Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
File: vUltYJRIpG2YZUJqjp7aWICI0Fc.mft (raw, json)
Hash identifier: ploKq4NIN2+wYC1PLpjniy2sIISC6GwZdg5OOqQrSqg=
Subject key identifier: 44:E4:77:34:8B:D6:38:0D:89:3A:DA:9F:51:2B:FB:CC:20:00:F2:20
Authority key identifier: BD:49:6D:60:94:48:A4:6D:98:65:42:6A:8E:9E:DA:58:80:88:D0:57
Certificate issuer: /CN=bd496d609448a46d9865426a8e9eda588088d057
Certificate serial: 01984B5454F8492E88FD3D290AF0EC3F1E9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
Manifest number: 1236
Signing time: Sun 27 Jul 2025 10:01:14 +0000
Manifest this update: Sun 27 Jul 2025 10:01:14 +0000
Manifest next update: Mon 28 Jul 2025 10:01:14 +0000
Files and hashes: 1: vUltYJRIpG2YZUJqjp7aWICI0Fc.crl (hash: I3hDQ/vwMvEcGYkX/7x0D9f0+EIaAj/gWbpv+E7zgjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:54:f8:49:2e:88:fd:3d:29:0a:f0:ec:3f:1e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd496d609448a46d9865426a8e9eda588088d057
Validity
Not Before: Jul 27 10:01:14 2025 GMT
Not After : Jul 28 10:01:14 2025 GMT
Subject: CN=44e477348bd6380d893ada9f512bfbcc2000f220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ce:8f:6b:0b:0b:00:d3:25:83:fc:e3:d7:f1:
2c:60:6b:b4:b5:85:7f:4c:c8:00:18:c9:54:ff:7a:
c5:86:13:a5:1f:3c:aa:88:c3:57:24:4e:98:f2:54:
96:d6:25:ab:ff:04:42:25:59:99:c3:84:04:fb:f5:
eb:ad:05:0e:b8:c8:68:98:33:14:2b:61:59:30:5d:
46:20:c9:e0:ec:1b:5a:c8:8b:b2:11:96:b1:32:cc:
53:ff:2e:d3:cc:d9:47:f8:21:a4:db:5a:7c:83:f7:
fc:1b:fd:97:9d:15:37:fc:6f:88:19:28:9d:9f:8e:
48:c0:42:98:f9:68:ba:e8:7a:f9:80:68:fb:fe:c3:
a4:a4:07:97:2a:a0:83:f4:02:a3:89:09:e9:fb:8c:
88:64:fd:88:61:73:a0:32:e7:63:99:1c:66:83:91:
55:52:d7:d1:9f:84:e9:cb:d3:a9:36:b0:c9:ed:45:
00:e5:f4:35:a1:de:b8:68:5a:38:b0:6c:34:c7:9c:
1c:d4:67:c4:7f:b9:59:3b:0f:31:19:b0:1d:77:cc:
c3:c9:03:45:16:45:bc:1a:a8:bc:ae:61:b7:0b:9b:
7a:1b:ba:07:98:89:41:b1:87:7d:54:8c:0e:5e:da:
e9:f2:63:68:4c:43:36:04:d7:2a:09:93:72:46:e7:
29:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E4:77:34:8B:D6:38:0D:89:3A:DA:9F:51:2B:FB:CC:20:00:F2:20
X509v3 Authority Key Identifier:
keyid:BD:49:6D:60:94:48:A4:6D:98:65:42:6A:8E:9E:DA:58:80:88:D0:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:1f:ea:1f:30:d3:2a:db:f3:93:23:16:15:a1:2c:b2:07:c3:
e5:59:69:b3:7f:2b:11:44:48:33:94:51:b4:7a:60:c0:17:ef:
1c:b1:dd:28:01:a2:40:20:1d:05:0c:11:da:a7:70:15:45:b8:
24:94:32:64:7c:3f:85:ca:44:f9:e9:52:59:4a:40:2a:50:e5:
1a:d2:a4:91:5a:5b:c1:84:ef:78:76:80:de:48:83:cd:60:38:
7a:3d:d2:f9:81:75:e6:84:43:1f:b6:09:f4:3a:40:15:7a:2e:
f8:5d:9c:73:d5:28:cd:6f:01:ec:89:5d:1b:93:32:2a:be:ee:
9b:d4:fa:c6:9d:01:62:f1:d9:e2:e4:df:ae:47:69:8d:da:50:
d2:ba:38:fc:36:11:f8:31:1d:30:5a:c5:18:75:7c:b0:3a:a8:
6a:6e:0c:fe:cb:f7:a7:9d:6b:b0:12:01:b3:c0:05:9b:ee:f0:
62:23:46:a3:85:17:74:47:31:f3:35:58:f3:28:1e:2f:e6:bd:
96:1a:a5:85:88:17:76:55:b0:9f:dd:a9:bc:54:af:fe:5e:d9:
7a:23:ea:db:3f:f1:9e:1e:b6:a9:82:fb:30:5b:9c:b3:3c:2d:
b4:34:d4:cd:d9:ee:43:62:a1:eb:8b:34:05:98:e3:f0:b7:de:
c3:60:cf:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:07:27 2025 by rpki-client