Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
File: ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft (raw, json)
Hash identifier: T+iY4C6KjZgqIbCz69kCWgffgYhmdvB4sJMb6ZCKMPQ=
Subject key identifier: 22:D4:AD:6F:4C:0C:45:1D:7B:2C:B1:35:4D:84:6B:DC:81:BB:8B:7F
Authority key identifier: BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E
Certificate issuer: /CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e
Certificate serial: 019921B05978CCF90E43AE9D5611773DF8E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
Manifest number: 102E
Signing time: Sun 07 Sep 2025 01:00:29 +0000
Manifest this update: Sun 07 Sep 2025 01:00:29 +0000
Manifest next update: Mon 08 Sep 2025 01:00:29 +0000
Files and hashes: 1: ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl (hash: bWq3g3jo+ndqqBPgrdejn4HqysbdMqVKH535QA/Gpoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:59:78:cc:f9:0e:43:ae:9d:56:11:77:3d:f8:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e
Validity
Not Before: Sep 7 01:00:29 2025 GMT
Not After : Sep 8 01:00:29 2025 GMT
Subject: CN=22d4ad6f4c0c451d7b2cb1354d846bdc81bb8b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:a7:96:b6:d5:75:a8:e3:e1:fc:8d:d9:6c:
d4:77:5f:46:9c:c8:35:fa:0d:d0:57:82:4a:6e:62:
af:59:54:71:81:e4:69:56:09:47:ad:e0:db:5e:79:
74:f8:6a:07:33:51:e7:c6:02:9d:85:d8:db:2f:6a:
39:5c:f0:e6:b4:f8:18:1c:69:36:35:24:1c:55:0e:
3c:58:af:67:3a:9d:5e:93:af:fe:01:dd:0e:0e:0e:
ea:95:8a:36:52:07:56:bf:1b:1a:20:b7:d6:dd:01:
69:34:cc:7a:24:e7:e3:44:11:7d:ef:82:c0:b9:81:
4e:31:b7:54:4c:84:62:6b:4e:3f:54:4a:c6:83:0a:
f2:c2:34:9e:11:bb:57:f1:a6:1a:a0:c6:59:f5:ee:
5f:0c:6e:65:49:98:80:bc:95:cd:17:b4:e8:de:32:
fc:0e:09:f6:82:01:2e:db:54:ed:25:de:a5:39:67:
e5:a9:fb:e7:14:1d:40:1a:34:6b:85:b6:7a:6e:0d:
8f:c2:b6:f9:24:5d:0f:51:a8:8d:68:d4:e7:7f:75:
a9:dd:35:0e:94:7f:c6:75:06:83:f3:8d:6c:78:2f:
55:e1:8c:0b:c1:25:80:ab:8b:e2:ef:ab:77:b5:df:
06:42:4e:4a:5d:c6:25:4f:41:23:4c:06:a1:10:bd:
4d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D4:AD:6F:4C:0C:45:1D:7B:2C:B1:35:4D:84:6B:DC:81:BB:8B:7F
X509v3 Authority Key Identifier:
keyid:BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:65:95:11:42:92:e6:e8:ac:bc:a0:0e:b0:27:89:c2:b6:44:
20:55:90:f0:70:32:8e:9d:47:11:bf:0d:9a:33:46:26:3a:dd:
16:02:e9:11:92:78:0d:41:09:b8:da:f4:5c:d6:32:50:8a:3c:
0b:91:ff:35:ea:29:0d:cf:3e:0b:a6:36:98:57:a7:f7:b4:9f:
90:93:ac:72:a9:31:36:4d:4e:c6:00:09:08:05:e2:f0:4f:db:
a7:93:3a:07:b1:51:af:4b:6c:62:3c:3f:f7:35:86:dc:81:35:
72:c7:78:f2:8f:31:d7:72:cc:17:2d:c7:68:58:92:a6:53:4c:
dd:39:42:e5:92:e9:ec:6d:42:2c:a1:be:61:32:2a:26:d2:05:
20:03:46:ef:23:3d:78:c6:a7:39:84:59:df:a3:d3:74:46:31:
33:eb:d4:d8:5c:7f:1c:59:6a:8a:a0:17:36:36:bf:1e:49:41:
69:28:60:71:83:e9:64:7a:90:11:17:69:2a:98:89:ab:be:cf:
45:7f:97:01:67:9a:3c:be:a8:83:14:b2:0b:e1:15:0b:5f:a6:
fa:e6:97:69:9d:b0:9a:91:13:5e:b2:a0:f9:f7:58:97:35:8f:
49:f8:d4:61:d1:52:4f:16:a4:11:88:60:92:34:b2:ad:cf:59:
b5:cd:39:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:14 2025 by rpki-client