJ14aIvihFedcMZcKbH1lYWJNjKVyAaPpjl85cyTeA=
Subject key identifier: AC:51:5D:83:D0:64:A8:90:08:A8:FF:5B:EA:01:51:7D:44:E8:E9:89
Authority key identifier: 52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3
Certificate issuer: /CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
Certificate serial: 0198D47248DA976696E0F7EBFEAD821E643F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
Manifest number: 07DA
Signing time: Sat 23 Aug 2025 01:01:56 +0000
Manifest this update: Sat 23 Aug 2025 01:01:56 +0000
Manifest next update: Sun 24 Aug 2025 01:01:56 +0000
Files and hashes: 1: Ul0cSVWy778Anp5Bsecupt_4JLM.crl (hash: bCjey7HN9jeawevBXp8QiAYFNQc7SfzKanC1wlCknJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:48:da:97:66:96:e0:f7:eb:fe:ad:82:1e:64:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
Validity
Not Before: Aug 23 01:01:56 2025 GMT
Not After : Aug 24 01:01:56 2025 GMT
Subject: CN=ac515d83d064a89008a8ff5bea01517d44e8e989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8c:ea:9c:74:4e:4b:ad:dc:46:f9:cb:29:f0:
75:7c:cf:5d:9a:d2:50:68:fe:a6:25:d5:77:32:a6:
30:5a:b7:ab:f0:60:5a:10:0b:d1:b4:26:5d:2b:d6:
cc:15:1c:0d:6c:2d:ad:68:64:b7:86:46:3a:28:f2:
3c:ea:a3:e6:f4:10:64:4c:ad:42:a6:e0:f9:93:5b:
95:a5:0c:59:fa:65:f2:dd:a3:f2:90:d8:af:98:f7:
d4:45:fd:e5:c2:f7:53:08:29:56:9d:9e:6a:f1:73:
99:8b:3e:b9:b6:00:4c:a8:6f:d8:fd:6d:00:1c:f8:
a6:4d:67:54:03:60:5d:ad:61:de:82:1d:03:8f:f1:
22:21:3a:64:b5:d3:ed:7b:e5:8c:3a:87:4b:a6:92:
b9:3b:c1:a5:9c:74:b3:f9:53:03:8d:cc:8c:34:e3:
d8:27:7d:d5:2a:39:0b:d0:6f:ee:36:3c:ad:2f:a3:
d9:50:54:5f:1e:d6:40:93:6b:bb:09:ca:18:4c:dc:
39:c9:ec:86:8a:2f:c7:d4:f9:ff:8b:ac:56:08:39:
89:91:ea:b2:d0:3f:f6:fa:70:f6:41:b2:d0:a0:86:
6a:33:79:9e:13:6d:4f:94:5f:f8:46:1f:cc:81:ff:
18:fe:36:2f:9e:90:17:d3:24:6e:e1:8e:7f:f0:c0:
26:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:51:5D:83:D0:64:A8:90:08:A8:FF:5B:EA:01:51:7D:44:E8:E9:89
X509v3 Authority Key Identifier:
keyid:52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:19:c8:36:08:d3:ec:95:73:62:ad:29:6f:52:a8:35:f3:37:
5b:94:c0:98:40:7a:f8:7a:77:42:2c:b6:38:4d:4b:45:6c:e9:
b0:25:cd:9a:57:ba:60:4e:8e:74:c8:b2:e4:b3:d0:f7:6e:c2:
01:1f:0f:89:b7:fe:68:a3:49:5c:1c:35:c0:b3:06:f1:c9:10:
7a:40:28:57:47:62:73:e3:60:de:61:0d:18:f1:9e:31:74:f7:
40:9f:8c:87:50:f6:06:57:48:37:d4:da:70:45:bc:af:17:c1:
81:2d:9a:4d:25:35:f4:92:40:1a:c9:17:8b:e5:07:73:0d:bd:
24:e2:a8:ba:5a:38:c5:3f:59:d8:01:7c:b9:ee:cf:49:52:19:
84:53:fd:3e:d8:fb:e9:19:e5:8a:8f:47:12:b5:94:ea:8f:28:
ef:a3:22:8b:a4:a4:f9:79:d5:f1:8e:03:75:6a:6d:d3:ba:6a:
c2:cb:62:a8:92:e9:c3:64:8e:f0:16:a7:65:0f:9d:4c:81:39:
b5:8a:df:ae:e6:2b:01:3e:63:1f:1d:88:19:1e:1c:2b:04:f0:
27:dc:77:03:de:91:49:29:3c:a6:84:71:d9:77:97:fb:53:76:
32:10:53:d9:eb:0f:fa:01:24:3d:dd:5f:f7:70:05:3e:cb:61:
6b:20:6d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:46 2025 by rpki-client