Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
File: uji5p2P2XAJ6o92th8GI2nikvZc.mft (raw, json)
Hash identifier: Zre5a+8FYoL564ZMFU7RW90g7bUdM0aehmGa9XZvxR0=
Subject key identifier: 75:14:D2:DE:4E:19:3B:87:DF:DB:9C:28:9F:7B:77:DE:A4:89:D8:D4
Authority key identifier: BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97
Certificate issuer: /CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97
Certificate serial: 019845F6A3351F658AA0978D39C80D09BDA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
Manifest number: 15FC
Signing time: Sat 26 Jul 2025 09:00:48 +0000
Manifest this update: Sat 26 Jul 2025 09:00:48 +0000
Manifest next update: Sun 27 Jul 2025 09:00:48 +0000
Files and hashes: 1: uji5p2P2XAJ6o92th8GI2nikvZc.crl (hash: 7hxS0sseDWdq/jJ5dUSpB8pSDwDatbFOucytjslnRNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:a3:35:1f:65:8a:a0:97:8d:39:c8:0d:09:bd:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97
Validity
Not Before: Jul 26 09:00:48 2025 GMT
Not After : Jul 27 09:00:48 2025 GMT
Subject: CN=7514d2de4e193b87dfdb9c289f7b77dea489d8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a7:21:80:d5:8e:ac:c7:7c:13:6f:9d:9f:ed:
7b:fa:1b:3c:3d:01:7a:a6:db:a5:b0:be:89:c6:35:
67:99:4d:e7:8a:80:19:07:57:2a:0d:ba:2e:d8:9b:
f6:3a:08:19:15:a0:95:d0:8c:4d:a6:41:93:93:df:
90:5d:3f:8f:aa:af:68:03:df:93:99:76:43:c7:c7:
bc:a7:24:a7:72:51:02:ec:16:dc:ac:93:74:f8:37:
39:79:85:1d:14:ed:c2:49:a5:6b:ae:a2:70:b6:0f:
21:16:2d:bf:b6:1e:16:62:cc:2a:0f:41:d1:8c:0b:
55:36:d6:c7:90:55:23:b6:3e:09:ae:80:4b:8a:a1:
4f:92:8e:35:73:23:6b:c7:bc:e9:61:a5:e7:78:9e:
5f:84:1d:8b:3f:67:f5:4e:a4:9a:a7:f9:b2:01:37:
3a:f0:fa:40:ea:01:f4:8c:da:2f:2c:03:f0:40:57:
2f:c7:6a:1b:05:56:c6:06:cb:f1:eb:93:9b:24:d3:
bd:c0:d0:29:4d:b1:28:cb:41:37:d5:c7:d8:58:76:
cb:0c:87:b9:e4:05:f5:38:ed:f6:49:6e:91:1f:e4:
1d:e8:2e:6b:98:71:bc:a9:6a:07:43:54:6e:44:df:
e2:63:d8:6e:7e:3d:af:43:f7:ec:7d:21:dc:c1:1e:
22:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:14:D2:DE:4E:19:3B:87:DF:DB:9C:28:9F:7B:77:DE:A4:89:D8:D4
X509v3 Authority Key Identifier:
keyid:BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:27:f3:74:a0:ee:f1:a4:4c:af:40:88:94:49:38:e4:ea:b9:
5f:4d:33:9c:d3:95:22:ef:99:3f:d8:c3:db:dc:53:2e:d9:6b:
de:e9:87:ac:6c:98:68:49:43:6b:5e:97:47:7a:fb:a3:80:29:
f6:57:98:6a:eb:03:b4:db:27:fe:54:2a:66:1a:ed:a4:17:9f:
91:be:9a:ce:10:14:c8:83:dd:14:83:a0:19:1f:e7:ee:1d:94:
1e:49:9b:a2:ad:72:0e:91:c2:dc:e0:de:e4:b8:2f:b0:a2:2b:
a5:33:5e:3e:f4:33:e4:e1:6e:ff:0d:27:70:b9:88:4e:58:33:
34:18:78:b6:3f:eb:fb:9b:22:c5:8a:6c:57:30:d2:80:9f:b4:
58:27:22:70:39:34:27:05:57:33:86:90:3c:5c:dc:d0:ff:8e:
97:bf:0c:f9:36:9f:c4:d7:3f:b9:ca:c0:d0:91:31:ce:bd:79:
22:4c:11:00:5c:85:a3:45:a5:74:0b:39:21:64:d3:98:a2:eb:
87:17:dc:e2:25:46:76:8e:0c:23:59:6d:56:4d:c3:d6:8e:f9:
1c:8f:62:b3:82:3c:79:7f:86:aa:97:05:19:c6:81:4d:00:25:
e2:97:a0:91:a9:f3:e2:a5:08:85:d3:35:e2:4e:c7:d8:b8:42:
99:22:6f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:55:10 2025 by rpki-client