Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/63622f-b464-407d-bcfd-c9491b4dfd76/1/U1wJpqvN8dobR6tK8_-O_KWBRF0.mft
File: U1wJpqvN8dobR6tK8_-O_KWBRF0.mft (raw, json)
Hash identifier: D6wZPiKYVOT+KHEhjghw5pNnKPteVkOZnB4dhxDyj9o=
Subject key identifier: E8:2E:AC:52:13:CA:BB:9A:91:22:FA:6B:98:A1:2C:CF:E6:3D:17:C6
Authority key identifier: 53:5C:09:A6:AB:CD:F1:DA:1B:47:AB:4A:F3:FF:8E:FC:A5:81:44:5D
Certificate issuer: /CN=535c09a6abcdf1da1b47ab4af3ff8efca581445d
Certificate serial: 0198530CED8EE047654EDDB60456DD4A6E0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1wJpqvN8dobR6tK8_-O_KWBRF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/63622f-b464-407d-bcfd-c9491b4dfd76/1/U1wJpqvN8dobR6tK8_-O_KWBRF0.mft
Manifest number: 056A
Signing time: Mon 28 Jul 2025 22:00:12 +0000
Manifest this update: Mon 28 Jul 2025 22:00:12 +0000
Manifest next update: Tue 29 Jul 2025 22:00:12 +0000
Files and hashes: 1: U1wJpqvN8dobR6tK8_-O_KWBRF0.crl (hash: oCUoPNi/tzoz86ksCvf1a0OOkJnGXTSDFNclR3oqH8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/63622f-b464-407d-bcfd-c9491b4dfd76/1/U1wJpqvN8dobR6tK8_-O_KWBRF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/63622f-b464-407d-bcfd-c9491b4dfd76/1/U1wJpqvN8dobR6tK8_-O_KWBRF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1wJpqvN8dobR6tK8_-O_KWBRF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0c:ed:8e:e0:47:65:4e:dd:b6:04:56:dd:4a:6e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535c09a6abcdf1da1b47ab4af3ff8efca581445d
Validity
Not Before: Jul 28 22:00:12 2025 GMT
Not After : Jul 29 22:00:12 2025 GMT
Subject: CN=e82eac5213cabb9a9122fa6b98a12ccfe63d17c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7d:f7:8b:4f:8c:62:41:f7:81:03:92:0e:c2:
58:f0:0d:78:10:ce:15:a3:2c:6b:14:ae:ee:f1:4d:
a4:54:e5:87:bd:90:29:e2:c9:e4:03:48:bc:8e:fd:
12:1f:8e:5a:68:64:89:54:5f:7f:e7:9b:86:e4:32:
7f:4c:1d:ec:6c:48:bd:82:db:02:d2:d1:01:f8:45:
f5:26:88:bf:7c:3b:9f:9e:02:3a:73:68:d7:97:b1:
ec:5d:0a:a3:99:8b:70:42:8b:48:e9:0e:c1:17:86:
5c:f9:9f:7f:96:64:05:ba:6d:01:32:10:f2:dc:72:
0f:6b:37:b2:cc:1f:e0:85:8b:d4:7b:0c:2c:9e:44:
f0:41:29:36:88:9d:ee:70:50:2f:80:06:f7:04:76:
9a:3d:3d:4a:83:a4:d5:b2:0c:b0:09:c4:6a:d7:7f:
d7:45:10:c4:85:21:d6:d6:bd:4c:88:72:64:4c:a6:
93:cf:3c:3b:97:e8:93:4a:7c:a1:0b:3e:b9:22:2a:
39:8c:e1:20:c8:4a:9b:5d:33:76:0f:47:90:23:55:
71:97:75:1e:8b:d0:0a:e2:6e:4c:4a:14:2e:5d:05:
88:c4:7e:37:e8:06:b5:21:d1:01:b3:ca:91:4e:01:
06:e3:8b:3a:b8:92:6d:fd:a3:02:c9:ae:87:05:e1:
21:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2E:AC:52:13:CA:BB:9A:91:22:FA:6B:98:A1:2C:CF:E6:3D:17:C6
X509v3 Authority Key Identifier:
keyid:53:5C:09:A6:AB:CD:F1:DA:1B:47:AB:4A:F3:FF:8E:FC:A5:81:44:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1wJpqvN8dobR6tK8_-O_KWBRF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/63622f-b464-407d-bcfd-c9491b4dfd76/1/U1wJpqvN8dobR6tK8_-O_KWBRF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/63622f-b464-407d-bcfd-c9491b4dfd76/1/U1wJpqvN8dobR6tK8_-O_KWBRF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c7:f6:e2:75:2f:66:25:ea:55:ee:48:c6:f0:9b:03:79:72:
51:da:99:d9:1b:73:c9:2a:f0:62:43:a3:10:85:df:3c:30:e3:
bc:21:8f:25:f4:51:93:52:11:de:ae:cb:74:1f:89:ba:64:35:
92:c0:9d:b1:a4:d5:d4:af:2b:8b:0a:d9:49:ed:e4:3b:56:38:
a6:89:2b:27:a7:ab:87:df:99:9c:aa:d3:e9:a2:09:37:86:ce:
87:68:38:be:29:d3:74:f8:50:c3:5f:8f:ca:2a:02:99:b5:20:
5d:1e:51:30:0a:af:95:c1:fe:4a:8d:1d:f4:3d:27:47:01:a1:
27:4b:72:69:43:13:5f:0f:25:e7:5a:d4:06:a9:bd:77:11:51:
02:b9:65:23:24:02:50:9f:46:9a:97:9e:6b:e5:bd:b8:48:00:
0e:10:41:e3:1d:eb:2e:a3:c0:9f:2f:59:34:da:88:87:f4:3c:
0c:c4:6b:0f:d7:58:f6:04:4b:e7:0c:1b:33:8b:d4:8e:a7:32:
a6:73:ea:5e:28:d2:b5:a7:d0:c2:96:de:d2:92:00:27:67:02:
71:11:62:b0:ac:2e:ee:87:60:d3:32:2b:71:54:17:2e:86:8c:
0e:94:0e:15:de:5c:a0:cc:24:94:f3:00:9e:b4:38:3d:ce:30:
15:e7:c7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:07:43 2025 by rpki-client