Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft
File: U5UGCcqN1_bG-jzsrHeUIexsAQA.mft (raw, json)
Hash identifier: zASB002KRf0lNvSK/mG2W4S6o8PenM+stn59muxwfzQ=
Subject key identifier: 32:45:7B:05:D8:EE:D2:C1:C4:E6:7E:B1:88:EC:9E:10:A1:32:B3:2B
Authority key identifier: 53:95:06:09:CA:8D:D7:F6:C6:FA:3C:EC:AC:77:94:21:EC:6C:01:00
Certificate issuer: /CN=53950609ca8dd7f6c6fa3cecac779421ec6c0100
Certificate serial: 019848F763183C0F1CE7AB38B93A867C7E9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5UGCcqN1_bG-jzsrHeUIexsAQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft
Manifest number: 04C2
Signing time: Sat 26 Jul 2025 23:00:29 +0000
Manifest this update: Sat 26 Jul 2025 23:00:29 +0000
Manifest next update: Sun 27 Jul 2025 23:00:29 +0000
Files and hashes: 1: U5UGCcqN1_bG-jzsrHeUIexsAQA.crl (hash: Hvoixbssr16VJva4a7nV05Fu4ahmjw6Uepc1GqmHGuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5UGCcqN1_bG-jzsrHeUIexsAQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:63:18:3c:0f:1c:e7:ab:38:b9:3a:86:7c:7e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53950609ca8dd7f6c6fa3cecac779421ec6c0100
Validity
Not Before: Jul 26 23:00:29 2025 GMT
Not After : Jul 27 23:00:29 2025 GMT
Subject: CN=32457b05d8eed2c1c4e67eb188ec9e10a132b32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4b:5d:b3:8c:af:36:4d:54:63:48:63:8b:2c:
c0:53:6e:66:86:64:b1:63:36:90:f4:2d:1a:21:3b:
87:49:6a:0a:66:c9:bf:6b:9a:bc:ff:1b:62:22:db:
16:ff:c5:b0:7a:b5:66:8a:9d:b8:35:c3:04:d3:b4:
6c:1e:60:e8:ab:aa:a4:23:11:da:28:ba:f2:9a:c6:
f1:21:c4:fc:75:31:de:d6:b9:cf:92:7a:93:a7:45:
a8:97:04:4a:e3:9e:b5:a9:f5:08:1e:9f:dd:e1:d1:
81:39:3a:fd:58:ee:bb:66:c5:ac:53:96:0f:be:b3:
aa:41:8c:83:01:8b:7e:45:2e:95:04:b1:09:0c:6e:
b1:d9:ae:37:bc:d5:10:65:0e:c2:36:29:50:55:a3:
f2:ac:7d:ab:38:d0:a1:ab:4f:e8:66:59:1d:b6:68:
7d:68:87:52:1e:85:d1:8e:02:f4:dc:ff:df:2c:28:
ab:77:ec:e7:c9:0f:6a:e7:d6:5f:9e:f6:0a:68:39:
37:71:e7:b3:30:8f:e3:e4:9f:09:94:e6:ac:67:75:
86:f8:63:f1:ea:ed:ee:f0:43:73:cd:6b:82:8a:4a:
99:76:c2:3d:d6:6f:7e:df:e6:01:84:a8:de:18:d9:
e8:d9:a6:ad:0e:51:83:4b:cb:eb:18:e9:fa:df:73:
b1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:45:7B:05:D8:EE:D2:C1:C4:E6:7E:B1:88:EC:9E:10:A1:32:B3:2B
X509v3 Authority Key Identifier:
keyid:53:95:06:09:CA:8D:D7:F6:C6:FA:3C:EC:AC:77:94:21:EC:6C:01:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5UGCcqN1_bG-jzsrHeUIexsAQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:cc:69:ab:26:de:c2:10:60:81:df:9a:fd:69:2c:fd:93:97:
11:45:ac:41:15:5c:e1:bd:dc:4f:a2:32:9d:c6:53:0f:29:d3:
ee:38:da:98:68:90:9b:e7:24:db:7c:59:e9:9f:1e:06:af:03:
3e:ca:de:4f:f9:b3:ef:53:af:34:08:d6:71:d6:78:b8:74:34:
ca:cc:bf:27:4f:9f:89:3b:38:55:54:ef:fd:cd:05:3b:95:3c:
57:11:8c:4b:93:48:35:a6:69:2d:ed:66:20:a7:7b:a9:14:b6:
fd:5e:ca:3f:52:c7:c7:15:4c:03:fb:88:41:ac:c0:ad:bc:f5:
c7:33:a2:2b:8f:b3:27:8c:72:8d:c8:f5:a6:f3:98:ac:c0:f1:
04:9d:60:d8:5a:c8:48:ec:e6:b9:b2:47:35:cc:f7:74:a2:13:
12:94:7b:85:4f:a2:c2:3c:08:31:d5:87:d9:dc:ba:c8:be:69:
18:70:a7:7f:9b:34:bf:d5:d3:36:34:be:05:78:31:0a:9f:a9:
31:dc:b5:fc:fd:27:bb:c2:e2:c7:08:28:20:f7:34:dc:35:40:
a2:13:2b:93:f6:31:2d:88:8b:81:66:ab:ff:2d:2b:7e:37:b3:
19:ca:31:59:89:db:a4:fc:0e:2b:f3:86:43:2e:18:74:76:9f:
8d:77:62:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:26:18 2025 by rpki-client