Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft
File: 1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft (raw, json)
Hash identifier: nDdmDsTHRQokmyHACGUp2oTJ9z0AcYsez4Ofc+qfdVk=
Subject key identifier: DF:EE:C0:BD:D8:BB:81:60:B2:E2:C7:70:10:B0:41:AC:45:42:EB:C9
Authority key identifier: FA:EB:F1:07:F0:5F:BA:9D:4E:4C:A6:1A:EA:0C:17:72:51:9F:5E:38
Certificate issuer: /CN=faebf107f05fba9d4e4ca61aea0c1772519f5e38
Certificate serial: 019922C3873F53798633A1D2BD3B5CBF2F3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uvxB_Bfup1OTKYa6gwXclGfXjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft
Manifest number: 34
Signing time: Sun 07 Sep 2025 06:01:03 +0000
Manifest this update: Sun 07 Sep 2025 06:01:03 +0000
Manifest next update: Mon 08 Sep 2025 06:01:03 +0000
Files and hashes: 1: 1-uvxB_Bfup1OTKYa6gwXclGfXjg.crl (hash: Ge+ZeI6LRkvbHP2qFW1aoDetjfBBz/I9kA7kzaFAKqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uvxB_Bfup1OTKYa6gwXclGfXjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:87:3f:53:79:86:33:a1:d2:bd:3b:5c:bf:2f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faebf107f05fba9d4e4ca61aea0c1772519f5e38
Validity
Not Before: Sep 7 06:01:03 2025 GMT
Not After : Sep 8 06:01:03 2025 GMT
Subject: CN=dfeec0bdd8bb8160b2e2c77010b041ac4542ebc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6a:1a:55:cf:45:a8:f0:d4:c3:c0:ae:d3:33:
56:3a:66:47:cb:37:58:17:31:c0:82:79:b6:95:5a:
82:32:61:31:f8:46:1a:e6:d4:12:ee:98:5a:ed:7f:
59:e0:13:f5:ce:a6:88:b9:ed:e3:43:c4:69:9e:dc:
0e:86:9d:c8:08:3e:94:55:67:bb:18:2c:21:7e:d2:
e1:13:db:9a:cc:4f:a4:06:e6:cc:e5:c8:38:ed:9a:
3a:17:91:1b:e7:bb:26:7b:06:3e:53:12:29:96:54:
b0:d5:ad:56:11:94:b7:6f:c4:99:12:40:60:b4:80:
8c:96:07:2a:74:47:32:5c:7c:af:d2:c7:9a:1b:fa:
9a:b3:5f:bd:29:d6:fc:0f:ae:4d:08:df:e6:fb:ed:
9d:74:26:a9:fe:55:b3:21:48:ed:22:18:15:fb:82:
7d:ae:96:c8:fb:21:84:ca:25:41:02:72:c2:85:d0:
55:0c:3b:54:91:27:64:19:8f:00:ce:93:be:c6:d9:
42:6a:1c:1f:97:e2:62:c7:a7:50:b6:15:92:6c:ab:
63:f1:d2:6a:8b:09:16:07:1b:6f:55:5e:0d:ee:da:
3b:db:b9:a5:60:51:d6:20:e4:9b:cb:a9:0b:82:f1:
4e:02:31:0d:8e:57:83:bd:97:f5:a8:97:ba:78:e1:
37:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:EE:C0:BD:D8:BB:81:60:B2:E2:C7:70:10:B0:41:AC:45:42:EB:C9
X509v3 Authority Key Identifier:
keyid:FA:EB:F1:07:F0:5F:BA:9D:4E:4C:A6:1A:EA:0C:17:72:51:9F:5E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uvxB_Bfup1OTKYa6gwXclGfXjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:2d:26:87:2b:db:d3:19:8b:12:47:d3:a1:c2:34:f1:4f:9b:
c2:4c:b9:5f:8c:b8:c2:a6:f5:0e:35:8d:22:cf:35:ae:0a:42:
5e:c1:11:ab:58:5c:9f:b4:27:94:76:4e:90:74:f2:06:96:07:
bb:ed:d7:41:de:15:60:3e:54:bd:66:a2:19:5f:21:70:3e:af:
03:cb:ea:c9:37:ff:a0:c6:e1:a9:30:5f:19:14:a4:96:67:0e:
4e:c2:bc:54:e2:26:cf:4d:01:03:c4:17:e4:56:32:9e:79:4f:
ba:91:67:db:6b:61:56:50:04:4f:54:c0:1e:3e:d3:a0:33:ad:
07:84:5a:a3:4f:21:41:aa:d5:ba:85:26:60:93:4f:f1:ef:eb:
1b:a4:44:0a:20:b5:d0:c4:3b:9e:a7:3c:44:72:06:e1:65:c0:
0a:ac:70:04:ce:6c:93:f8:51:35:c9:cd:6a:3d:52:47:12:bc:
4e:bc:5d:36:04:52:ae:3e:d1:9c:14:f1:85:a0:4e:68:37:bc:
2d:8a:cb:bc:dd:79:ec:47:0f:e2:8f:2b:de:52:93:98:61:74:
c8:da:95:49:a0:dd:80:d7:8d:51:3f:cf:9a:b1:03:4e:9a:50:
fb:46:ad:a2:98:a7:66:58:b0:e5:47:c1:72:4a:97:58:68:b3:
fa:6e:ad:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:17 2025 by rpki-client