Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7a53ec-56d7-45cd-bab8-b32adf61ab47/1/ucN059N57ajbliAKTu_lvBwok58.mft
File: ucN059N57ajbliAKTu_lvBwok58.mft (raw, json)
Hash identifier: GZfVa6+TgDgE5FFdppTidv+hB6g6rGTF9647y/aIBc8=
Subject key identifier: 7F:8A:70:40:79:1C:FC:71:E8:BA:BE:A9:FD:DF:E1:57:7F:86:C2:7D
Authority key identifier: B9:C3:74:E7:D3:79:ED:A8:DB:96:20:0A:4E:EF:E5:BC:1C:28:93:9F
Certificate issuer: /CN=b9c374e7d379eda8db96200a4eefe5bc1c28939f
Certificate serial: 0198496695B2AD239F6B7369F5950CDAA600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucN059N57ajbliAKTu_lvBwok58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7a53ec-56d7-45cd-bab8-b32adf61ab47/1/ucN059N57ajbliAKTu_lvBwok58.mft
Manifest number: 0CB8
Signing time: Sun 27 Jul 2025 01:01:56 +0000
Manifest this update: Sun 27 Jul 2025 01:01:56 +0000
Manifest next update: Mon 28 Jul 2025 01:01:56 +0000
Files and hashes: 1: ucN059N57ajbliAKTu_lvBwok58.crl (hash: Skf21zac/Y/a17LV4CxxBpsMXx4vmoXZXikLsLujiA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7a53ec-56d7-45cd-bab8-b32adf61ab47/1/ucN059N57ajbliAKTu_lvBwok58.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/7a53ec-56d7-45cd-bab8-b32adf61ab47/1/ucN059N57ajbliAKTu_lvBwok58.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucN059N57ajbliAKTu_lvBwok58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:95:b2:ad:23:9f:6b:73:69:f5:95:0c:da:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c374e7d379eda8db96200a4eefe5bc1c28939f
Validity
Not Before: Jul 27 01:01:56 2025 GMT
Not After : Jul 28 01:01:56 2025 GMT
Subject: CN=7f8a7040791cfc71e8babea9fddfe1577f86c27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bb:6d:aa:53:7b:b2:fb:af:75:46:c7:e3:7a:
b3:56:11:e1:80:f2:3f:fb:7f:53:de:0c:69:2f:fd:
4b:15:de:d7:17:d3:9d:86:80:90:20:75:15:60:7d:
42:5e:89:86:ca:b9:27:c1:a1:bb:17:67:04:ff:ac:
57:62:6c:b3:6a:52:2d:69:86:e5:48:6d:3f:e2:25:
b8:65:bf:5c:7b:6a:8e:db:c6:71:6f:d3:e1:52:dc:
0c:ac:be:a3:37:ca:28:64:b5:a3:e2:39:16:74:0b:
9c:4b:d2:32:a8:64:d8:ee:14:2c:73:b6:36:75:64:
e0:60:e8:55:d4:da:cb:e4:92:44:87:2d:36:33:c6:
35:83:51:54:08:8f:3b:50:b4:98:b8:ab:63:2f:81:
dc:c6:ae:84:1a:3f:18:48:b1:93:ea:c7:c8:9e:31:
12:01:45:a2:9a:d6:f5:ca:f0:61:9b:a4:a9:c2:fd:
9c:5d:4c:bc:8a:39:e4:8b:35:6f:d5:0c:96:da:33:
61:4c:fd:0c:9b:f7:dc:a9:29:37:ef:5f:81:c9:41:
e7:fd:27:c2:03:3e:5d:8b:f7:94:e7:52:2d:02:50:
d7:11:54:04:73:37:a4:36:34:1e:ab:96:f7:6c:35:
a5:fd:e5:f4:53:70:74:62:7b:2e:04:1e:55:12:7e:
b0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8A:70:40:79:1C:FC:71:E8:BA:BE:A9:FD:DF:E1:57:7F:86:C2:7D
X509v3 Authority Key Identifier:
keyid:B9:C3:74:E7:D3:79:ED:A8:DB:96:20:0A:4E:EF:E5:BC:1C:28:93:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucN059N57ajbliAKTu_lvBwok58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7a53ec-56d7-45cd-bab8-b32adf61ab47/1/ucN059N57ajbliAKTu_lvBwok58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7a53ec-56d7-45cd-bab8-b32adf61ab47/1/ucN059N57ajbliAKTu_lvBwok58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:21:03:68:78:ec:24:dd:02:7a:fd:db:34:c4:05:ec:27:bd:
b9:3c:4d:cb:ab:fe:c7:92:5b:ae:3a:ea:c3:72:99:a7:3a:d4:
67:29:48:c7:f5:ae:09:58:72:d1:fd:2f:67:c3:aa:e3:0f:36:
41:6d:0b:fc:b5:f7:63:21:e6:b8:1b:c3:66:24:01:60:8d:d8:
f3:14:d4:5f:68:dc:4d:72:e8:52:2c:b9:e4:64:3f:55:56:ea:
60:a9:78:f1:bf:7a:6c:e9:83:36:82:17:75:1b:08:eb:d8:57:
4e:bc:05:b0:08:6e:69:f0:83:ae:f0:5e:e1:19:d1:b9:41:6e:
00:da:c3:34:b4:a0:92:a4:f0:48:7a:46:7b:b6:2c:be:27:24:
25:71:01:00:0f:ac:de:49:88:4f:97:cf:64:5d:0e:b2:27:3e:
e6:b7:f9:ef:ae:1d:d9:10:2f:fb:40:90:fe:b2:d3:f7:82:13:
88:3d:d2:eb:e9:d6:43:f7:aa:18:30:e3:47:45:6a:bb:b5:cf:
2c:e3:cd:54:5d:e2:0a:a0:4a:5c:19:5d:06:1c:d6:2b:31:25:
94:ca:d6:c3:1b:19:29:10:4c:bb:9b:38:cb:4d:a0:fb:a1:6e:
7e:99:02:35:54:ff:b9:5f:f6:ae:82:63:ae:e0:c8:53:13:ac:
ff:95:f0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:42:52 2025 by rpki-client