Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
File: UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft (raw, json)
Hash identifier: Tz2S/d/+dHaVtC+y8ABoOt6NQXEXLWO2s9pxNg3EMig=
Subject key identifier: 0B:70:E3:98:F3:D0:2A:F5:CA:D1:01:58:8A:48:CF:E2:73:11:10:8C
Authority key identifier: 51:C3:CC:54:41:4F:B4:42:BE:39:D6:E1:A4:AF:72:4C:FF:EE:EE:FF
Certificate issuer: /CN=51c3cc54414fb442be39d6e1a4af724cffeeeeff
Certificate serial: 0198D66039550CC0F8CD92D707F5B5F2E79F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UcPMVEFPtEK-OdbhpK9yTP_u7v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
Manifest number: 154F
Signing time: Sat 23 Aug 2025 10:01:26 +0000
Manifest this update: Sat 23 Aug 2025 10:01:26 +0000
Manifest next update: Sun 24 Aug 2025 10:01:26 +0000
Files and hashes: 1: UcPMVEFPtEK-OdbhpK9yTP_u7v8.crl (hash: ZxngUPPv94Uzte4mDb/vAvNoy8YOgXDb5F37TDdMibY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UcPMVEFPtEK-OdbhpK9yTP_u7v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:39:55:0c:c0:f8:cd:92:d7:07:f5:b5:f2:e7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51c3cc54414fb442be39d6e1a4af724cffeeeeff
Validity
Not Before: Aug 23 10:01:26 2025 GMT
Not After : Aug 24 10:01:26 2025 GMT
Subject: CN=0b70e398f3d02af5cad101588a48cfe27311108c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:32:a0:e5:cd:9d:5d:41:89:c2:17:a0:b3:54:
35:4c:d3:4d:78:5e:f9:34:48:4d:4c:95:6d:56:27:
0a:27:fc:e5:b8:f3:06:6c:e4:91:80:d5:1c:19:3e:
66:ef:fc:22:ae:fd:d9:8b:92:5d:fb:5b:c8:c1:b1:
45:ed:56:62:46:69:b3:3a:bc:5c:6c:cd:02:9e:64:
d3:b8:b9:8a:8e:ae:16:71:08:b9:33:03:ea:8a:cb:
17:c8:af:64:da:5c:56:83:6e:80:7a:de:80:c5:e6:
df:33:b1:eb:1d:a1:1d:24:39:fa:33:38:4f:e9:1d:
4c:dc:25:56:61:09:fe:1b:22:6e:57:1a:34:47:ad:
bf:f8:9a:6a:a0:09:5b:24:dd:50:68:9e:a6:ff:41:
36:08:79:c9:25:ff:e5:f7:5c:54:ec:7e:07:9d:69:
d6:4e:69:c0:68:98:f2:d8:98:ee:31:28:a5:d8:24:
4f:0a:26:a8:ea:88:86:34:ee:6e:46:cb:f3:26:dd:
92:f0:32:07:cc:ce:75:c2:30:de:a5:af:e9:fe:6c:
04:eb:47:19:bc:25:98:3b:d3:4d:3a:11:56:be:b8:
26:db:a0:5f:76:01:cd:fe:b2:00:8f:e8:c8:5e:05:
01:0d:2f:8f:86:5b:ea:88:a2:e1:c0:d2:ff:d9:b3:
51:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:70:E3:98:F3:D0:2A:F5:CA:D1:01:58:8A:48:CF:E2:73:11:10:8C
X509v3 Authority Key Identifier:
keyid:51:C3:CC:54:41:4F:B4:42:BE:39:D6:E1:A4:AF:72:4C:FF:EE:EE:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UcPMVEFPtEK-OdbhpK9yTP_u7v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:83:b9:ec:86:48:e6:7b:14:32:c0:27:b3:6c:a6:d6:1b:3a:
59:4f:8f:7c:82:cd:0e:08:4b:fa:1d:db:8a:ff:da:ad:2d:4a:
13:52:ee:63:f3:50:aa:96:1f:2f:ab:ff:ec:c4:40:7f:48:f5:
7c:e9:b6:a6:04:c2:19:1a:2f:85:90:d9:cb:6b:11:1a:7e:f6:
4e:28:50:c3:ae:7d:4e:34:4e:41:0d:c8:e3:0c:b5:0f:6a:10:
03:5e:29:42:66:7b:96:b3:b3:8d:d9:a6:e3:02:61:72:f8:af:
00:d9:ce:ec:a1:b4:40:9a:b1:d7:df:b8:8e:50:97:4f:c7:32:
40:2a:6b:b0:89:c8:1f:de:19:49:2d:39:97:03:57:e6:e1:6d:
31:88:46:02:0c:32:3f:28:60:ee:cc:ff:83:c2:44:9c:2c:d2:
63:32:ef:07:9c:7f:f3:2e:a1:f4:43:0b:46:fb:d4:55:a0:ab:
fd:5c:fd:2c:79:05:fe:28:b1:e7:c5:ae:64:25:2c:04:e1:a8:
53:95:c3:a4:8f:1e:07:f5:d1:8b:91:54:92:2b:66:c2:c2:98:
1e:ff:48:74:4c:c4:7c:98:71:51:93:88:02:61:1b:0b:b8:30:
48:04:d8:3f:df:12:42:03:26:f7:11:db:96:20:0e:60:cc:08:
75:cb:4f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:46:18 2025 by rpki-client