Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
File: UOaW5uJbSSu34HyzKbtDVLERpoE.mft (raw, json)
Hash identifier: /VsMR65ipMsl50QiAysvxrgtA7P08l5RjjM3v6D56og=
Subject key identifier: CA:BF:C7:77:D8:92:23:D7:D7:C3:C6:BA:C0:AE:9E:B9:E9:0B:03:E3
Authority key identifier: 50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
Certificate issuer: /CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Certificate serial: 019847E4774034CDE777BC9A983A7AAB2413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
Manifest number: 08E0
Signing time: Sat 26 Jul 2025 18:00:11 +0000
Manifest this update: Sat 26 Jul 2025 18:00:11 +0000
Manifest next update: Sun 27 Jul 2025 18:00:11 +0000
Files and hashes: 1: UOaW5uJbSSu34HyzKbtDVLERpoE.crl (hash: xEQsiD/62bniFAwlk9EA6CW1TzAZH7DNx4GcCX6Kr0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:77:40:34:cd:e7:77:bc:9a:98:3a:7a:ab:24:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Validity
Not Before: Jul 26 18:00:11 2025 GMT
Not After : Jul 27 18:00:11 2025 GMT
Subject: CN=cabfc777d89223d7d7c3c6bac0ae9eb9e90b03e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:50:4c:7a:ae:7e:96:a3:5e:da:76:84:3d:ed:
c1:32:6e:8f:f6:93:03:da:99:c9:8b:99:a2:94:42:
8a:68:22:bb:16:d5:16:f0:d3:e1:7b:0b:80:76:81:
1f:25:62:4a:0a:3c:0f:38:e5:43:a4:7d:21:39:28:
a9:2d:48:d5:8d:9a:14:d8:5f:ef:23:69:11:3f:e4:
83:74:7d:95:0d:69:2f:86:86:24:a8:c0:e8:1e:1f:
09:87:ca:59:d8:ed:01:e7:b2:8f:21:c5:0e:4c:ab:
e2:9d:ba:17:83:80:1c:39:ef:d7:fc:d1:ef:db:bc:
e7:1b:78:c6:68:7f:f0:4d:9e:c9:fa:52:a7:20:01:
52:e5:b4:34:1c:8c:55:26:8b:a7:21:bf:4d:62:8e:
80:fa:8c:d2:13:f6:4a:a0:e5:37:f5:2f:43:3f:2a:
e9:79:1a:e2:97:f9:f5:b7:73:87:4e:3b:c5:67:93:
36:dc:72:de:2a:19:6d:a3:5a:01:e7:72:dc:b1:2b:
56:12:45:d1:1a:a2:c9:f2:b2:e4:83:0a:bc:27:ba:
b2:21:ae:13:0f:a0:bd:16:0b:11:30:89:6f:2d:e0:
d1:5b:06:b7:bc:2f:3d:6c:35:46:5c:51:af:fb:00:
85:97:ee:38:36:a4:7f:a0:88:99:65:d5:e9:e3:48:
aa:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BF:C7:77:D8:92:23:D7:D7:C3:C6:BA:C0:AE:9E:B9:E9:0B:03:E3
X509v3 Authority Key Identifier:
keyid:50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e9:2e:a8:1f:a7:e0:4b:41:e9:bc:cd:98:01:d7:25:5f:07:
04:cc:c3:21:26:a6:b9:ea:3b:51:69:15:19:cc:16:ab:7c:1d:
9e:63:4e:82:4f:1a:d2:fb:85:04:1c:a7:2c:d1:ec:16:18:92:
a9:79:7b:62:f2:12:71:5c:f1:f9:a1:46:bc:e2:06:16:74:d7:
3c:9c:f3:cc:9c:1b:99:45:12:c9:3d:5c:4a:9a:c3:14:ce:b3:
9a:08:e1:28:d4:d9:ad:c8:d6:4e:f1:e8:08:51:77:cc:3d:aa:
f8:7d:4b:21:07:1e:3c:59:95:29:6b:4d:9e:a3:52:9d:85:03:
4d:2f:7c:7b:43:6b:81:08:c1:92:c9:c5:50:ce:dd:10:7a:6c:
a5:c1:62:a7:28:ad:c3:3a:21:2c:df:6a:9d:f0:25:0e:63:f3:
11:b6:b9:24:28:b7:00:c3:20:09:5f:d4:db:a4:6e:2a:62:13:
f2:d6:ab:a2:ad:ef:92:db:c0:2b:8e:5f:31:ec:35:bb:14:db:
ee:32:fd:ae:32:45:52:40:49:0b:83:1a:44:b7:67:50:ef:27:
36:6a:96:8b:ba:a6:22:d0:13:5a:13:7e:5d:6c:f9:dd:76:b4:
17:54:98:34:07:f2:33:fd:40:95:9c:bf:ab:c5:63:a9:a7:00:
e6:75:65:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:30:14 2025 by rpki-client