Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft
File: uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft (raw, json)
Hash identifier: g2GFRZna3ZLrDsfftarXt6csh2wdoxQvBt4qQlCI2U8=
Subject key identifier: B2:AD:33:CD:90:7C:06:BD:3D:15:08:AD:D9:40:61:DF:59:4D:99:4C
Authority key identifier: B9:1F:8D:B0:2E:2E:97:1D:54:F9:0E:EF:10:70:90:39:8F:CC:3D:92
Certificate issuer: /CN=b91f8db02e2e971d54f90eef107090398fcc3d92
Certificate serial: 0198496580ED070BA3FECB9A7FEB62B74798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft
Manifest number: 0843
Signing time: Sun 27 Jul 2025 01:00:45 +0000
Manifest this update: Sun 27 Jul 2025 01:00:45 +0000
Manifest next update: Mon 28 Jul 2025 01:00:45 +0000
Files and hashes: 1: uR-NsC4ulx1U-Q7vEHCQOY_MPZI.crl (hash: 6B8k7Vi+ZwfRMQTIStzm9WS6r7hbB1HoVMq9kxYTdKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:80:ed:07:0b:a3:fe:cb:9a:7f:eb:62:b7:47:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91f8db02e2e971d54f90eef107090398fcc3d92
Validity
Not Before: Jul 27 01:00:45 2025 GMT
Not After : Jul 28 01:00:45 2025 GMT
Subject: CN=b2ad33cd907c06bd3d1508add94061df594d994c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ce:ed:ad:3c:fc:75:c0:65:a7:f2:60:69:16:
c3:eb:61:a5:51:78:5e:85:d9:94:01:17:26:ac:d6:
6c:db:89:1c:59:d9:9e:23:0c:b1:cd:39:9f:32:ee:
44:17:ab:f8:55:8b:02:02:a5:ca:17:82:0d:19:cf:
cc:ca:05:db:96:25:32:5a:3a:d9:56:a2:31:f8:0b:
3c:e6:b2:05:35:b7:65:69:53:c8:b7:f9:eb:8a:03:
00:cb:64:e9:d6:8c:53:2b:ab:88:c2:ee:22:9c:26:
3a:16:b7:0d:a5:ba:d1:9e:bf:28:54:19:96:ad:af:
f5:8d:3b:f7:29:fe:47:30:37:c8:4c:a3:c5:a2:a3:
7c:32:32:cb:69:1d:1d:d1:9b:17:8d:3f:81:17:ed:
66:42:f0:f2:3d:e2:f4:00:fc:d4:0c:21:3f:fa:a1:
92:da:d1:00:21:08:a6:ef:12:45:8d:47:99:45:b1:
a1:74:d3:b8:23:81:84:ff:54:27:c4:bd:77:c0:05:
ee:f5:84:80:de:6f:39:9d:f4:1a:83:e0:09:b2:5a:
01:c6:9b:82:8c:10:e7:1b:e0:26:b3:d0:a9:09:b5:
51:2a:f6:51:28:bd:03:b9:a4:ea:21:aa:9d:f6:97:
ce:de:74:8f:2e:e4:fc:ab:42:b9:d5:0d:12:32:71:
4c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AD:33:CD:90:7C:06:BD:3D:15:08:AD:D9:40:61:DF:59:4D:99:4C
X509v3 Authority Key Identifier:
keyid:B9:1F:8D:B0:2E:2E:97:1D:54:F9:0E:EF:10:70:90:39:8F:CC:3D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b5:ff:18:43:6d:1f:da:c7:a7:0d:fc:01:37:69:5c:25:43:
d3:ea:5d:3c:32:3b:4d:82:b8:39:ed:b9:9e:7f:6a:75:c9:c4:
86:47:2c:eb:3d:d3:06:7a:42:f5:4e:5a:ab:ff:76:bd:3b:06:
52:e0:b7:5d:63:8f:c5:02:da:bf:be:36:5f:f9:24:78:63:e9:
87:68:0c:cc:df:b4:46:4d:92:81:d9:dd:8c:f1:1f:de:10:5b:
59:12:a3:89:53:1d:61:11:57:3d:95:26:63:e3:7a:e6:77:9c:
82:94:12:36:82:20:2d:15:8f:f7:f8:f0:50:e5:3e:00:37:17:
6c:13:71:3b:85:d7:d1:b3:5a:eb:d9:11:0d:20:7d:84:c5:ed:
61:95:a2:f1:f9:de:ac:ce:3d:38:c1:57:59:d2:5f:96:3a:63:
75:6a:81:0d:26:ba:47:be:14:71:83:88:33:03:d4:56:f0:21:
81:52:52:12:e7:29:d9:54:e4:63:6e:6b:93:4a:7d:33:22:0b:
b4:64:14:9a:4a:74:fc:e0:01:6a:cb:d5:0d:78:91:a6:ef:0c:
6e:3b:b5:05:cc:e2:71:3d:63:db:77:46:bb:65:02:ea:ff:8f:
0a:d4:20:b8:32:cd:4c:0e:c9:81:34:c2:b8:fe:ee:38:32:1c:
a8:fb:97:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:34:03 2025 by rpki-client