Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft
File: rUskfyJRG39TOwAtmfvsK1WbbC8.mft (raw, json)
Hash identifier: GJcEGoagLLXqegMRktImwMF9tG8qQVmG+Gfj2ZbJdMo=
Subject key identifier: 79:81:C6:DB:8F:B2:B4:53:5E:C6:9B:28:C2:D2:16:48:1A:F0:AD:76
Authority key identifier: AD:4B:24:7F:22:51:1B:7F:53:3B:00:2D:99:FB:EC:2B:55:9B:6C:2F
Certificate issuer: /CN=ad4b247f22511b7f533b002d99fbec2b559b6c2f
Certificate serial: 019848F7A9BF7985408D9823AA47AFB3023F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUskfyJRG39TOwAtmfvsK1WbbC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft
Manifest number: 048A
Signing time: Sat 26 Jul 2025 23:00:46 +0000
Manifest this update: Sat 26 Jul 2025 23:00:46 +0000
Manifest next update: Sun 27 Jul 2025 23:00:46 +0000
Files and hashes: 1: rUskfyJRG39TOwAtmfvsK1WbbC8.crl (hash: 1JEUHYTUIjn5p4vPcfs6bQGQ3LzrYMZ4L8R3APnfr1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUskfyJRG39TOwAtmfvsK1WbbC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:a9:bf:79:85:40:8d:98:23:aa:47:af:b3:02:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4b247f22511b7f533b002d99fbec2b559b6c2f
Validity
Not Before: Jul 26 23:00:46 2025 GMT
Not After : Jul 27 23:00:46 2025 GMT
Subject: CN=7981c6db8fb2b4535ec69b28c2d216481af0ad76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:db:85:2d:c3:af:3e:40:98:80:b4:04:8f:be:
04:f1:59:cf:5b:8b:ea:a7:10:13:45:34:29:e1:b0:
87:6f:b8:85:b8:66:10:93:f2:39:b2:37:83:ea:9d:
44:bc:56:18:67:ba:96:6f:d8:25:d1:1f:7e:7c:49:
6b:6d:05:77:98:99:9a:2b:e7:63:6c:f1:e1:c1:4b:
b7:59:0d:02:52:52:21:9f:20:7e:d6:4c:e4:ac:18:
47:3f:e5:db:37:ac:70:a4:f7:dc:65:2e:4e:9a:ad:
c5:f2:91:72:ab:3d:97:23:15:4a:35:30:aa:da:fb:
81:39:6c:c7:e4:91:2a:1e:4b:79:12:44:92:47:65:
66:07:95:76:b3:e3:da:20:a7:4e:0b:04:af:04:49:
f3:e1:05:30:f7:92:8b:1b:14:8d:7c:08:4e:da:28:
16:78:2b:e6:be:63:ef:26:34:00:78:c8:7d:e8:70:
b8:ee:77:a3:88:59:fe:02:8a:5f:66:ff:b2:9d:6b:
67:c9:f8:cf:96:a6:a7:8b:b5:56:21:cd:3c:6d:b5:
bc:38:2e:6d:05:20:39:79:c9:0e:8b:46:9f:ad:c8:
50:4f:74:63:a7:8a:0d:6b:e7:86:63:65:2d:4a:eb:
ec:1c:9f:2e:1f:ed:ce:20:2a:9f:d0:06:67:0b:19:
9e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:81:C6:DB:8F:B2:B4:53:5E:C6:9B:28:C2:D2:16:48:1A:F0:AD:76
X509v3 Authority Key Identifier:
keyid:AD:4B:24:7F:22:51:1B:7F:53:3B:00:2D:99:FB:EC:2B:55:9B:6C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUskfyJRG39TOwAtmfvsK1WbbC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:77:ce:49:f1:4f:a2:55:48:d5:ed:a6:18:70:88:1f:25:e7:
d4:50:c0:4b:db:68:12:ec:c6:02:92:ed:59:96:cc:98:2e:92:
c3:99:7c:f8:50:c8:9e:a1:f7:6d:c3:8b:4d:40:88:0d:85:ca:
ea:c3:76:fa:6f:17:49:23:d8:ef:43:87:dc:03:d2:44:db:43:
51:3d:1d:28:5c:01:1b:37:c9:a3:3a:0f:58:b3:03:31:b5:e1:
3c:60:9e:6a:f6:17:9d:77:16:ce:72:92:fd:24:b6:85:d4:7b:
d7:62:49:40:d5:e8:e9:75:d3:1b:1f:4c:79:92:d6:a1:72:21:
18:49:ce:7a:f0:95:0a:a5:e0:e2:f5:0c:1f:3c:4b:48:ca:06:
b7:37:33:f3:2e:a4:be:99:1f:cc:5d:59:3c:d0:26:1f:a9:7d:
be:31:41:fe:6b:42:53:5c:d7:54:46:91:7a:d8:44:9f:31:88:
a7:1d:f0:be:53:c8:75:55:d9:fd:6b:55:ed:36:ff:0f:1a:3e:
6d:2a:c7:e0:4f:44:90:47:0d:bb:72:e1:18:a8:f2:8f:37:02:
a9:20:87:1b:bc:57:81:c3:89:b6:73:ef:46:f5:d6:db:f5:d8:
23:3b:c0:f7:cb:96:96:60:93:d1:de:da:1f:82:7f:e2:ab:78:
fd:db:31:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:27:46 2025 by rpki-client