Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft
File: Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft (raw, json)
Hash identifier: itF9WhPmk+reuP3+rEbblkjh45z2wOwZUztNRibs484=
Subject key identifier: AA:81:B7:9A:DC:41:F2:30:C9:D9:85:EF:E7:FD:08:E2:A6:6F:1E:75
Authority key identifier: 52:59:79:6C:5F:60:C5:55:01:E4:58:00:86:11:62:3B:50:49:D4:79
Certificate issuer: /CN=5259796c5f60c55501e458008611623b5049d479
Certificate serial: 0198277EBA22F4BAC23A9F1B7550530BB8D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft
Manifest number: 09
Signing time: Sun 20 Jul 2025 11:01:13 +0000
Manifest this update: Sun 20 Jul 2025 11:01:13 +0000
Manifest next update: Mon 21 Jul 2025 11:01:13 +0000
Files and hashes: 1: Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.crl (hash: MiHTstOxAkPEj8QDOdzGKN2nnJ7hLc/78DIlg9y3OpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:7e:ba:22:f4:ba:c2:3a:9f:1b:75:50:53:0b:b8:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5259796c5f60c55501e458008611623b5049d479
Validity
Not Before: Jul 20 11:01:13 2025 GMT
Not After : Jul 21 11:01:13 2025 GMT
Subject: CN=aa81b79adc41f230c9d985efe7fd08e2a66f1e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6b:a2:90:08:5c:b6:d2:48:de:3d:7b:7b:f4:
dd:a6:bd:de:87:6f:6d:5a:b0:2a:c3:0a:16:f6:87:
10:2e:8d:76:fc:c6:28:9b:05:76:c3:68:fe:32:8d:
cb:9e:65:2f:01:1b:8b:26:c6:dc:4f:cb:75:5c:04:
c0:95:9c:4d:42:79:12:d2:2b:7e:38:be:29:66:12:
0a:95:f1:47:20:06:af:fc:81:6c:cd:42:fd:28:6c:
d0:36:8c:00:b8:ef:8e:a4:71:46:70:ce:9b:61:b9:
53:ff:39:45:bc:6c:ca:55:f1:65:55:1d:7e:25:90:
05:ea:8e:a1:dc:28:e3:9e:44:bf:8a:a3:a9:97:af:
eb:ea:ec:42:3a:39:ca:c6:89:8d:0d:f1:69:d9:9f:
09:dd:ed:93:47:10:1b:0b:38:aa:f5:84:34:a4:33:
88:d8:7e:b9:89:09:4c:56:dd:89:29:1a:37:eb:3f:
06:07:8d:63:0f:8f:4c:42:e9:db:3f:8c:53:44:18:
e3:cc:a5:07:6e:db:ad:f8:15:4e:b1:39:63:55:9d:
9a:22:90:76:78:5c:43:01:d8:c1:54:24:66:aa:25:
e0:8e:0a:8e:4e:cb:74:2b:2d:2a:6a:4f:b1:94:ba:
66:d5:4e:32:4a:7b:30:10:bb:38:00:b6:07:e2:7c:
46:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:81:B7:9A:DC:41:F2:30:C9:D9:85:EF:E7:FD:08:E2:A6:6F:1E:75
X509v3 Authority Key Identifier:
keyid:52:59:79:6C:5F:60:C5:55:01:E4:58:00:86:11:62:3B:50:49:D4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:fc:0c:f5:24:12:75:37:1e:19:00:f5:7d:27:51:f8:56:aa:
2e:0f:c2:c2:81:e8:2f:88:7b:54:82:cb:8d:9c:a3:cc:15:5a:
73:6a:57:05:38:0a:c7:41:57:b9:02:4c:48:e2:4b:6a:02:f1:
6e:59:a3:71:4b:0a:6f:40:af:83:1b:b7:b0:dc:be:37:af:2b:
23:13:09:e3:68:87:0a:3f:fd:8a:9f:9a:77:6e:b1:75:32:21:
d2:55:4a:2e:bc:02:43:54:9e:a9:f4:09:72:d4:d3:47:31:5c:
a6:24:81:2f:42:05:74:1a:6f:36:48:96:d7:cf:fe:6d:48:00:
58:50:5b:60:ab:14:28:dd:6c:f7:e6:fa:dd:62:a8:8a:bb:19:
9b:ea:12:b9:51:94:3c:d1:3a:af:ff:dc:bd:93:a6:94:3e:11:
9e:d3:03:60:13:de:18:27:30:c8:10:d0:6f:dd:e2:a5:37:0f:
5f:a2:7e:26:95:7e:cf:bf:ba:0b:b1:77:19:3b:ab:05:d4:d4:
67:c0:2a:4d:f0:7e:ed:c1:db:59:a2:ef:66:e7:e1:98:0b:4f:
79:62:3b:64:8f:f4:f5:9e:7f:ec:b6:51:a5:67:51:83:bd:0a:
11:b2:38:eb:25:78:13:54:43:f9:85:a0:19:a0:38:d6:8b:fa:
d0:76:ba:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:23:34 2025 by rpki-client