Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.mft
File: UfsmDqHIG4GxkdCujcNkESHp65Y.mft (raw, json)
Hash identifier: QMyX8GBC4rhEbxI8k1+8mfDckO0aCRAbTddTDxfCwUA=
Subject key identifier: 0E:16:6C:81:6F:74:42:9A:D8:E5:5F:04:67:A8:C0:38:22:CD:19:69
Authority key identifier: 51:FB:26:0E:A1:C8:1B:81:B1:91:D0:AE:8D:C3:64:11:21:E9:EB:96
Certificate issuer: /CN=51fb260ea1c81b81b191d0ae8dc3641121e9eb96
Certificate serial: 01984A09F7BEA363C5C163C971737C6BB1E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfsmDqHIG4GxkdCujcNkESHp65Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.mft
Manifest number: 05A3
Signing time: Sun 27 Jul 2025 04:00:23 +0000
Manifest this update: Sun 27 Jul 2025 04:00:23 +0000
Manifest next update: Mon 28 Jul 2025 04:00:23 +0000
Files and hashes: 1: UfsmDqHIG4GxkdCujcNkESHp65Y.crl (hash: T86JEEcpuaE9nwJ+NZuLYGuGcqYd5SxbprXnP/u/Bzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UfsmDqHIG4GxkdCujcNkESHp65Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:f7:be:a3:63:c5:c1:63:c9:71:73:7c:6b:b1:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51fb260ea1c81b81b191d0ae8dc3641121e9eb96
Validity
Not Before: Jul 27 04:00:23 2025 GMT
Not After : Jul 28 04:00:23 2025 GMT
Subject: CN=0e166c816f74429ad8e55f0467a8c03822cd1969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:34:5c:92:33:c2:0e:d2:5b:88:b9:25:85:5b:
ac:b4:fb:3f:d2:5f:52:53:57:df:18:e0:9b:e9:cd:
03:72:a3:8a:64:e4:14:92:ed:33:8f:fa:72:ec:3a:
d8:bf:44:14:2c:0f:0a:86:14:35:c2:a5:c9:28:4a:
ae:53:db:fb:ef:82:45:09:eb:ef:33:4e:73:49:52:
be:6d:36:ed:4a:cc:e7:84:2c:3a:08:40:1f:57:f3:
e1:4e:34:eb:b1:14:f6:84:44:a5:53:e6:64:f9:44:
f1:52:25:2a:88:a0:0a:8f:ac:e6:65:b0:87:3c:c2:
6b:7b:ec:a8:7c:dd:2d:ef:dc:97:7f:1d:a2:e0:ca:
a8:a4:b3:5c:9a:a3:ce:bc:86:bd:d2:1a:25:e9:3c:
74:d6:ee:17:8e:c8:1d:e0:d6:c5:1e:25:14:38:86:
12:8a:de:ac:85:35:a3:25:cd:c4:98:8b:ed:65:26:
3e:73:eb:c7:57:e7:ae:67:e7:77:49:84:e8:df:52:
d0:42:1d:7f:4d:e6:9f:13:39:5c:6b:36:79:04:88:
29:9c:bb:27:c2:cc:37:cc:da:1c:87:5a:2b:99:79:
0b:38:8f:6c:c3:71:90:7c:63:19:d0:ad:11:b7:4e:
7e:55:8d:3b:45:f7:a3:55:ad:8b:9a:1e:37:85:bc:
4a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:16:6C:81:6F:74:42:9A:D8:E5:5F:04:67:A8:C0:38:22:CD:19:69
X509v3 Authority Key Identifier:
keyid:51:FB:26:0E:A1:C8:1B:81:B1:91:D0:AE:8D:C3:64:11:21:E9:EB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfsmDqHIG4GxkdCujcNkESHp65Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d5:ed:46:3e:0d:9a:89:33:91:2e:a6:d5:a4:a2:d7:f7:7e:
d7:60:b9:c5:4f:8f:fb:2a:52:aa:27:31:29:3c:b5:72:7f:fd:
2b:b2:22:59:43:0b:40:e9:50:70:60:08:ec:f3:d4:ca:2c:62:
6e:e7:58:d8:4d:3b:73:2c:7d:ac:b2:4d:49:b8:fe:12:19:09:
87:65:64:39:cc:dd:13:d2:0a:56:54:12:6f:35:a1:05:88:ae:
a7:ae:48:ff:f2:00:4a:c3:ec:b5:be:aa:94:76:d7:67:b0:c6:
d9:43:ca:d6:6e:a7:6e:7e:e6:c7:cd:1b:eb:ac:63:59:25:34:
19:07:4a:19:d0:99:af:0a:c4:0e:96:41:36:46:31:11:f7:0c:
4f:27:40:d3:b4:23:2c:bd:1b:eb:06:81:4f:3d:b2:25:d9:df:
96:43:9a:25:c6:a1:1c:11:97:d5:c8:bd:1f:65:f6:1d:46:a6:
59:2a:27:d1:67:8d:57:2b:66:b6:67:d0:6b:50:82:6b:d3:5c:
0c:82:1e:37:47:73:66:07:20:e1:8e:be:75:ff:e2:10:ff:4a:
2b:27:77:b7:e6:3d:17:ee:f4:be:5d:e8:07:c4:7c:b0:17:25:
3d:33:8a:2f:74:82:f8:16:1f:5d:2a:1f:0d:81:26:b3:a8:b1:
66:9c:79:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:31:59 2025 by rpki-client