Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e6ccc7-d1e5-4f07-8dab-506a4934cad5/1/UNlf0yarPwj3bczGVrs-Hia03Fc.mft
File: UNlf0yarPwj3bczGVrs-Hia03Fc.mft (raw, json)
Hash identifier: sWRWkIUWggEsJgDk6gAP2PMRZtWYAhtiFp9xGZK8ZcY=
Subject key identifier: 0B:91:9A:FC:DC:03:57:E0:BD:7C:27:13:AD:C7:89:31:34:EC:BE:F5
Authority key identifier: 50:D9:5F:D3:26:AB:3F:08:F7:6D:CC:C6:56:BB:3E:1E:26:B4:DC:57
Certificate issuer: /CN=50d95fd326ab3f08f76dccc656bb3e1e26b4dc57
Certificate serial: 019849D35CDB1F1010F319DF65F5099B8E5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNlf0yarPwj3bczGVrs-Hia03Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e6ccc7-d1e5-4f07-8dab-506a4934cad5/1/UNlf0yarPwj3bczGVrs-Hia03Fc.mft
Manifest number: 01A8
Signing time: Sun 27 Jul 2025 03:00:45 +0000
Manifest this update: Sun 27 Jul 2025 03:00:45 +0000
Manifest next update: Mon 28 Jul 2025 03:00:45 +0000
Files and hashes: 1: UNlf0yarPwj3bczGVrs-Hia03Fc.crl (hash: PZBCkGhU/apX0YvZndTSa3i31jyBe/Iod4KgoxfsI7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e6ccc7-d1e5-4f07-8dab-506a4934cad5/1/UNlf0yarPwj3bczGVrs-Hia03Fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e6ccc7-d1e5-4f07-8dab-506a4934cad5/1/UNlf0yarPwj3bczGVrs-Hia03Fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNlf0yarPwj3bczGVrs-Hia03Fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:5c:db:1f:10:10:f3:19:df:65:f5:09:9b:8e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d95fd326ab3f08f76dccc656bb3e1e26b4dc57
Validity
Not Before: Jul 27 03:00:45 2025 GMT
Not After : Jul 28 03:00:45 2025 GMT
Subject: CN=0b919afcdc0357e0bd7c2713adc7893134ecbef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:46:7b:73:5f:68:5d:92:20:fa:3b:c2:7c:55:
97:62:62:74:7d:2f:e0:80:34:4c:08:fa:7c:7f:03:
53:90:90:f3:36:07:a6:8d:ab:06:21:80:65:a6:e2:
86:7c:d3:2a:a2:44:d5:c5:c1:2c:6a:bb:04:74:0b:
eb:c9:98:0b:51:fe:4b:ac:6e:96:a5:45:d3:31:ae:
87:e8:96:88:88:10:79:4e:55:33:1e:e9:92:70:18:
0c:11:de:a1:3b:99:1b:bc:73:07:eb:c0:18:d4:7e:
3d:06:2a:30:d5:8d:60:9f:ff:34:6b:5e:65:55:d0:
ee:dd:c8:6c:18:fb:35:e8:82:4c:da:0b:a4:b1:06:
da:22:0d:8a:18:42:99:16:6c:66:0a:4e:65:8f:98:
46:0f:d2:b1:d9:63:db:db:96:e8:63:7a:0f:dd:68:
e2:17:74:f4:0e:36:77:13:bd:db:f2:e4:2f:6d:f5:
7a:5b:b3:47:25:a3:87:62:c9:25:2e:d1:99:11:4d:
f2:27:38:23:96:a2:55:0d:51:0d:a3:b2:02:0e:e3:
20:03:00:52:37:90:0f:35:36:83:18:48:7d:4a:e6:
36:1c:fe:66:fe:ef:af:64:ef:92:d1:8b:0e:8c:d9:
aa:6d:15:97:79:0c:57:6d:b7:30:11:cd:a0:bd:95:
6a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:91:9A:FC:DC:03:57:E0:BD:7C:27:13:AD:C7:89:31:34:EC:BE:F5
X509v3 Authority Key Identifier:
keyid:50:D9:5F:D3:26:AB:3F:08:F7:6D:CC:C6:56:BB:3E:1E:26:B4:DC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNlf0yarPwj3bczGVrs-Hia03Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e6ccc7-d1e5-4f07-8dab-506a4934cad5/1/UNlf0yarPwj3bczGVrs-Hia03Fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e6ccc7-d1e5-4f07-8dab-506a4934cad5/1/UNlf0yarPwj3bczGVrs-Hia03Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ca:81:46:41:25:52:db:d1:ea:92:8d:11:4c:ee:79:54:c3:
19:6c:69:f1:0e:d7:62:1d:52:65:3b:8b:dc:4d:b0:0f:bb:98:
b4:14:fb:ca:c1:8d:6b:b3:76:22:a5:6f:c7:09:0e:7e:ac:a3:
a1:76:77:cf:ac:eb:30:40:a7:54:d7:d7:e3:6d:29:1b:00:0f:
64:2e:6a:69:e7:54:30:1c:f0:c4:91:cb:af:74:79:79:b2:87:
49:a3:55:34:5c:9f:b7:a1:97:b5:0e:c3:b7:08:a0:91:3c:f2:
e8:c8:5c:94:44:09:96:6b:02:6e:51:00:18:96:18:09:84:c1:
f6:22:35:d7:da:f1:5e:c3:c3:06:a7:a3:e8:ff:4d:89:39:d1:
a7:92:25:31:e9:b3:a1:dd:74:55:b7:3d:bd:f9:33:ec:13:82:
19:ae:2d:aa:74:cd:04:2e:91:59:56:49:8e:38:57:84:59:3b:
83:6a:d0:91:9e:be:ff:73:0e:74:5d:93:c8:20:61:c0:10:81:
88:18:06:07:98:20:e4:ad:70:db:c2:bd:17:ed:4c:4a:c9:ca:
15:59:ac:5f:9f:67:64:e7:64:c1:55:b4:f0:6d:6f:33:54:33:
db:3e:a5:11:e7:11:7c:70:08:d5:a4:80:ef:5d:47:1d:48:71:
8a:38:3c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:27:37 2025 by rpki-client