Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft
File: Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft (raw, json)
Hash identifier: Zi1LLCjewkTSjFRKSa4ayb/xvnCE1EHEq/z928nkSGo=
Subject key identifier: A9:F1:06:72:67:AA:23:A0:5E:61:F8:84:EF:21:02:E4:63:66:61:BA
Authority key identifier: 52:EF:F3:85:D4:B4:82:15:D8:05:B5:88:A2:70:58:29:D4:62:11:71
Certificate issuer: /CN=52eff385d4b48215d805b588a2705829d4621171
Certificate serial: 019921B0891548156849E6CCB30B677E8A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uu_zhdS0ghXYBbWIonBYKdRiEXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft
Manifest number: 0A1A
Signing time: Sun 07 Sep 2025 01:00:41 +0000
Manifest this update: Sun 07 Sep 2025 01:00:41 +0000
Manifest next update: Mon 08 Sep 2025 01:00:41 +0000
Files and hashes: 1: Uu_zhdS0ghXYBbWIonBYKdRiEXE.crl (hash: 1ovHahkHVZy58Fz0nGgnX6cwqVMSmp1uKsHJ2WDxnI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uu_zhdS0ghXYBbWIonBYKdRiEXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:89:15:48:15:68:49:e6:cc:b3:0b:67:7e:8a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52eff385d4b48215d805b588a2705829d4621171
Validity
Not Before: Sep 7 01:00:41 2025 GMT
Not After : Sep 8 01:00:41 2025 GMT
Subject: CN=a9f1067267aa23a05e61f884ef2102e4636661ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:50:dd:28:14:c3:86:67:04:11:a7:98:cb:9d:
51:b8:35:8f:4d:3a:0b:fb:d1:0c:aa:d0:ad:95:43:
88:8d:5b:b5:c6:ba:ab:f5:27:6c:f4:2d:af:b4:d9:
6f:64:0f:68:bd:c1:54:b1:a9:38:dd:e0:13:d9:4b:
ec:b0:0a:27:bf:08:38:43:b4:3b:0d:9b:d6:36:1c:
dd:83:03:95:ac:be:0a:cd:c7:21:00:13:87:ce:46:
28:55:d7:1e:10:66:6a:7c:65:c0:63:76:c5:21:b3:
5a:d3:50:ad:2d:5d:47:f8:e2:47:dd:a1:67:86:8b:
4e:7d:95:4b:44:e0:2d:28:18:b2:24:6f:9e:2d:40:
c9:ec:30:4a:31:04:25:0e:1b:55:03:01:c7:68:e5:
d6:25:9c:c5:ac:30:93:06:13:aa:40:d1:c6:be:ae:
c2:b4:f5:63:99:1b:86:e6:e5:77:80:ea:12:36:92:
0d:97:86:ff:86:38:30:75:52:d8:ac:0a:29:50:d2:
f3:ca:bd:14:07:01:ae:11:02:0e:c6:00:57:25:a7:
89:ea:69:a8:86:af:e7:53:04:47:d3:b3:10:d6:0e:
10:fa:e2:1d:41:f7:9f:87:1e:f4:5e:a3:35:e1:52:
a8:8f:5e:7f:1b:23:7f:cd:0a:9f:7c:3c:9d:5f:fb:
e6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F1:06:72:67:AA:23:A0:5E:61:F8:84:EF:21:02:E4:63:66:61:BA
X509v3 Authority Key Identifier:
keyid:52:EF:F3:85:D4:B4:82:15:D8:05:B5:88:A2:70:58:29:D4:62:11:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uu_zhdS0ghXYBbWIonBYKdRiEXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ef:1f:f3:32:7a:fd:a2:f2:ca:cc:9b:db:65:a2:af:d3:f7:
58:09:65:92:f3:b1:4c:99:1b:d6:49:f4:cb:54:48:c4:16:d6:
92:26:29:a8:e7:76:c1:8c:55:c8:d5:35:1b:cc:40:a3:2d:75:
35:31:ee:f5:3a:5b:b8:4c:05:a3:dc:49:5a:f5:25:7e:e3:20:
0e:5d:09:8f:2f:e3:8e:50:dc:aa:cf:89:cf:d8:1b:d6:47:9b:
9c:b2:c6:f9:80:ff:7f:e1:47:ae:88:c5:3b:2f:68:90:fe:49:
58:3d:ea:69:6b:0d:9f:f0:1a:19:7a:3a:30:a6:1e:d8:31:b2:
2e:6b:80:8c:40:68:b6:ef:bf:44:0e:93:7e:5b:6a:de:32:e4:
d4:6e:bc:42:38:37:0c:ff:43:89:e1:9d:17:ff:ea:48:ff:70:
aa:ec:d9:0a:6d:be:f0:04:d7:62:7f:7d:09:80:f5:9d:2f:52:
1b:a0:8c:57:89:e0:d0:fa:25:cf:fc:6a:04:4d:4d:3c:91:81:
30:ee:a5:f2:ff:0c:f9:ab:18:34:88:42:c6:be:0e:12:cb:cd:
1c:88:8a:1f:89:5e:bc:38:8e:4e:75:06:d3:90:01:f6:78:3d:
88:65:ad:89:61:25:b8:1c:98:54:66:07:4d:22:63:32:ba:14:
1a:03:ed:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:12 2025 by rpki-client