Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
File: u2MubMSrZyETUbUpP4Fdfl8JOr0.mft (raw, json)
Hash identifier: 5JWB6Gp9rJQ482LXRUdRVhg44bLiI0vkfqQXDtgf6sA=
Subject key identifier: B5:5C:D3:C8:07:2D:07:4E:B4:65:F2:E7:38:E9:5D:A3:40:F0:D0:03
Authority key identifier: BB:63:2E:6C:C4:AB:67:21:13:51:B5:29:3F:81:5D:7E:5F:09:3A:BD
Certificate issuer: /CN=bb632e6cc4ab67211351b5293f815d7e5f093abd
Certificate serial: 019848F76E89C9C2FE509A994B6488435E5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2MubMSrZyETUbUpP4Fdfl8JOr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
Manifest number: 02EF
Signing time: Sat 26 Jul 2025 23:00:31 +0000
Manifest this update: Sat 26 Jul 2025 23:00:31 +0000
Manifest next update: Sun 27 Jul 2025 23:00:31 +0000
Files and hashes: 1: u2MubMSrZyETUbUpP4Fdfl8JOr0.crl (hash: W8BAZ8A21NTfLGnYku4xy4D82/UxRhKWo6rdsJWM3Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2MubMSrZyETUbUpP4Fdfl8JOr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:6e:89:c9:c2:fe:50:9a:99:4b:64:88:43:5e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb632e6cc4ab67211351b5293f815d7e5f093abd
Validity
Not Before: Jul 26 23:00:31 2025 GMT
Not After : Jul 27 23:00:31 2025 GMT
Subject: CN=b55cd3c8072d074eb465f2e738e95da340f0d003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5d:c7:45:8f:96:f8:f0:00:a0:41:c5:e1:7b:
dc:4a:01:77:bc:c0:a1:f1:4a:d8:3e:c1:08:bb:5c:
a0:f2:85:a5:87:ae:a3:04:ad:ec:ee:0f:cc:0e:1c:
f1:0e:33:b4:f0:e7:62:9d:cb:36:05:0f:f6:f2:82:
b4:a9:7e:f7:ac:39:05:86:2b:17:b8:26:4d:28:08:
6f:6c:2d:51:fa:c2:a5:f3:e4:69:5c:f6:bc:9c:95:
1f:87:41:72:e8:2c:d6:6a:fe:8b:74:00:d2:69:3d:
f8:30:86:bf:b3:e0:26:52:66:4b:10:d9:a0:6e:bc:
e6:a4:3f:1b:5a:e0:71:df:22:a3:e8:8b:ec:56:b4:
ea:21:6c:b6:64:0b:02:ff:1e:37:2a:c7:ce:d4:38:
e9:d0:9c:12:6d:aa:f3:0d:1e:d1:73:b6:53:c7:a7:
d8:27:43:47:26:b1:9f:12:4a:8f:bb:0e:27:07:96:
95:ba:54:3d:47:0c:a8:6d:ee:53:f5:07:a6:29:5e:
b2:e6:7a:54:e0:9a:c1:a5:92:2a:91:97:05:75:6b:
4f:11:c7:09:73:28:4d:48:ef:41:46:0c:70:bf:b4:
a7:d7:9d:55:45:bf:57:0a:54:6b:91:bb:41:02:14:
af:c1:ab:78:5a:03:7b:10:45:a5:c8:75:ec:24:51:
20:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5C:D3:C8:07:2D:07:4E:B4:65:F2:E7:38:E9:5D:A3:40:F0:D0:03
X509v3 Authority Key Identifier:
keyid:BB:63:2E:6C:C4:AB:67:21:13:51:B5:29:3F:81:5D:7E:5F:09:3A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2MubMSrZyETUbUpP4Fdfl8JOr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:8e:b2:f8:62:7a:17:cc:39:cb:ef:51:ae:a0:b3:10:15:c4:
7b:b3:23:32:44:c4:d3:58:0e:04:a7:8f:ea:4f:53:05:9d:86:
f7:11:a9:95:28:54:ec:2c:3b:d6:84:e7:a8:a7:47:1c:6c:80:
85:ca:bf:14:db:c2:66:3a:d7:e0:ef:11:f5:5c:a8:90:5f:06:
c7:dd:4d:c7:98:5b:3b:18:54:8c:b4:61:8f:7a:c6:f1:03:c2:
ff:30:60:68:81:8d:d4:07:52:68:6d:63:e0:8a:7d:cc:aa:53:
04:da:83:4a:a8:37:1b:5d:cd:ab:af:e0:42:cd:78:d9:8e:71:
c7:73:90:84:5d:27:2a:68:0a:61:4d:ba:9b:d0:bb:ea:4f:6e:
a7:da:58:9c:7e:c5:af:24:90:99:03:87:8e:8f:33:a7:72:12:
b3:32:d5:b1:25:21:d0:58:92:89:04:0d:aa:c0:a1:df:a8:ea:
7e:fc:8d:2c:ce:a0:7e:58:cd:33:49:6c:36:29:22:99:77:03:
1e:a9:cc:39:e1:de:28:b4:5a:eb:01:ac:5b:c6:9b:58:c7:18:
93:5e:a4:77:80:c4:bd:fb:3f:01:20:0b:33:92:d9:6e:97:2d:
f3:ff:ce:55:3e:22:42:49:59:86:59:bf:8e:53:4b:41:b5:11:
0a:61:56:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:23:48 2025 by rpki-client