Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft
File: ujWrXugfdPzKSgwT6XLsHP6WeTs.mft (raw, json)
Hash identifier: HB5wsM9cyv5gDyWUsaYAF3NHyYSv++y7YGaR7vaKP2k=
Subject key identifier: 9E:67:EB:8E:10:AC:44:8F:7A:C2:80:93:88:C8:CD:FB:19:89:A7:EC
Authority key identifier: BA:35:AB:5E:E8:1F:74:FC:CA:4A:0C:13:E9:72:EC:1C:FE:96:79:3B
Certificate issuer: /CN=ba35ab5ee81f74fcca4a0c13e972ec1cfe96793b
Certificate serial: 0197B6A1E52776E15268FB982275A64A69BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujWrXugfdPzKSgwT6XLsHP6WeTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft
Manifest number: 088C
Signing time: Sat 28 Jun 2025 13:02:32 +0000
Manifest this update: Sat 28 Jun 2025 13:02:32 +0000
Manifest next update: Sun 29 Jun 2025 13:02:32 +0000
Files and hashes: 1: ujWrXugfdPzKSgwT6XLsHP6WeTs.crl (hash: Ki39lJAdQXi0pZTBhnOeHL24viQ06GWnr1L0O4eMN+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ujWrXugfdPzKSgwT6XLsHP6WeTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:e5:27:76:e1:52:68:fb:98:22:75:a6:4a:69:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba35ab5ee81f74fcca4a0c13e972ec1cfe96793b
Validity
Not Before: Jun 28 13:02:32 2025 GMT
Not After : Jun 29 13:02:32 2025 GMT
Subject: CN=9e67eb8e10ac448f7ac2809388c8cdfb1989a7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:de:5f:e9:6e:1e:bc:2f:f3:88:de:b6:62:4c:
b5:47:dc:b4:bc:33:3c:8e:52:26:58:e7:58:d0:7c:
5f:2c:c9:06:dd:26:62:62:e4:f8:21:5d:92:bb:a9:
8f:40:58:3b:35:32:f1:0d:17:e0:66:83:37:e4:57:
7d:0d:a4:d3:c5:d0:b1:68:17:fd:c9:12:31:78:56:
da:96:97:52:8b:d0:2b:d5:2e:7e:99:12:ca:8c:f8:
8c:68:fc:7a:ca:f1:79:9f:97:0c:ee:76:18:1c:30:
c6:66:c7:73:6b:c9:e3:3f:2c:a1:67:56:dc:2a:37:
0c:a4:a1:b2:6d:ea:c5:03:97:1f:9e:f1:f5:10:ec:
d9:e9:1d:5a:93:71:15:10:0c:0c:52:02:9c:32:41:
6c:b2:10:ee:90:3d:95:7d:fa:13:2b:3a:b1:38:5b:
df:63:9a:56:f7:f9:88:eb:67:82:a5:05:a0:91:7a:
b6:2b:7a:c1:62:47:04:b6:9f:96:7a:52:9b:b3:a6:
6e:ca:82:67:36:a2:57:49:a8:2f:01:fe:94:b6:d9:
ce:ac:fa:44:fa:3a:11:ae:ab:09:0a:d6:e5:c7:f3:
24:6f:4c:17:c2:56:f8:d6:39:05:4c:ca:38:a1:8d:
37:06:81:6c:d7:d7:61:e3:7c:3b:6e:49:78:df:78:
97:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:67:EB:8E:10:AC:44:8F:7A:C2:80:93:88:C8:CD:FB:19:89:A7:EC
X509v3 Authority Key Identifier:
keyid:BA:35:AB:5E:E8:1F:74:FC:CA:4A:0C:13:E9:72:EC:1C:FE:96:79:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujWrXugfdPzKSgwT6XLsHP6WeTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:44:18:25:4f:3f:bb:81:61:de:c0:67:15:8c:b8:11:58:5f:
04:87:6a:f0:de:c0:f0:fb:86:a1:eb:cf:d9:b9:24:3d:1b:0f:
16:40:52:a0:0c:40:db:40:02:29:86:02:ff:f3:c6:0b:85:a7:
f2:be:93:3b:59:d8:5d:ad:ae:3b:1e:2e:a6:64:24:57:03:31:
61:1a:50:9e:9f:0a:18:9d:1b:64:a2:f5:06:d3:2f:c3:0c:27:
36:22:e3:d5:c6:70:3d:9c:50:49:bc:3a:7a:82:06:1e:b6:d1:
4a:db:b3:6f:04:17:99:26:a3:99:f1:a5:6a:28:92:14:f8:f8:
08:50:8b:fa:4f:86:da:ae:b4:25:26:9a:62:80:31:65:0b:d8:
42:35:62:df:74:47:f2:51:73:55:a8:af:23:49:64:30:94:99:
4b:d2:a7:17:e8:94:2b:06:8c:7d:bf:5d:9e:cb:18:73:73:16:
b9:d2:4d:b2:19:f5:b5:23:cc:6a:1c:1c:20:bc:99:cb:f7:c2:
bb:60:be:70:b7:14:0f:32:4f:9e:3e:f7:f7:b1:da:fd:e5:23:
0d:35:80:ff:5f:11:6d:08:b0:23:30:04:08:0a:bf:72:db:19:
a9:4f:b1:09:09:c3:2a:70:b0:cd:49:0a:c5:85:62:83:04:72:
47:52:12:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:39:20 2025 by rpki-client