Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a5ca0b-9425-4c1e-8ef6-a6fcad19aef2/1/U9L19sohYsiL85oPnekm9CPlMQQ.mft
File: U9L19sohYsiL85oPnekm9CPlMQQ.mft (raw, json)
Hash identifier: nY5vacCd3CcKpHAWgOZdKjrkqtMHdaWXghsIoRlm5i4=
Subject key identifier: C5:5D:A8:B0:3A:F9:30:08:0E:17:D3:4A:5D:AD:3B:15:18:97:D0:0D
Authority key identifier: 53:D2:F5:F6:CA:21:62:C8:8B:F3:9A:0F:9D:E9:26:F4:23:E5:31:04
Certificate issuer: /CN=53d2f5f6ca2162c88bf39a0f9de926f423e53104
Certificate serial: 0198530E91D592AC5D374FDC7E9537319B72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9L19sohYsiL85oPnekm9CPlMQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a5ca0b-9425-4c1e-8ef6-a6fcad19aef2/1/U9L19sohYsiL85oPnekm9CPlMQQ.mft
Manifest number: 0F6D
Signing time: Mon 28 Jul 2025 22:02:00 +0000
Manifest this update: Mon 28 Jul 2025 22:02:00 +0000
Manifest next update: Tue 29 Jul 2025 22:02:00 +0000
Files and hashes: 1: U9L19sohYsiL85oPnekm9CPlMQQ.crl (hash: 7SN8KbeVGQvXAiqhUJdFaYxOt6LUaoYuWBs83EKsIus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a5ca0b-9425-4c1e-8ef6-a6fcad19aef2/1/U9L19sohYsiL85oPnekm9CPlMQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/a5ca0b-9425-4c1e-8ef6-a6fcad19aef2/1/U9L19sohYsiL85oPnekm9CPlMQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9L19sohYsiL85oPnekm9CPlMQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:91:d5:92:ac:5d:37:4f:dc:7e:95:37:31:9b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d2f5f6ca2162c88bf39a0f9de926f423e53104
Validity
Not Before: Jul 28 22:02:00 2025 GMT
Not After : Jul 29 22:02:00 2025 GMT
Subject: CN=c55da8b03af930080e17d34a5dad3b151897d00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:56:b7:0b:88:60:93:08:81:e8:2c:76:63:31:
07:f0:fb:0e:8f:ab:79:40:e9:cd:d1:0a:49:a6:d7:
db:34:47:8d:cb:c5:22:e8:80:10:61:b6:66:d3:a9:
52:59:9b:9c:e3:4f:a5:ec:93:2c:ae:95:1a:00:19:
8d:60:73:14:f7:f2:b2:7f:79:cf:de:ae:09:84:45:
16:58:1c:19:80:e9:5d:da:5a:41:10:3a:6d:8a:28:
33:95:ac:a2:59:0c:25:23:b0:4d:96:1a:c6:29:e6:
05:f2:62:3d:c6:c3:2d:75:97:71:6c:21:95:ae:0f:
d7:0d:53:14:86:46:83:eb:eb:5b:86:7a:00:13:f2:
70:91:ce:f5:58:ec:1c:f6:b2:b2:42:70:f6:cb:3b:
00:ee:cd:c9:38:da:7d:7c:69:9d:92:b5:00:a8:d7:
27:5b:d9:e6:0f:4f:4f:81:3f:94:32:27:dd:b9:f0:
94:bc:bf:65:8a:9f:13:eb:91:95:19:db:68:44:3d:
7f:df:d4:e7:db:5f:f2:3a:35:e5:c3:21:d9:d2:b9:
ba:2f:5b:07:93:08:fa:6b:14:21:51:dd:a5:75:04:
6a:94:2a:a2:44:7f:9d:e8:68:00:e1:71:1c:4a:d6:
b8:00:85:f0:d1:f5:23:aa:88:25:dc:54:97:a1:13:
78:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5D:A8:B0:3A:F9:30:08:0E:17:D3:4A:5D:AD:3B:15:18:97:D0:0D
X509v3 Authority Key Identifier:
keyid:53:D2:F5:F6:CA:21:62:C8:8B:F3:9A:0F:9D:E9:26:F4:23:E5:31:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9L19sohYsiL85oPnekm9CPlMQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a5ca0b-9425-4c1e-8ef6-a6fcad19aef2/1/U9L19sohYsiL85oPnekm9CPlMQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a5ca0b-9425-4c1e-8ef6-a6fcad19aef2/1/U9L19sohYsiL85oPnekm9CPlMQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:7e:6a:45:ba:36:02:53:48:e0:ac:c1:a6:ad:0f:af:11:10:
9a:57:3b:b6:e0:64:de:e6:4a:cc:0c:63:83:ab:40:69:99:81:
2d:f3:e6:8e:86:9d:eb:51:e2:63:b9:2e:48:bb:9c:36:5a:3f:
f9:d6:97:29:b3:cd:96:08:27:e7:c9:71:15:20:c4:61:36:d0:
28:ea:20:82:25:31:d2:e0:cd:bc:32:9e:5e:59:b3:76:1a:00:
60:8f:da:d8:38:f5:31:bf:d8:0e:5e:cc:37:7c:06:86:d7:db:
ef:4d:42:43:dc:7c:af:8d:9e:df:e6:bf:45:27:01:bb:ef:2f:
2f:d3:dc:79:4f:e9:c4:e3:42:b8:70:58:25:a1:5c:ef:26:9b:
ac:2f:f4:ab:5b:28:0f:1c:d2:d0:9c:b6:5b:ed:9b:0a:34:1e:
38:ea:d2:2b:f1:3a:b4:86:5f:b1:85:d9:84:10:58:4f:d4:29:
3f:a2:bd:82:19:e2:2f:50:f7:9a:19:cd:2c:75:a5:0b:cd:ed:
d7:b5:28:be:c5:8c:cc:11:14:44:0c:0a:fe:67:62:c6:f6:47:
9a:65:2c:bf:63:55:7c:2f:73:6f:7d:c6:84:d3:f8:24:07:66:
2e:26:57:f1:45:de:47:dc:28:07:aa:f1:dc:2f:5b:8d:cb:81:
8c:f5:34:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:03:02 2025 by rpki-client