Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
File: UVfIfREcgFD9XJrCsGvmIyNnUDM.mft (raw, json)
Hash identifier: y0qKzGGNfpCKbZDSHrxRpsZ9fAr0AfZeCiPPhPknjt4=
Subject key identifier: A3:6D:42:23:42:01:22:94:17:FD:E7:85:4F:74:51:91:4B:03:01:8C
Authority key identifier: 51:57:C8:7D:11:1C:80:50:FD:5C:9A:C2:B0:6B:E6:23:23:67:50:33
Certificate issuer: /CN=5157c87d111c8050fd5c9ac2b06be62323675033
Certificate serial: 0198496506D04375F160E5A41E03421F60DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
Manifest number: 0DCD
Signing time: Sun 27 Jul 2025 01:00:14 +0000
Manifest this update: Sun 27 Jul 2025 01:00:14 +0000
Manifest next update: Mon 28 Jul 2025 01:00:14 +0000
Files and hashes: 1: UVfIfREcgFD9XJrCsGvmIyNnUDM.crl (hash: RtR7GDySAPtu1cNHDvO1smx/9SeZAJaE/rBTaUv7LCk=)
2: YzKUAEeM3CnWsdIrwfHnUsBhQcI.roa (hash: 4/OtRTmHPZoVC5SXZxinCft/J9eQslnnS2y+eRKDbVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:06:d0:43:75:f1:60:e5:a4:1e:03:42:1f:60:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5157c87d111c8050fd5c9ac2b06be62323675033
Validity
Not Before: Jul 27 01:00:14 2025 GMT
Not After : Jul 28 01:00:14 2025 GMT
Subject: CN=a36d42234201229417fde7854f7451914b03018c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d2:7c:75:6c:86:3f:7a:ce:88:d1:e3:6e:c1:
9a:42:6f:69:5b:4a:77:b6:22:0e:03:45:c1:92:a6:
e9:f7:c3:eb:d6:e0:8c:8c:60:1d:e2:28:2d:28:c7:
4b:84:c0:f7:a8:ea:3c:4a:b8:cc:b8:2c:00:f1:10:
ac:00:6c:82:20:da:1d:72:8f:c1:d3:dc:d0:51:c0:
bb:2e:2c:5c:18:b9:42:66:81:17:fc:f5:d4:4c:9a:
8b:a8:60:10:a6:b6:cf:8c:e3:2b:ab:9b:2f:3f:74:
2a:c0:7e:d8:22:a3:22:ca:06:31:96:f0:45:d0:06:
48:5c:71:b4:38:0d:c6:08:0c:ae:0c:2e:e8:9f:23:
9f:33:41:8a:ac:17:ee:fc:ba:d2:37:f8:9d:80:7e:
12:4e:62:ec:b5:73:68:78:ab:a3:e7:e3:d3:c1:94:
54:d6:7e:df:2a:a7:6e:81:3e:1e:13:0f:c1:67:d7:
48:d4:75:9f:e1:21:87:ea:cd:e8:50:51:f3:7c:6f:
41:c0:76:8a:7e:0a:f2:1c:c0:e1:b7:50:0f:f4:33:
1e:ac:91:3d:03:fb:fd:f1:a2:a6:f1:17:de:0f:c7:
59:50:6e:b4:9e:32:5f:5e:ff:cb:50:6f:1d:68:32:
55:44:84:d6:5f:9b:18:6e:5f:89:35:0f:17:75:ff:
1f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6D:42:23:42:01:22:94:17:FD:E7:85:4F:74:51:91:4B:03:01:8C
X509v3 Authority Key Identifier:
keyid:51:57:C8:7D:11:1C:80:50:FD:5C:9A:C2:B0:6B:E6:23:23:67:50:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b6:9b:79:02:ce:e0:6b:7c:3a:bc:0e:60:72:ac:94:6a:6f:
74:48:2d:37:76:dc:90:54:82:25:2d:66:96:9c:5c:7c:28:76:
15:3c:30:7d:8b:3a:df:d7:aa:42:85:74:cb:d5:d9:c4:c4:0c:
69:85:18:df:54:2b:54:aa:f5:9c:aa:be:e6:6c:a2:ea:46:41:
38:51:18:c5:a3:a2:9f:1d:a4:10:e0:15:b5:a9:a5:00:ae:c9:
d2:52:b6:d4:1e:98:12:11:ad:33:cf:87:c8:81:ae:6b:3c:52:
8b:4d:50:1a:8a:11:c9:59:28:5b:8c:d3:4b:8e:a3:f8:97:38:
b5:3e:bd:f2:e0:de:c8:a1:da:42:0c:71:4b:a7:9d:58:6a:0d:
34:c9:20:96:83:6e:9f:8a:c1:37:fe:c6:7a:e0:77:8b:80:8d:
1a:9a:4e:5f:a5:82:20:0d:53:b7:21:db:68:9e:b8:8f:f7:ff:
2e:da:a3:28:74:75:e4:c9:09:52:bf:68:fd:35:0b:22:9d:52:
da:2f:6a:d5:2b:1e:e0:78:7b:33:ca:84:0d:a5:9c:d2:fc:fa:
77:23:e9:9f:1a:4f:b5:c3:ce:e7:ed:a4:45:da:27:63:60:2b:
7e:0c:07:86:9e:a1:9f:d9:5e:77:08:69:e5:00:56:23:30:ae:
f9:9c:28:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:25:43 2025 by rpki-client