Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft
File: rUskfyJRG39TOwAtmfvsK1WbbC8.mft (raw, json)
Hash identifier: PEzXSkDAnsx5hqd3njBW/dPNtqtGrKCGFWIcbCuMv+Q=
Subject key identifier: 2B:7C:86:10:9C:80:57:C7:81:FC:D5:BF:EF:1B:EF:82:4C:55:F6:1B
Authority key identifier: AD:4B:24:7F:22:51:1B:7F:53:3B:00:2D:99:FB:EC:2B:55:9B:6C:2F
Certificate issuer: /CN=ad4b247f22511b7f533b002d99fbec2b559b6c2f
Certificate serial: 0198D5F145559190A0191D4973F80A7BCD04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUskfyJRG39TOwAtmfvsK1WbbC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft
Manifest number: 04D3
Signing time: Sat 23 Aug 2025 08:00:15 +0000
Manifest this update: Sat 23 Aug 2025 08:00:15 +0000
Manifest next update: Sun 24 Aug 2025 08:00:15 +0000
Files and hashes: 1: rUskfyJRG39TOwAtmfvsK1WbbC8.crl (hash: zbLcmp1MBiQ61XbjEHAS+A8ocVjxengHkgiU5Aykx2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUskfyJRG39TOwAtmfvsK1WbbC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:45:55:91:90:a0:19:1d:49:73:f8:0a:7b:cd:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4b247f22511b7f533b002d99fbec2b559b6c2f
Validity
Not Before: Aug 23 08:00:15 2025 GMT
Not After : Aug 24 08:00:15 2025 GMT
Subject: CN=2b7c86109c8057c781fcd5bfef1bef824c55f61b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:30:ae:ef:f1:db:f6:0f:b4:ad:9c:7d:a8:50:
39:1e:d5:8a:38:81:25:7f:c6:9b:0b:f7:7e:64:7b:
fe:f6:22:91:d6:82:01:27:2a:8d:a4:1c:a2:38:48:
65:cc:c8:0b:2b:99:14:9a:57:68:ca:cb:54:11:d7:
41:a9:cf:1a:2e:e1:bc:88:07:21:cd:56:75:80:37:
b4:75:cf:81:b9:bd:b0:da:12:5e:9f:8d:f6:0b:99:
05:f4:34:08:e0:61:5c:d7:93:1e:e7:c6:73:e8:a6:
0a:ff:0e:36:65:73:f2:87:b0:49:7a:ce:42:3f:32:
2b:f0:fd:c6:6f:a1:92:51:82:b6:df:42:e3:6a:95:
13:26:f4:5b:27:6c:5c:01:44:07:f5:f1:4f:d3:79:
ac:2b:82:62:59:5f:ed:16:ee:d2:36:d7:21:1f:61:
5e:1c:32:9a:3b:61:8b:99:34:23:eb:2c:5e:aa:a1:
6c:04:ba:d1:fa:64:86:e3:60:1e:07:e4:1c:40:45:
ac:06:b7:65:0e:6c:de:4b:58:3e:7f:6a:94:ed:92:
94:83:60:ba:83:ba:f9:44:05:9b:b1:ff:81:e1:5f:
87:f5:b9:44:a2:6a:b2:64:7a:8a:2a:dd:c0:6d:3a:
e1:ac:c9:ad:80:c2:af:8d:9d:60:28:d4:65:bf:45:
33:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7C:86:10:9C:80:57:C7:81:FC:D5:BF:EF:1B:EF:82:4C:55:F6:1B
X509v3 Authority Key Identifier:
keyid:AD:4B:24:7F:22:51:1B:7F:53:3B:00:2D:99:FB:EC:2B:55:9B:6C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUskfyJRG39TOwAtmfvsK1WbbC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:84:4d:1d:90:b8:7f:40:a5:bc:8b:3f:89:a9:4e:9b:14:a7:
c6:4a:91:10:3c:ed:22:75:f6:72:ad:fb:a9:ce:e5:c3:2d:09:
cc:f4:91:34:00:e8:9d:8f:b7:30:14:94:92:28:80:6e:84:c8:
03:b5:31:48:54:93:9e:14:48:66:64:5c:88:a3:67:da:58:59:
ef:8f:d0:63:f5:4d:3e:5b:d7:cf:eb:23:48:f2:df:50:f4:68:
0f:6c:74:12:05:17:5c:2f:29:26:a3:85:84:76:25:aa:4f:85:
b4:7a:e8:31:25:87:2e:e2:ed:41:8e:ad:8c:26:5f:83:33:06:
6d:b0:31:3a:ea:dd:21:7b:d0:a2:8b:dc:7c:01:4a:ed:8d:8a:
a5:d1:2f:8d:45:61:97:8c:3b:bd:0c:61:4c:28:73:4e:aa:94:
df:42:31:a4:4f:81:c8:4a:ce:0a:d1:74:2f:81:ef:e9:05:7c:
d5:38:29:62:10:f5:ec:4e:31:b3:fd:63:3a:9b:d5:53:ca:54:
f7:d4:ee:d9:3f:f7:6b:b7:73:89:94:c9:4e:02:f0:71:a5:9b:
05:b9:9e:48:3d:ae:26:c8:2e:78:4f:18:75:0f:ff:11:ca:e2:
ea:af:3a:fe:c0:56:0c:99:05:ac:d1:f6:29:34:91:c4:af:fd:
b8:6f:ac:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:44 2025 by rpki-client