
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft
File: UZxxlGfHXvlxe8YrftrpALovRiU.mft (raw, json)
Hash identifier: VBxgV3TmC8488ZL1CN6XKE5/zkJVfcwZEFbc1KWrXnM=
Subject key identifier: F6:80:25:C4:EE:C6:4B:61:02:18:55:73:F6:4F:69:AB:31:87:96:D4
Authority key identifier: 51:9C:71:94:67:C7:5E:F9:71:7B:C6:2B:7E:DA:E9:00:BA:2F:46:25
Certificate issuer: /CN=519c719467c75ef9717bc62b7edae900ba2f4625
Certificate serial: 019839F2D578A2E71AAF1CFC00149051BAF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZxxlGfHXvlxe8YrftrpALovRiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft
Manifest number: 2F
Signing time: Thu 24 Jul 2025 01:01:12 +0000
Manifest this update: Thu 24 Jul 2025 01:01:12 +0000
Manifest next update: Fri 25 Jul 2025 01:01:12 +0000
Files and hashes: 1: UZxxlGfHXvlxe8YrftrpALovRiU.crl (hash: RYomHgTkbVp3V9Xdeay+IJ121568LIqilir7gd25OEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZxxlGfHXvlxe8YrftrpALovRiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:39:f2:d5:78:a2:e7:1a:af:1c:fc:00:14:90:51:ba:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519c719467c75ef9717bc62b7edae900ba2f4625
Validity
Not Before: Jul 24 01:01:12 2025 GMT
Not After : Jul 25 01:01:12 2025 GMT
Subject: CN=f68025c4eec64b6102185573f64f69ab318796d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bf:0d:ac:c6:29:1c:ce:bd:d1:70:9d:15:dd:
40:96:eb:c3:3e:66:2c:e5:38:28:cd:79:14:de:eb:
a7:a2:09:26:45:60:b0:1a:4a:1f:d0:a9:1b:40:24:
3f:cb:bb:09:bb:ad:f9:3d:2d:f2:51:18:1e:f3:08:
99:fd:80:f6:4f:6c:69:ae:97:78:dc:78:37:fe:9f:
51:20:be:3f:b6:0c:e8:78:04:1d:53:b7:60:c9:f0:
f3:32:c9:29:2b:86:a7:f1:4c:9c:f9:26:84:a1:99:
d3:99:8e:e4:5d:13:74:b8:ec:ac:cd:7d:df:47:f7:
40:56:d0:d9:5d:3b:ca:6d:ee:20:73:d9:5e:c1:17:
91:75:3e:c4:b3:e2:d2:3a:1b:c6:66:d9:64:19:57:
56:7f:a6:db:81:e8:f5:f2:79:50:a1:bd:c1:11:b2:
84:23:b7:4e:2f:0b:93:18:de:6d:31:1e:f4:a9:b2:
bf:38:bf:26:36:97:05:47:1d:e7:00:ca:55:ce:53:
40:c7:c6:c3:ce:54:8d:c3:61:7c:13:ad:10:88:74:
09:e0:51:a3:52:27:b0:0d:c3:11:b6:73:00:c4:23:
4c:98:a9:fe:25:b5:04:06:e3:78:39:00:c2:74:7d:
af:83:0a:c9:df:76:47:c6:15:3b:56:4f:c3:dc:9f:
72:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:80:25:C4:EE:C6:4B:61:02:18:55:73:F6:4F:69:AB:31:87:96:D4
X509v3 Authority Key Identifier:
keyid:51:9C:71:94:67:C7:5E:F9:71:7B:C6:2B:7E:DA:E9:00:BA:2F:46:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZxxlGfHXvlxe8YrftrpALovRiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:9a:e2:44:9e:81:93:51:c9:13:c8:60:0f:b4:0c:2d:d2:82:
f1:5c:ce:9f:33:30:8c:8f:a0:49:11:8c:2e:db:60:1e:44:26:
84:16:5a:4e:64:b4:0b:48:bd:8b:32:3b:4b:20:94:a6:12:79:
86:4e:04:51:c5:6b:ea:cd:18:58:4f:0f:34:a2:35:df:6f:b4:
9f:94:47:23:95:8d:c9:1b:13:a9:8a:a5:f4:41:32:49:8f:79:
4d:f4:b5:c7:a0:c1:23:a0:06:07:e6:30:3c:b1:fe:3a:8c:20:
39:82:52:3d:ff:2b:03:a3:b5:43:97:25:bb:98:93:c4:96:42:
8d:35:df:11:cc:6b:4d:8e:f3:f6:78:a4:37:68:5d:d6:2d:d8:
54:3a:d1:c4:72:6c:a9:89:0f:6f:62:0f:82:67:be:88:8a:8b:
99:66:27:d3:aa:b9:07:ba:70:78:fb:4c:69:6f:3d:fe:07:e8:
11:bd:e7:c7:63:2b:e3:8c:db:ff:e5:9d:fa:39:5b:53:d4:fa:
78:d4:de:33:b3:be:70:ae:a3:1f:da:c8:88:48:3a:67:78:87:
05:be:99:cd:bc:bb:a1:d7:7e:b6:d9:32:38:3b:e5:7c:e6:dd:
b8:db:8f:1e:7b:bd:34:47:46:5d:50:bc:61:d0:62:6d:88:c0:
92:73:68:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 08:29:21 2025 by rpki-client