Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft
File: UnFDjiPOkl5mwlmYEiG1toOi8I8.mft (raw, json)
Hash identifier: ARGtlok2Le+qqQziegzpz2IkhjTEHxk2wYVxRYyyAFA=
Subject key identifier: E8:2C:09:73:33:8E:BD:A9:EF:7B:D8:84:0D:52:50:48:0D:82:DA:A5
Authority key identifier: 52:71:43:8E:23:CE:92:5E:66:C2:59:98:12:21:B5:B6:83:A2:F0:8F
Certificate issuer: /CN=5271438e23ce925e66c259981221b5b683a2f08f
Certificate serial: 019921B24AA7ED65ACAC003283FB90521D13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnFDjiPOkl5mwlmYEiG1toOi8I8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft
Manifest number: 0BD5
Signing time: Sun 07 Sep 2025 01:02:36 +0000
Manifest this update: Sun 07 Sep 2025 01:02:36 +0000
Manifest next update: Mon 08 Sep 2025 01:02:36 +0000
Files and hashes: 1: UnFDjiPOkl5mwlmYEiG1toOi8I8.crl (hash: /KrRqmOX2JXejY0Dc+M52np+Alw3egx+Y+PTP3Sonnk=)
2: b23Ppzc40t1gh2jcC0tEEtTjq-Y.roa (hash: PLO31FJDvhLM1rCGRuVKcX7pZ7U9Xsy2KrFDiy0XrKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UnFDjiPOkl5mwlmYEiG1toOi8I8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:4a:a7:ed:65:ac:ac:00:32:83:fb:90:52:1d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5271438e23ce925e66c259981221b5b683a2f08f
Validity
Not Before: Sep 7 01:02:36 2025 GMT
Not After : Sep 8 01:02:36 2025 GMT
Subject: CN=e82c0973338ebda9ef7bd8840d5250480d82daa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:fb:58:54:57:b7:06:ad:a1:6d:ea:15:fa:
e7:fe:a5:22:ad:a4:af:24:4e:d7:97:7b:b7:52:a5:
b1:69:f4:ff:9a:32:0b:7c:02:21:47:64:72:2c:40:
4b:c9:34:f0:5d:3e:3f:89:af:6a:ad:75:ad:92:73:
a6:38:50:46:60:8d:55:eb:d3:70:7d:83:67:6a:26:
c5:13:df:27:13:c3:47:77:0a:59:db:88:78:00:c7:
60:1d:57:7b:de:2f:94:ff:ee:c1:30:c8:9f:17:9f:
21:19:88:70:c3:3b:d9:fd:4f:5a:3c:62:4d:77:64:
f5:09:67:af:e7:84:2e:3f:63:e6:6c:ff:da:60:b7:
d0:b1:66:e8:0e:8c:64:73:45:a0:43:6a:62:54:00:
60:ef:0a:1f:ff:71:a3:55:c3:54:16:d3:f6:c1:0c:
b7:e6:c9:2b:7c:b9:44:c4:35:19:cd:27:13:2b:5a:
f7:22:33:d0:29:10:1f:aa:5f:7a:4c:89:57:f1:fc:
21:f8:ab:e8:73:2c:e1:46:ad:ce:c6:56:d6:be:81:
0c:21:d6:b6:41:73:88:16:d9:b5:d6:40:12:65:32:
ad:c9:4e:47:42:37:3d:50:dd:64:be:c7:0e:4e:9c:
d2:e0:ad:91:9f:a6:87:a5:0c:8d:9a:38:1d:f1:e3:
df:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2C:09:73:33:8E:BD:A9:EF:7B:D8:84:0D:52:50:48:0D:82:DA:A5
X509v3 Authority Key Identifier:
keyid:52:71:43:8E:23:CE:92:5E:66:C2:59:98:12:21:B5:B6:83:A2:F0:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnFDjiPOkl5mwlmYEiG1toOi8I8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:2f:a5:05:9a:dd:9c:5b:d7:4d:a7:32:4d:42:a2:35:25:00:
ca:2c:4a:7f:d7:0e:79:af:0a:ad:93:90:8f:69:11:01:b1:a7:
ba:d0:be:c9:91:86:d8:26:21:62:0f:49:90:cd:68:9f:1e:76:
d5:00:88:32:ad:0a:e5:87:31:d1:08:6b:be:2e:fc:bd:24:92:
27:62:e1:47:fd:ae:d2:9f:85:07:9a:da:19:a8:ca:9e:72:76:
1f:ce:45:98:7d:8a:a4:9d:4e:c7:1c:41:2c:ae:63:29:72:5e:
85:68:fe:1d:89:c2:4b:87:22:8e:75:66:d3:e5:d4:24:cc:b7:
c2:d6:82:01:24:bd:57:5d:5c:02:a3:a5:08:66:4e:46:b7:ce:
e8:22:f5:83:a5:9d:e2:96:a1:f7:80:91:44:cc:9c:9b:ad:10:
03:34:bb:f1:32:42:c3:41:3d:09:d2:b5:04:2c:94:f4:00:68:
49:0d:5f:e9:8d:7d:f0:0d:6d:2e:bc:f7:9d:6b:05:38:69:24:
21:6b:12:12:d8:e9:b6:21:60:4a:a1:5d:81:5f:c0:67:81:6f:
e4:1f:7d:93:cb:3b:6a:d2:83:a8:70:e3:52:e3:4e:c4:5d:c6:
78:34:90:ff:2e:c0:ba:43:9e:68:10:77:10:d5:f7:50:fc:86:
ff:4f:7e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:34 2025 by rpki-client