
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft
File: UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft (raw, json)
Hash identifier: ShXaVSNtolwVxhXP4Gj/HydxmyXYmEu8BxIBhUY3vpM=
Subject key identifier: 27:49:6E:11:9C:A9:46:AF:F2:85:69:CA:85:48:2B:2A:45:01:1B:4E
Authority key identifier: 53:14:84:D0:DE:03:9F:66:5E:1F:92:CA:B3:11:CF:EB:C5:92:B7:A7
Certificate issuer: /CN=531484d0de039f665e1f92cab311cfebc592b7a7
Certificate serial: 019827B57AD59A1764F8E5002C20031A9750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft
Manifest number: 07
Signing time: Sun 20 Jul 2025 12:01:01 +0000
Manifest this update: Sun 20 Jul 2025 12:01:01 +0000
Manifest next update: Mon 21 Jul 2025 12:01:01 +0000
Files and hashes: 1: UxSE0N4Dn2ZeH5LKsxHP68WSt6c.crl (hash: RdB9eD0hFjgTkp4obkVsfEuBxyQFlgsi/HZsxQerrKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:b5:7a:d5:9a:17:64:f8:e5:00:2c:20:03:1a:97:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=531484d0de039f665e1f92cab311cfebc592b7a7
Validity
Not Before: Jul 20 12:01:01 2025 GMT
Not After : Jul 21 12:01:01 2025 GMT
Subject: CN=27496e119ca946aff28569ca85482b2a45011b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:96:ca:6d:3c:b2:22:db:4f:10:5c:81:f5:69:
16:a1:82:33:0f:38:2f:09:f6:fc:1a:fa:92:7e:f8:
fa:83:19:a8:11:9d:c9:37:f5:b6:f4:68:eb:a4:ff:
17:c6:05:b0:09:ef:73:41:c8:8d:7e:50:b9:81:6f:
e8:fe:de:84:db:22:43:60:dd:1a:2e:a6:04:0b:20:
77:69:1a:b9:42:f8:53:6a:28:ac:40:a6:b1:3f:28:
bc:3b:f9:a8:8c:2a:8c:16:16:dc:0a:ce:0c:33:ca:
e3:d9:ea:b2:70:cd:e1:c7:89:f9:4a:27:e9:95:bf:
3d:6b:6d:b5:f0:1b:75:0a:78:cd:94:0f:18:33:89:
7a:5a:7d:ae:20:a8:25:6f:6f:21:0d:79:24:d0:8e:
42:88:c7:7b:8c:65:22:9b:22:9b:5a:58:07:55:f0:
64:5c:7e:59:7a:98:58:62:1d:71:f7:28:be:7e:b1:
60:17:3f:70:8c:80:6a:10:f8:63:db:0f:b3:27:c3:
16:bf:24:40:de:86:d1:0c:a9:49:8e:fe:10:98:7a:
66:fb:39:36:64:2e:26:66:46:c2:3c:b2:90:93:97:
62:f4:6c:d1:84:db:d9:8e:76:fd:a2:1e:dc:9a:d2:
5a:14:d4:cd:30:e4:29:c9:a4:9f:f2:06:b5:d5:c7:
57:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:49:6E:11:9C:A9:46:AF:F2:85:69:CA:85:48:2B:2A:45:01:1B:4E
X509v3 Authority Key Identifier:
keyid:53:14:84:D0:DE:03:9F:66:5E:1F:92:CA:B3:11:CF:EB:C5:92:B7:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:59:6e:37:b5:7c:97:55:56:71:93:b7:5e:c7:0b:56:5a:cd:
fe:6d:6e:e8:f0:c4:28:18:32:c0:55:2a:30:13:73:7e:a8:24:
8d:57:aa:7b:f8:69:c6:89:16:2b:17:b9:ae:1e:63:c6:56:58:
a8:9e:a5:09:a6:4b:63:0a:c6:74:34:53:b1:75:43:a3:59:d5:
86:b4:ef:ec:4f:e9:d3:8b:25:82:04:eb:32:3e:c0:97:44:c1:
f8:fd:b5:ca:9e:6c:bd:13:9f:3b:c5:f2:18:4c:78:a1:1a:3a:
fd:fb:b9:b7:8e:01:e5:3f:03:2d:7b:69:a4:1f:10:d5:c9:86:
aa:f3:d7:b3:ce:15:06:a8:27:3b:3e:a5:a9:b8:aa:3f:a7:11:
8b:65:8f:2b:ee:49:42:ea:f4:71:84:25:18:66:5b:b6:1f:57:
38:bc:67:18:d2:b4:66:7a:c5:ae:87:35:cd:93:54:a6:ae:e9:
09:a7:7f:94:82:49:5d:af:c2:29:bc:a1:13:5c:62:00:45:7e:
9f:d4:d6:80:ce:3f:bb:f7:b9:f5:96:fa:24:04:23:b3:52:3f:
8e:40:13:4e:54:54:25:bf:27:6b:da:f1:0b:f3:e7:2e:9a:13:
a1:83:51:94:db:de:05:86:17:42:ae:6c:dc:f1:e6:47:65:a2:
7c:32:fa:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:10:15 2025 by rpki-client