Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f8ea98-4fbc-4f3e-b658-e0a7ae216cb7/1/ulwqMT590aRJ4sH7JsWrA-UmgY0.mft
File: ulwqMT590aRJ4sH7JsWrA-UmgY0.mft (raw, json)
Hash identifier: BOn649eA3eHwekJUU8OULe1/AnT7QtJbpTMIrKmCOQY=
Subject key identifier: 0D:D9:50:BB:3F:8A:10:08:00:22:16:90:E4:D4:FA:9E:34:3C:D3:A7
Authority key identifier: BA:5C:2A:31:3E:7D:D1:A4:49:E2:C1:FB:26:C5:AB:03:E5:26:81:8D
Certificate issuer: /CN=ba5c2a313e7dd1a449e2c1fb26c5ab03e526818d
Certificate serial: 019844ACDD245D1C233E47B9081AAAD5B60C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulwqMT590aRJ4sH7JsWrA-UmgY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f8ea98-4fbc-4f3e-b658-e0a7ae216cb7/1/ulwqMT590aRJ4sH7JsWrA-UmgY0.mft
Manifest number: 032B
Signing time: Sat 26 Jul 2025 03:00:36 +0000
Manifest this update: Sat 26 Jul 2025 03:00:36 +0000
Manifest next update: Sun 27 Jul 2025 03:00:36 +0000
Files and hashes: 1: ulwqMT590aRJ4sH7JsWrA-UmgY0.crl (hash: JwivfjiXNZ5mv10zAxoCvEwh425nYD7csAqx++YxKxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f8ea98-4fbc-4f3e-b658-e0a7ae216cb7/1/ulwqMT590aRJ4sH7JsWrA-UmgY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/f8ea98-4fbc-4f3e-b658-e0a7ae216cb7/1/ulwqMT590aRJ4sH7JsWrA-UmgY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulwqMT590aRJ4sH7JsWrA-UmgY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:ac:dd:24:5d:1c:23:3e:47:b9:08:1a:aa:d5:b6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba5c2a313e7dd1a449e2c1fb26c5ab03e526818d
Validity
Not Before: Jul 26 03:00:36 2025 GMT
Not After : Jul 27 03:00:36 2025 GMT
Subject: CN=0dd950bb3f8a100800221690e4d4fa9e343cd3a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:66:66:8b:ac:11:d1:f1:5f:e7:ff:9f:c3:70:
bb:37:de:6e:b8:2d:db:f5:70:4f:6c:7a:46:b6:fd:
bb:29:2a:b8:08:24:1a:4a:d8:57:39:ce:e6:b9:b4:
5f:9a:44:64:a9:95:ef:d2:66:6f:87:98:aa:9c:ac:
5d:cb:ef:40:90:4a:47:e6:b5:74:20:54:ca:5b:96:
f7:36:84:7e:1e:e6:fe:22:46:25:af:b8:c2:0a:e0:
76:21:6b:34:88:70:1d:3c:86:67:6a:e5:5a:57:9a:
22:a5:86:93:7d:c7:df:f3:be:1d:6f:db:a6:56:30:
95:f2:7d:b8:d9:41:bf:68:f8:94:4a:dd:ab:c2:b0:
04:1e:6c:2c:fc:d8:02:f9:30:e9:7e:83:39:e9:64:
bf:e7:a4:82:17:5a:5a:21:49:b3:99:75:fb:c6:32:
37:5e:d7:dc:19:03:05:be:e1:4a:91:ef:a7:02:b1:
e4:ce:0a:13:3e:1d:54:64:82:68:07:3d:23:48:54:
d9:32:e2:80:03:99:c2:86:06:7b:de:9c:e5:18:bc:
f5:62:7f:9c:9c:8b:66:cd:58:95:ee:d6:1e:5d:af:
79:7a:46:26:e3:cd:e5:1a:12:f1:cc:68:ba:5e:6b:
e9:85:b8:60:1a:52:d8:68:80:17:81:ee:6d:48:72:
b1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D9:50:BB:3F:8A:10:08:00:22:16:90:E4:D4:FA:9E:34:3C:D3:A7
X509v3 Authority Key Identifier:
keyid:BA:5C:2A:31:3E:7D:D1:A4:49:E2:C1:FB:26:C5:AB:03:E5:26:81:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulwqMT590aRJ4sH7JsWrA-UmgY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f8ea98-4fbc-4f3e-b658-e0a7ae216cb7/1/ulwqMT590aRJ4sH7JsWrA-UmgY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f8ea98-4fbc-4f3e-b658-e0a7ae216cb7/1/ulwqMT590aRJ4sH7JsWrA-UmgY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ff:35:ed:79:07:1b:92:78:6c:1f:d1:12:53:32:36:17:c2:
d1:ad:42:9c:5f:2c:ba:51:b5:ab:a2:a2:74:9c:bf:4b:84:82:
e4:6e:9e:9e:d3:98:90:da:1b:bc:05:31:a5:1c:f8:1f:82:5b:
28:1e:9e:0d:ff:7f:a7:7d:5b:c7:df:08:a1:95:16:4c:45:82:
5e:4b:2a:35:6f:b1:29:0e:43:75:75:ea:ed:dd:5a:c5:09:ca:
6b:62:06:52:a2:3e:bc:93:28:80:5c:be:0d:4a:f7:06:bb:5e:
df:0e:d7:52:aa:40:ce:08:f7:c8:54:15:0e:9e:77:47:87:e1:
21:72:65:de:f4:af:ec:2e:33:12:97:c7:c7:b2:77:76:83:43:
f2:78:ca:5f:f2:48:10:82:25:e5:c2:a2:cd:33:8b:c8:25:ca:
da:8d:7c:b1:18:47:5f:1e:4a:a0:96:90:9d:7c:d2:d2:1f:b3:
dd:07:71:e3:4d:d2:35:31:fa:28:f1:03:08:13:f7:0e:11:85:
9a:20:87:e4:0a:de:73:a6:dd:9e:a5:ad:3b:2a:d1:67:ad:ea:
81:09:ef:14:74:aa:61:d6:d0:bf:69:43:74:32:4e:f1:1d:f6:
dc:58:be:37:c1:e1:75:59:78:05:2a:64:0d:88:e5:f7:13:f1:
8b:d7:ab:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:58:45 2025 by rpki-client