Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft
File: uIazyxP9IWfYnRIYXpNQbdRcmvk.mft (raw, json)
Hash identifier: QGKDdxmq0JDJhIBZ/S4q9Wi7SbniHEdr9UfDdMJPYj8=
Subject key identifier: 65:03:88:D6:99:10:70:D2:D5:AB:5E:EE:1A:F1:3B:57:E9:02:D3:4C
Authority key identifier: B8:86:B3:CB:13:FD:21:67:D8:9D:12:18:5E:93:50:6D:D4:5C:9A:F9
Certificate issuer: /CN=b886b3cb13fd2167d89d12185e93506dd45c9af9
Certificate serial: 01984AAE9B0150541F89DB5DDB33AFB8F36A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uIazyxP9IWfYnRIYXpNQbdRcmvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft
Manifest number: 0B22
Signing time: Sun 27 Jul 2025 07:00:13 +0000
Manifest this update: Sun 27 Jul 2025 07:00:13 +0000
Manifest next update: Mon 28 Jul 2025 07:00:13 +0000
Files and hashes: 1: uIazyxP9IWfYnRIYXpNQbdRcmvk.crl (hash: 4HYbQXHF0hzW+joGsLkbQMiZUDKC+C9Dp/E2zvH+X8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uIazyxP9IWfYnRIYXpNQbdRcmvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:9b:01:50:54:1f:89:db:5d:db:33:af:b8:f3:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b886b3cb13fd2167d89d12185e93506dd45c9af9
Validity
Not Before: Jul 27 07:00:13 2025 GMT
Not After : Jul 28 07:00:13 2025 GMT
Subject: CN=650388d6991070d2d5ab5eee1af13b57e902d34c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a6:ae:d2:8d:f0:b0:4a:2d:e6:76:09:ca:2a:
23:c4:f7:c7:fc:db:0a:ef:b8:01:54:e4:72:c4:30:
d1:2a:64:86:3a:35:47:a4:cd:33:82:76:0e:89:ba:
79:ca:f4:28:22:8b:39:fd:3b:77:15:c5:28:47:57:
16:ee:1b:33:63:3c:8c:5b:8c:82:36:4f:4e:5b:b2:
a4:3d:20:89:1e:39:60:69:57:56:f0:dd:e0:4f:af:
e0:01:3d:ce:f7:a2:70:98:77:23:5e:06:3d:32:ea:
95:8a:bf:33:73:af:d5:99:a1:8d:30:d4:39:6d:3c:
0e:42:a1:b1:c4:54:2d:73:c0:64:a4:34:df:24:5c:
96:bd:90:8a:56:a7:9f:ac:f4:f7:d5:80:85:bb:42:
3d:6a:dd:e2:87:63:39:44:4b:1c:55:6b:f5:31:3a:
3e:4a:19:02:ca:6b:aa:d8:3d:f3:59:27:93:e4:5e:
ca:d8:e1:95:77:88:90:b1:78:79:09:5f:be:fe:1e:
ce:c1:e5:af:38:ea:be:ec:69:d8:fc:d8:71:da:01:
22:27:eb:82:80:09:df:9f:15:eb:3e:c6:bc:26:8c:
46:c3:08:55:5b:32:dd:7d:f8:79:2c:03:4a:c8:e1:
fe:0e:b3:8a:e8:3f:ce:0a:cb:7c:59:a7:60:d5:bc:
84:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:03:88:D6:99:10:70:D2:D5:AB:5E:EE:1A:F1:3B:57:E9:02:D3:4C
X509v3 Authority Key Identifier:
keyid:B8:86:B3:CB:13:FD:21:67:D8:9D:12:18:5E:93:50:6D:D4:5C:9A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uIazyxP9IWfYnRIYXpNQbdRcmvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:91:96:86:b2:d1:84:8a:65:44:1a:03:7e:63:62:dd:fb:aa:
b9:79:23:98:43:5e:3c:3a:64:7b:d0:69:eb:42:cd:e3:15:eb:
9a:44:28:54:13:4e:53:b0:c9:e4:7f:0d:bf:93:33:92:65:b1:
5f:d9:ff:12:31:f3:7e:36:af:d1:84:fb:b9:11:44:a5:97:87:
90:fb:73:6a:40:a5:ba:ac:12:9e:04:5c:17:c6:64:4c:31:11:
10:1e:0e:d4:75:39:fb:4d:f5:ea:18:89:21:84:84:7b:8c:64:
ef:e3:05:7f:f1:1f:28:72:eb:e4:0d:a4:b2:7b:42:6f:4e:57:
39:f9:df:dd:8a:d2:c7:e3:91:b7:81:08:5f:a6:8a:36:7e:59:
b8:d1:e3:a1:3f:30:0a:3c:e9:b7:96:18:5a:98:8a:68:25:3d:
44:9e:08:29:71:54:3b:e8:80:76:02:e1:55:1b:cc:b5:cd:95:
f3:fe:fa:40:44:aa:5e:56:26:fa:54:d0:31:db:5a:18:73:69:
7c:d8:20:b9:26:df:70:43:c2:1b:9c:4e:41:e9:ed:12:23:27:
8c:69:be:9f:22:49:45:44:d1:89:7b:23:11:ac:91:d4:d8:ff:
b0:ec:cb:db:ed:34:29:1a:3e:64:84:e6:e1:9b:6e:ff:4f:5f:
a2:cf:87:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:36:48 2025 by rpki-client