Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
File: UZhWegOeXM4j7pN0CW7tV7u6KY4.mft (raw, json)
Hash identifier: 7Z+B3FQXrgG3G/DiNPrOERTBLixcHMrTOvKZPznMr4g=
Subject key identifier: 1F:4B:66:4D:91:32:45:0A:7E:1D:FA:53:CD:EA:2A:D4:B9:1B:56:97
Authority key identifier: 51:98:56:7A:03:9E:5C:CE:23:EE:93:74:09:6E:ED:57:BB:BA:29:8E
Certificate issuer: /CN=5198567a039e5cce23ee9374096eed57bbba298e
Certificate serial: 019921B1159C035F2E03F967F3651332FEBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
Manifest number: 166B
Signing time: Sun 07 Sep 2025 01:01:17 +0000
Manifest this update: Sun 07 Sep 2025 01:01:17 +0000
Manifest next update: Mon 08 Sep 2025 01:01:17 +0000
Files and hashes: 1: UZhWegOeXM4j7pN0CW7tV7u6KY4.crl (hash: 21ysbwjGGFbOyVstMdyHGq5bGNreoirWlsENaHlm1yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:15:9c:03:5f:2e:03:f9:67:f3:65:13:32:fe:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5198567a039e5cce23ee9374096eed57bbba298e
Validity
Not Before: Sep 7 01:01:17 2025 GMT
Not After : Sep 8 01:01:17 2025 GMT
Subject: CN=1f4b664d9132450a7e1dfa53cdea2ad4b91b5697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:0d:11:9a:36:c5:d4:7e:d3:7c:60:22:4c:
b9:17:79:93:7a:4e:b4:ef:8b:03:4e:e8:d9:93:ea:
0b:bc:3c:29:37:1a:89:51:8e:57:fa:81:e9:e1:cd:
bc:4d:29:d1:b9:0d:e9:71:a5:3c:a6:e1:9d:b8:30:
a7:de:d4:d4:f9:04:00:58:ea:73:99:67:ea:22:21:
78:79:40:cf:48:7c:57:af:dc:3f:5a:3d:d8:0e:a0:
32:f1:79:7a:57:0f:e1:ed:a2:6b:55:a2:82:4e:b5:
27:1a:bf:2c:5b:d6:4d:82:d7:6c:37:99:8d:4c:d5:
27:32:55:b3:5d:a9:a0:2d:7c:0e:11:a7:cd:25:63:
ed:a9:52:78:01:bd:7b:a7:cd:97:1d:5d:45:a9:2e:
e6:89:27:97:a3:8e:10:7b:84:df:ee:68:be:11:ab:
9b:80:99:ce:91:8b:16:4f:cc:df:43:75:6a:6d:86:
d8:69:55:a1:01:82:a0:a7:0d:35:f9:a4:ea:35:8b:
a3:b6:cc:b0:7e:bd:92:57:df:20:a6:66:bb:d7:f1:
3a:27:c0:22:3a:7a:50:9d:78:6a:e8:16:bb:fc:c2:
5d:58:e4:9b:39:61:c1:18:bb:f5:4e:c6:ea:39:e2:
e9:7a:14:ab:45:c4:5a:24:dd:17:2d:bd:c7:e8:16:
e8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4B:66:4D:91:32:45:0A:7E:1D:FA:53:CD:EA:2A:D4:B9:1B:56:97
X509v3 Authority Key Identifier:
keyid:51:98:56:7A:03:9E:5C:CE:23:EE:93:74:09:6E:ED:57:BB:BA:29:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3c:8b:3e:23:b8:ae:7e:a1:41:c1:d3:d3:1e:ad:21:04:2c:
b8:09:5c:1c:56:46:01:97:b5:da:b8:a7:72:ef:51:7a:b2:b4:
9e:24:e0:5c:e9:ca:1f:95:aa:51:da:42:01:34:20:55:4b:e0:
a9:99:7f:73:7a:1b:a0:0d:17:5d:f7:0e:a9:56:41:ea:48:62:
13:88:e3:40:e5:2c:1a:63:90:9d:97:9a:54:d9:f7:9f:ab:a2:
22:74:b6:c9:10:70:51:ac:a7:cc:79:f1:ab:85:1c:51:a1:64:
92:22:9c:25:08:b5:a0:16:72:ab:19:fa:52:36:2c:24:89:43:
5a:ca:cd:d9:e4:0e:9e:07:9f:b1:3d:71:ee:a2:14:21:19:3d:
d2:4d:ca:99:b7:21:22:a8:8e:65:09:3b:2c:0f:1e:42:14:86:
e2:ea:79:f2:a2:57:e0:a8:47:ea:69:54:eb:7b:73:e6:f6:8f:
ad:87:30:5b:84:af:e4:d9:48:a8:f0:a3:ab:81:1c:a9:34:49:
34:71:92:f7:be:01:f7:04:8b:e8:6c:df:ed:5d:90:02:a3:23:
5b:5e:6b:b2:da:80:87:5c:4a:dd:85:ad:d0:56:b3:c3:91:e6:
0b:bc:27:d5:38:b2:af:73:95:11:53:40:ad:1d:ce:47:1c:49:
62:e9:f9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:34:00 2025 by rpki-client