Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
File: u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft (raw, json)
Hash identifier: Hpik9qvVYtbQgcpmuT+HLjeNB79y+zr5dOQyKyj5y/U=
Subject key identifier: 53:49:15:10:A1:59:78:BE:57:35:4A:8F:B4:7C:6D:06:32:A5:B4:6F
Authority key identifier: BB:4B:19:38:66:8B:27:B0:52:C6:83:D1:E2:60:C0:CD:3D:56:87:5B
Certificate issuer: /CN=bb4b1938668b27b052c683d1e260c0cd3d56875b
Certificate serial: 019847ADEB378AEF6A1DB2EDA74FD5029072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
Manifest number: 0387
Signing time: Sat 26 Jul 2025 17:00:36 +0000
Manifest this update: Sat 26 Jul 2025 17:00:36 +0000
Manifest next update: Sun 27 Jul 2025 17:00:36 +0000
Files and hashes: 1: u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl (hash: wRAXKUu/D8SRRCRkrId0Ot3Knxfd52+0QvUcQoMQiiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:eb:37:8a:ef:6a:1d:b2:ed:a7:4f:d5:02:90:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4b1938668b27b052c683d1e260c0cd3d56875b
Validity
Not Before: Jul 26 17:00:36 2025 GMT
Not After : Jul 27 17:00:36 2025 GMT
Subject: CN=53491510a15978be57354a8fb47c6d0632a5b46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:de:91:c9:24:7f:8c:03:3e:4d:db:fd:14:a7:
e3:35:94:d9:0a:2f:0b:8c:47:23:ac:a3:df:20:17:
25:72:ca:9e:a8:ca:5f:7f:3a:41:f3:a7:80:51:6d:
4a:79:03:88:7c:a9:bc:d7:f9:e7:6f:85:4b:f9:38:
de:c6:5d:c6:2f:ea:4c:e9:b8:61:d0:b5:63:10:5d:
40:33:46:50:52:0a:57:a9:d4:f0:9a:84:c1:c8:82:
e8:f2:2f:5a:03:db:3d:17:1c:14:10:54:99:cf:10:
6a:9f:ad:e7:fd:05:b0:e3:e0:e0:dc:d8:fb:fc:04:
ab:ca:d6:9f:4b:e7:ad:b6:5e:4f:6e:44:d2:cf:02:
e5:03:82:1b:1c:a0:bc:70:a3:41:bc:72:19:20:f5:
50:55:3a:df:23:a0:23:c1:6f:08:c0:ed:58:12:60:
79:ad:3c:fc:f2:c2:8d:bf:27:44:b0:3b:e6:3f:76:
c6:98:eb:07:62:a7:4a:52:d2:e3:88:19:2d:92:0b:
c5:c6:8e:f9:82:ba:f3:f0:5d:64:be:e7:ef:2e:76:
f1:3e:c3:ba:1a:89:fc:cf:6b:4b:78:0d:dc:da:88:
d2:c7:b5:12:20:3e:56:9f:f9:04:19:0b:e6:ff:1c:
b1:3d:a9:b1:59:d5:c8:77:9b:92:76:2d:46:0a:5b:
0f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:49:15:10:A1:59:78:BE:57:35:4A:8F:B4:7C:6D:06:32:A5:B4:6F
X509v3 Authority Key Identifier:
keyid:BB:4B:19:38:66:8B:27:B0:52:C6:83:D1:E2:60:C0:CD:3D:56:87:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b3:e3:87:51:67:5b:c0:3b:51:47:d8:b1:07:2f:01:9a:74:
f4:dd:69:4d:40:43:ad:fa:74:62:cc:cf:f5:41:2e:55:19:27:
88:f3:e0:a1:ef:15:5e:a5:b1:c9:84:4f:88:5b:b0:f6:da:8f:
40:7b:94:c3:a5:62:73:dc:f3:66:42:c3:1e:f0:55:87:f1:52:
b3:09:80:c1:56:ba:ed:a7:87:9f:7a:2b:59:ab:7f:70:8c:2a:
36:cf:35:98:f7:c9:0d:d3:5e:24:85:d7:da:44:b5:03:83:78:
d7:1c:9f:e0:9f:db:94:f2:94:9d:71:a0:23:23:ce:3f:64:ae:
77:73:76:bd:0a:4e:af:d2:90:67:51:14:16:6a:ae:aa:a6:e9:
a1:e7:d1:5a:de:00:d0:75:9a:66:09:40:bd:89:59:3e:9c:fe:
c5:fc:72:c8:23:ce:d1:a2:f2:4b:5c:c7:0f:9e:70:3d:26:6b:
ed:62:53:8b:88:5d:90:e7:60:4c:5c:52:3f:cf:cd:35:95:80:
fb:17:f4:93:3e:f0:f7:bb:5b:ad:6b:82:94:b8:f2:3e:d7:7e:
ce:08:3e:d2:a5:21:45:03:51:1c:0d:ad:c6:b8:77:3a:7f:bb:
5a:c5:79:cb:0e:a7:03:b1:f7:7d:24:69:3b:09:77:68:b7:9b:
f6:02:e0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:59:14 2025 by rpki-client