Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
File: UlkVtMckB6-3lB5b4pSscTOxB7M.mft (raw, json)
Hash identifier: lOEDgEc4M29nNCyOJ0YCrAKglFkXHeA7j/zTg8TBSqo=
Subject key identifier: 01:94:28:37:36:E0:10:F3:C8:82:0A:19:68:A3:76:AA:0F:0F:C9:40
Authority key identifier: 52:59:15:B4:C7:24:07:AF:B7:94:1E:5B:E2:94:AC:71:33:B1:07:B3
Certificate issuer: /CN=525915b4c72407afb7941e5be294ac7133b107b3
Certificate serial: 0198D69880776022ACF8ADA7339BAEB07FF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
Manifest number: 133B
Signing time: Sat 23 Aug 2025 11:02:55 +0000
Manifest this update: Sat 23 Aug 2025 11:02:55 +0000
Manifest next update: Sun 24 Aug 2025 11:02:55 +0000
Files and hashes: 1: UlkVtMckB6-3lB5b4pSscTOxB7M.crl (hash: H0mJyUFrJyigUNTXAWLlvu1BmmBdOlYKIYU7xCrp9hg=)
2: ci7D-gavzkR5lRu-Y8rw6gTVt8k.roa (hash: e5+WwJtdUyHAODWheWNyNbbf9/GmybmxPgwjpdHpaL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:80:77:60:22:ac:f8:ad:a7:33:9b:ae:b0:7f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525915b4c72407afb7941e5be294ac7133b107b3
Validity
Not Before: Aug 23 11:02:55 2025 GMT
Not After : Aug 24 11:02:55 2025 GMT
Subject: CN=0194283736e010f3c8820a1968a376aa0f0fc940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cb:0e:fe:d6:cf:ff:20:cd:e7:e2:3d:30:7a:
c6:b0:6d:9d:6f:72:04:db:fe:89:e5:5f:63:95:92:
b3:56:e2:d7:47:56:e7:04:2a:f1:a5:af:6f:97:c1:
05:ba:f8:6a:1c:64:35:99:61:1a:3d:3e:f0:a1:65:
6d:8c:93:10:62:61:66:65:98:1a:35:60:3a:2c:42:
0e:39:74:8d:c0:6b:71:55:ed:87:15:b2:40:0d:2b:
8c:43:bf:57:43:6b:57:37:a3:d2:d3:6b:b4:b1:7a:
da:7b:01:b9:a5:42:9f:76:a6:24:b9:e9:af:d8:3a:
16:d3:ac:ed:a0:f5:3b:60:86:5f:d0:c0:2f:00:6d:
92:ec:28:de:63:9b:13:c8:6c:23:bf:da:2d:44:3c:
79:bd:f9:ac:23:94:c0:41:c4:20:e9:31:9c:db:16:
c3:a9:e2:f7:c3:4a:0e:f4:7d:a2:3a:a4:21:49:79:
96:2b:77:8e:fd:cb:48:bc:6e:75:a1:76:ce:ea:d6:
96:79:fe:2f:26:5c:12:5c:c9:b9:2a:8e:b7:75:cb:
d4:29:a4:93:e5:cf:eb:eb:4c:bf:8e:ed:f7:6c:45:
57:b1:a1:36:b6:e2:7f:b3:90:8f:8b:3b:b8:92:b1:
ad:ee:68:70:f7:5f:c9:03:f7:79:24:e5:81:5c:6a:
79:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:94:28:37:36:E0:10:F3:C8:82:0A:19:68:A3:76:AA:0F:0F:C9:40
X509v3 Authority Key Identifier:
keyid:52:59:15:B4:C7:24:07:AF:B7:94:1E:5B:E2:94:AC:71:33:B1:07:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:fb:4a:37:3c:af:fb:b4:e5:ea:3f:61:12:d3:e3:26:fc:5f:
9e:3d:7f:4a:23:bb:c9:f9:cd:9b:d7:0d:48:ef:16:21:27:55:
7b:d4:9c:8b:e9:b1:78:d4:ae:ae:43:0a:1f:9f:de:92:bf:b5:
81:6d:a2:43:dd:42:0a:fa:90:48:23:4a:b7:b7:b3:ae:e6:9d:
d4:03:d9:4a:40:b7:d1:eb:fe:ee:ae:49:11:63:80:37:d6:e7:
c7:d2:2b:77:92:a0:45:e8:d7:0c:d9:8b:22:5c:d4:e8:71:e4:
e5:d1:11:fd:51:df:5e:a9:51:59:cd:cf:48:a4:54:5b:42:05:
2f:24:9d:e4:c7:e2:b2:b2:bd:a0:99:ed:39:ed:89:47:7c:03:
a5:ab:e9:15:4d:96:3b:6d:8a:d0:22:3f:e1:59:10:1a:25:20:
8a:a1:5e:f5:31:ba:e6:8d:04:7a:23:48:ad:5f:3a:3d:47:e2:
4b:14:ca:3e:6b:2c:bd:bc:3c:a6:da:07:b9:18:33:db:e9:64:
c5:af:e5:11:d3:f4:19:57:b6:14:9f:12:b5:e2:a4:0e:5c:90:
52:fc:e1:bd:30:c5:2e:bb:24:dd:66:51:2d:38:e6:41:8b:c7:
02:2f:c0:83:1b:b3:0d:b1:75:30:29:71:08:17:af:f6:d8:46:
c7:c8:82:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:30:46 2025 by rpki-client