
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/16453d-28d0-46dd-8577-bdd57751c673/1/UNorr8N6OYjdKUyROuUiDgONuWQ.mft
File: UNorr8N6OYjdKUyROuUiDgONuWQ.mft (raw, json)
Hash identifier: tBsxonWQekhuJnSTyh04q6I617z5+L8JxLJTnFgwT3E=
Subject key identifier: 6A:FA:B3:5A:4D:01:0F:C5:5F:26:96:50:B6:29:C1:96:4A:34:B7:63
Authority key identifier: 50:DA:2B:AF:C3:7A:39:88:DD:29:4C:91:3A:E5:22:0E:03:8D:B9:64
Certificate issuer: /CN=50da2bafc37a3988dd294c913ae5220e038db964
Certificate serial: 01991764A128DA3DC35E521A6DAF5C00600F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNorr8N6OYjdKUyROuUiDgONuWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/16453d-28d0-46dd-8577-bdd57751c673/1/UNorr8N6OYjdKUyROuUiDgONuWQ.mft
Manifest number: 15B8
Signing time: Fri 05 Sep 2025 01:01:34 +0000
Manifest this update: Fri 05 Sep 2025 01:01:34 +0000
Manifest next update: Sat 06 Sep 2025 01:01:34 +0000
Files and hashes: 1: UNorr8N6OYjdKUyROuUiDgONuWQ.crl (hash: bgyUB/ca+h7BjBasPiOMA7ms3aFbg4TprkaK8N+bmSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/16453d-28d0-46dd-8577-bdd57751c673/1/UNorr8N6OYjdKUyROuUiDgONuWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/16453d-28d0-46dd-8577-bdd57751c673/1/UNorr8N6OYjdKUyROuUiDgONuWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNorr8N6OYjdKUyROuUiDgONuWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:64:a1:28:da:3d:c3:5e:52:1a:6d:af:5c:00:60:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50da2bafc37a3988dd294c913ae5220e038db964
Validity
Not Before: Sep 5 01:01:34 2025 GMT
Not After : Sep 6 01:01:34 2025 GMT
Subject: CN=6afab35a4d010fc55f269650b629c1964a34b763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ce:23:1c:0f:95:ee:75:84:9b:12:13:d3:57:
2b:af:c2:1a:ad:fa:a5:1c:64:30:48:75:34:9e:23:
c8:53:a0:32:62:b9:3e:b5:20:65:be:1b:6a:69:45:
49:2d:ef:d2:b1:92:0a:44:da:c8:50:d3:bf:0e:f5:
b2:c2:0b:db:d9:84:23:23:a9:aa:d8:ba:6f:0f:06:
63:58:34:8e:54:93:73:3a:f2:90:01:74:b0:02:7a:
d5:07:1f:c5:0e:46:9f:de:88:8f:41:e4:1c:0b:a5:
4c:81:9d:82:f0:60:1e:e2:76:8d:db:03:5c:a9:52:
4a:8c:23:60:c0:06:ff:ad:1d:f9:d3:37:b5:70:5d:
4e:25:72:08:d4:1d:a3:e6:31:fb:f3:4e:42:f0:d3:
6c:f6:e7:e3:be:f8:d8:ec:ac:54:3d:54:80:0d:b4:
bc:e3:ab:b6:13:ac:17:f6:ee:d3:ea:7e:57:75:ca:
7f:88:52:49:d0:28:9f:31:29:27:a9:90:82:82:b1:
cd:e6:a7:c2:b7:f1:13:a4:e4:7d:02:9c:19:30:df:
8d:7d:89:6d:0f:66:07:62:f1:08:09:19:36:88:cf:
1f:a4:2c:20:dd:d2:65:5a:65:a4:a2:e0:0b:06:0f:
fd:bc:58:2c:06:50:b9:7e:32:50:6f:3c:e5:a1:7c:
c1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FA:B3:5A:4D:01:0F:C5:5F:26:96:50:B6:29:C1:96:4A:34:B7:63
X509v3 Authority Key Identifier:
keyid:50:DA:2B:AF:C3:7A:39:88:DD:29:4C:91:3A:E5:22:0E:03:8D:B9:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNorr8N6OYjdKUyROuUiDgONuWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/16453d-28d0-46dd-8577-bdd57751c673/1/UNorr8N6OYjdKUyROuUiDgONuWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/16453d-28d0-46dd-8577-bdd57751c673/1/UNorr8N6OYjdKUyROuUiDgONuWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:fc:d8:39:5b:1e:60:98:1b:3d:dd:61:75:45:90:ab:4c:10:
81:1e:6a:17:fa:7a:cd:13:2e:91:ec:cc:4d:1b:b8:d5:ca:bb:
2a:54:84:40:38:3a:af:41:78:2d:71:3d:cd:f3:6c:9d:4c:81:
b1:1f:5e:8c:79:3b:c7:ac:e6:23:85:fe:25:35:c6:55:a1:f7:
35:d2:6b:78:10:3e:29:a5:69:a6:d0:0c:60:10:8f:32:0b:a5:
ed:e0:62:e6:25:a7:40:52:ea:a0:5f:66:4b:09:d1:6e:33:b8:
7c:7f:14:d0:1d:e3:6e:d4:82:77:98:18:f7:92:22:01:a0:78:
12:5c:66:f9:ae:7b:4d:c8:68:0f:2d:59:29:ec:b1:52:89:35:
ac:d8:4f:1e:a4:1e:6a:e7:73:32:78:67:0b:18:b0:96:80:97:
03:ca:65:e8:65:c2:df:0a:7d:31:ea:ab:bf:95:d7:2d:78:d0:
31:17:d2:35:8c:72:59:bd:89:57:4b:a6:df:e9:fa:01:31:df:
3a:40:3c:fc:45:aa:9d:c1:b2:b7:eb:27:c8:15:ff:61:a4:c2:
1b:45:57:63:c8:34:4f:7e:5e:2f:86:30:77:dc:90:62:f9:16:
63:0c:c4:45:60:fd:67:26:69:c0:88:7c:ac:c8:95:97:6f:a1:
67:ee:45:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:34:52 2025 by rpki-client