Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft
File: ujWrXugfdPzKSgwT6XLsHP6WeTs.mft (raw, json)
Hash identifier: LRCAB48pcnibMYSeTc2gi5wyLTE96/sMospEu+KaZQk=
Subject key identifier: BB:02:9B:FC:BB:94:01:79:B7:AE:C0:6C:0D:1A:48:B0:FC:3F:34:E0
Authority key identifier: BA:35:AB:5E:E8:1F:74:FC:CA:4A:0C:13:E9:72:EC:1C:FE:96:79:3B
Certificate issuer: /CN=ba35ab5ee81f74fcca4a0c13e972ec1cfe96793b
Certificate serial: 0198D65F0B88C57A72B6484753E7EC215362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujWrXugfdPzKSgwT6XLsHP6WeTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft
Manifest number: 0921
Signing time: Sat 23 Aug 2025 10:00:09 +0000
Manifest this update: Sat 23 Aug 2025 10:00:09 +0000
Manifest next update: Sun 24 Aug 2025 10:00:09 +0000
Files and hashes: 1: ujWrXugfdPzKSgwT6XLsHP6WeTs.crl (hash: AO4WbNsQRi8PzddleRpK2CkgfZCln9NWILvQ2P2x4Rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ujWrXugfdPzKSgwT6XLsHP6WeTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:0b:88:c5:7a:72:b6:48:47:53:e7:ec:21:53:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba35ab5ee81f74fcca4a0c13e972ec1cfe96793b
Validity
Not Before: Aug 23 10:00:09 2025 GMT
Not After : Aug 24 10:00:09 2025 GMT
Subject: CN=bb029bfcbb940179b7aec06c0d1a48b0fc3f34e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4b:19:29:92:fb:1e:ec:15:60:bf:24:ea:57:
a7:f3:b3:49:ac:66:89:c4:fd:dd:c6:4c:a2:c9:45:
7a:64:a3:88:c0:1c:43:ef:14:d9:af:6f:c8:18:5a:
d7:fc:c9:22:62:5b:ec:e4:4a:31:47:3d:5b:e6:11:
d1:7b:43:5f:e9:4b:e5:dc:03:6c:23:6a:ae:70:cd:
80:41:e8:b2:39:6d:9a:91:7b:76:89:d5:6a:6e:08:
64:ee:63:b8:1e:a7:4f:6e:61:08:e9:e9:16:ea:9f:
08:9b:19:11:29:47:e2:ac:26:2d:c0:be:e9:fb:d9:
bd:2b:d7:2c:65:a2:21:30:82:b3:5d:7b:e9:fa:0f:
a9:9a:cf:0b:6d:08:54:b6:f4:bc:7b:72:b1:0d:ab:
a0:cc:c1:99:2f:c7:bc:da:9a:5b:6a:fa:99:6a:4f:
32:2c:a4:84:85:8f:ca:b0:50:f4:9a:ea:30:4a:0f:
9e:28:10:0d:4b:71:06:c4:f5:b7:b3:ae:90:db:95:
d9:8b:0f:2c:e3:c4:f7:ef:45:c0:57:1a:43:8a:51:
b8:c7:80:e6:68:bd:ea:5d:46:f2:d7:ba:ec:3b:46:
8a:d3:12:be:94:36:5d:f8:e1:11:80:be:d0:97:69:
48:d9:ba:1b:3a:eb:56:df:50:a0:dd:32:9a:06:09:
6d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:02:9B:FC:BB:94:01:79:B7:AE:C0:6C:0D:1A:48:B0:FC:3F:34:E0
X509v3 Authority Key Identifier:
keyid:BA:35:AB:5E:E8:1F:74:FC:CA:4A:0C:13:E9:72:EC:1C:FE:96:79:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujWrXugfdPzKSgwT6XLsHP6WeTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:40:d6:ab:2b:cb:b3:41:bd:9b:0f:9b:02:da:b7:1e:0e:00:
1d:7e:55:7a:65:84:1d:3a:43:47:82:b5:d6:2a:cb:5a:d3:2f:
01:fa:04:3a:a8:9c:d6:6d:cf:95:5c:2b:95:91:c0:11:52:9a:
b7:4a:c4:55:84:16:10:b4:89:77:09:f3:66:13:69:07:36:b8:
07:0f:ed:12:cc:85:9d:3a:22:25:d7:8f:ca:a5:2a:f9:d8:a2:
e1:ad:75:ac:4f:38:bb:3f:76:aa:79:7b:9e:18:02:38:a3:25:
49:46:d0:0c:2b:0e:7f:59:1f:de:02:12:d7:21:7d:14:00:86:
4e:ec:48:9c:8f:2e:46:bd:4f:9b:81:6e:51:f6:b5:34:f0:66:
1b:7a:c2:5c:1e:92:01:9f:ba:21:aa:ff:16:53:b7:f5:f9:21:
09:9d:f6:f9:27:96:c6:9c:ef:e9:df:80:42:dd:82:da:6d:65:
59:b6:91:33:28:d5:de:f7:8e:39:23:13:07:50:53:2a:82:fa:
f1:31:26:d5:59:de:a2:14:ad:1c:46:ed:9b:be:0b:d8:9b:65:
77:7c:4a:41:45:47:85:ca:62:79:2f:a9:cf:e7:cd:8b:49:16:
dd:75:8a:b5:e3:d2:10:1c:30:45:3a:96:25:e2:0d:52:f2:8f:
c9:b4:b8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:28:56 2025 by rpki-client