Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
File: u2MubMSrZyETUbUpP4Fdfl8JOr0.mft (raw, json)
Hash identifier: +Hl56X52+1JOemFQbs9bjqSn6UAh34kLzJhbXSNOKLU=
Subject key identifier: D8:7D:45:F5:54:B2:08:3E:30:E5:5C:E8:5F:0B:DC:11:03:DC:92:BC
Authority key identifier: BB:63:2E:6C:C4:AB:67:21:13:51:B5:29:3F:81:5D:7E:5F:09:3A:BD
Certificate issuer: /CN=bb632e6cc4ab67211351b5293f815d7e5f093abd
Certificate serial: 0198D404F202375C4ECB6B7BB45EFE7DE57F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2MubMSrZyETUbUpP4Fdfl8JOr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
Manifest number: 0337
Signing time: Fri 22 Aug 2025 23:02:30 +0000
Manifest this update: Fri 22 Aug 2025 23:02:30 +0000
Manifest next update: Sat 23 Aug 2025 23:02:30 +0000
Files and hashes: 1: u2MubMSrZyETUbUpP4Fdfl8JOr0.crl (hash: qfLyE2VtC9q/fzD+syhly97C5Gm33JhypWy0jOSkCio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2MubMSrZyETUbUpP4Fdfl8JOr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:f2:02:37:5c:4e:cb:6b:7b:b4:5e:fe:7d:e5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb632e6cc4ab67211351b5293f815d7e5f093abd
Validity
Not Before: Aug 22 23:02:30 2025 GMT
Not After : Aug 23 23:02:30 2025 GMT
Subject: CN=d87d45f554b2083e30e55ce85f0bdc1103dc92bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:90:1b:d6:45:f7:f1:9c:db:26:ab:63:95:0c:
6b:43:1b:9f:37:d6:70:44:b3:ac:d6:b5:cf:40:eb:
cd:5b:82:01:46:3d:43:d1:f4:52:e7:b3:cc:9a:04:
5f:f5:83:e2:2f:ce:26:60:ea:56:13:06:c2:90:2d:
f3:ff:da:4d:91:ca:74:00:9a:59:7c:cf:20:9c:06:
e3:74:e7:5d:06:7a:20:eb:19:61:f2:67:8a:83:92:
97:2a:3e:24:5f:16:67:96:91:ab:99:66:17:b4:ae:
d6:03:bc:27:ed:a5:47:98:32:52:ae:ae:03:6a:bc:
0e:b6:7e:73:a4:94:4f:9b:db:9e:f3:01:ee:29:dd:
78:d1:53:e6:de:e1:c6:b5:c6:38:34:97:37:ce:67:
03:2c:4d:2a:b4:01:8c:e4:bc:63:bb:a6:ab:28:dc:
87:fc:3c:b6:db:db:81:7a:a9:ae:d8:85:6d:54:da:
3e:24:69:cd:6e:05:d0:e6:1d:e1:7c:c5:e2:48:cb:
0d:0f:3b:42:2c:14:f1:1d:73:02:9a:ce:22:06:c1:
35:67:16:19:07:31:e9:92:2b:a9:33:4b:5a:bc:dc:
bc:51:2a:3e:54:c6:a1:7d:1b:eb:86:fb:ec:cc:5f:
fe:44:7c:8c:7e:2d:26:41:5e:17:93:e8:cd:aa:a5:
5e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7D:45:F5:54:B2:08:3E:30:E5:5C:E8:5F:0B:DC:11:03:DC:92:BC
X509v3 Authority Key Identifier:
keyid:BB:63:2E:6C:C4:AB:67:21:13:51:B5:29:3F:81:5D:7E:5F:09:3A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2MubMSrZyETUbUpP4Fdfl8JOr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:fa:e0:e6:31:22:f1:c3:5f:fd:54:2e:a2:9c:1c:64:a2:e0:
17:49:68:4d:a7:08:db:32:f4:e7:3e:41:dd:b2:74:99:ef:d3:
fd:c8:f9:2b:ac:7d:ec:f8:08:f3:e9:52:9d:cc:6c:de:fb:96:
21:7e:42:55:43:1f:e8:63:dd:a5:61:a5:fe:9d:fc:37:67:f5:
b3:90:7e:5a:83:09:36:b5:c2:7f:b7:b1:31:d5:7f:0a:f0:e0:
24:f3:6a:a7:ee:11:fc:3e:8c:44:b0:1f:e6:6e:f8:35:cd:e2:
fc:40:32:8e:2a:ba:26:b3:71:7f:81:fd:16:44:4f:99:34:fe:
07:0d:42:74:cf:d4:24:6a:58:4f:c0:86:de:f5:93:d8:dd:21:
88:2e:7d:29:59:c3:a9:a6:c7:79:ec:d1:da:4b:94:29:3f:dc:
d1:9b:59:97:0f:54:74:a6:04:2c:75:fc:55:f3:3c:f9:9b:b0:
1c:9c:f5:a2:59:82:1d:e0:31:41:47:d6:e8:3c:89:71:49:50:
4c:19:26:25:d3:9b:32:09:4e:68:e3:1b:b5:f8:c9:c6:54:c0:
8f:37:b7:c5:75:6a:e9:fa:e3:60:f7:ce:49:8b:17:92:ea:f9:
a4:1a:c1:48:37:32:07:85:31:9f:59:a8:fa:8a:d4:cb:25:36:
89:69:c1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:05:01 2025 by rpki-client