Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
File: ujSP3hs60izyj-ZAMK4v5PIst_s.mft (raw, json)
Hash identifier: blBrEBGb1w+mzJMDcMj/DaiN3OOYUhRoCQ8j26qofW8=
Subject key identifier: 2B:0B:70:BF:C0:0C:18:B1:05:E7:A8:08:2D:4B:61:36:67:D2:3D:E0
Authority key identifier: BA:34:8F:DE:1B:3A:D2:2C:F2:8F:E6:40:30:AE:2F:E4:F2:2C:B7:FB
Certificate issuer: /CN=ba348fde1b3ad22cf28fe64030ae2fe4f22cb7fb
Certificate serial: 0199239EE41B949FAACEF4EA9D8C46474F10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
Manifest number: 1351
Signing time: Sun 07 Sep 2025 10:00:39 +0000
Manifest this update: Sun 07 Sep 2025 10:00:39 +0000
Manifest next update: Mon 08 Sep 2025 10:00:39 +0000
Files and hashes: 1: ujSP3hs60izyj-ZAMK4v5PIst_s.crl (hash: FAfn6hId6qPqaQSAt1J1kS/h3XUBBIjBx9wWfdCUsPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:e4:1b:94:9f:aa:ce:f4:ea:9d:8c:46:47:4f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba348fde1b3ad22cf28fe64030ae2fe4f22cb7fb
Validity
Not Before: Sep 7 10:00:39 2025 GMT
Not After : Sep 8 10:00:39 2025 GMT
Subject: CN=2b0b70bfc00c18b105e7a8082d4b613667d23de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:42:21:81:dc:19:12:d4:cd:dd:de:08:5b:b2:
30:87:2f:89:04:57:40:9c:14:8d:52:e2:38:f1:e0:
44:12:8a:bb:7b:f6:a9:68:f3:8a:93:2e:6c:50:85:
bc:e5:91:7f:06:c7:fb:bf:4c:f5:5b:76:1f:39:ea:
3c:85:b2:5f:b5:34:9b:36:54:d7:18:27:fc:31:71:
dd:12:0c:d3:3a:e6:2c:f9:a7:38:96:88:72:4e:7f:
18:68:21:9d:9d:17:50:3f:a2:88:3b:97:dc:90:6d:
a9:db:ed:b8:e6:78:44:be:75:0c:85:a0:49:0b:2e:
c1:cc:be:58:34:b0:cf:bc:03:66:a6:cc:cf:6c:2c:
d7:fa:b9:d2:9b:8a:ec:18:f1:fb:e4:2f:65:75:ac:
e6:9b:f4:b4:73:28:95:77:54:33:5c:61:fb:b0:fa:
25:9c:81:d4:67:44:3c:bd:50:d4:55:ae:5c:81:2e:
57:89:fa:64:a6:2d:74:a6:d5:e0:00:fe:11:a8:69:
0d:2a:5b:32:b2:97:5f:84:33:b8:ba:2d:f7:18:b3:
f4:a8:f2:be:3a:e0:14:79:fe:44:32:97:10:67:0b:
a5:43:bc:ea:6a:1e:5e:5d:11:c5:3a:3b:7b:67:64:
c8:3a:b3:7d:e9:76:f4:5b:67:40:0e:9b:0e:c8:07:
11:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0B:70:BF:C0:0C:18:B1:05:E7:A8:08:2D:4B:61:36:67:D2:3D:E0
X509v3 Authority Key Identifier:
keyid:BA:34:8F:DE:1B:3A:D2:2C:F2:8F:E6:40:30:AE:2F:E4:F2:2C:B7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ac:72:78:20:ac:fc:b1:4f:07:58:d4:63:e4:2e:4f:fb:5e:
45:d9:d9:4f:5c:07:c2:24:82:89:f3:53:91:59:cf:31:ec:5e:
cd:68:a4:1d:7c:81:31:19:99:15:cf:dd:83:3d:28:ef:2b:fd:
0c:f9:35:9e:8c:8c:3e:3e:93:dc:19:90:90:e4:3a:ef:50:fd:
86:99:21:8b:9f:c6:05:de:4d:69:86:f1:9b:eb:bf:ba:45:1b:
f7:1c:7a:ff:d9:35:9e:4b:b8:17:0f:e1:a3:e6:31:44:0d:25:
59:16:cb:de:c5:b7:53:84:f6:a8:dd:00:ff:81:d5:30:6c:18:
b6:46:a7:9d:2d:09:d3:eb:d7:29:41:ed:34:35:11:b2:01:85:
02:96:66:3d:4f:42:3b:53:1b:a9:49:79:c3:15:fa:46:09:08:
a5:4b:66:08:5f:dc:97:a0:28:be:83:d0:26:51:b5:47:4a:82:
9c:d5:e5:3b:7c:aa:5b:b8:88:79:6c:dc:e2:7c:63:dc:d1:2d:
f2:99:38:9c:b9:de:da:90:b4:50:b0:96:7f:b2:1d:41:50:5e:
6d:44:e5:8f:2b:21:f1:3c:5c:5d:a9:1c:76:e4:2e:27:83:38:
a9:f2:96:15:90:91:05:fc:60:27:57:31:59:5f:14:70:ff:b2:
93:75:55:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:01 2025 by rpki-client