Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
File: UrDyNFHcBfp-z50etB3T0TdWRTs.mft (raw, json)
Hash identifier: ZPC0Nx1uYuivdX9OqzKVQ478HFNUjRuhPe7/HgV9Zd8=
Subject key identifier: CD:08:8D:1D:7B:A7:3C:7E:E1:07:B8:1C:1F:F9:12:AA:AE:D2:13:E4
Authority key identifier: 52:B0:F2:34:51:DC:05:FA:7E:CF:9D:1E:B4:1D:D3:D1:37:56:45:3B
Certificate issuer: /CN=52b0f23451dc05fa7ecf9d1eb41dd3d13756453b
Certificate serial: 0199240CC5E8599E727760CF7A64868E2975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 12:00:40 +0000
Manifest this update: Sun 07 Sep 2025 12:00:40 +0000
Manifest next update: Mon 08 Sep 2025 12:00:40 +0000
Files and hashes: 1: UrDyNFHcBfp-z50etB3T0TdWRTs.crl (hash: 7h62P+x1u3jnQCBSYizxtf599whXWNzQ3bKw8r6OlfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0c:c5:e8:59:9e:72:77:60:cf:7a:64:86:8e:29:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b0f23451dc05fa7ecf9d1eb41dd3d13756453b
Validity
Not Before: Sep 7 12:00:40 2025 GMT
Not After : Sep 8 12:00:40 2025 GMT
Subject: CN=cd088d1d7ba73c7ee107b81c1ff912aaaed213e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f1:63:64:6c:b3:a9:df:2f:08:46:27:9e:04:
d6:5b:71:3b:d6:48:64:45:fb:97:36:b9:01:48:fd:
2d:e9:bd:ab:ae:df:34:03:a2:6a:1c:bf:74:46:28:
61:a0:f1:b2:c8:35:c8:a3:8a:46:4f:ce:56:c9:70:
43:18:af:01:23:bb:ed:fd:37:25:93:46:22:bf:07:
53:40:94:e5:f0:eb:23:1e:e0:a2:a9:4b:36:01:8f:
98:c5:21:05:3f:02:3d:1b:a7:bd:55:07:76:0f:ad:
a0:50:6d:4f:90:4b:3a:d7:1f:63:43:29:e2:8d:1f:
ee:df:8a:89:c5:eb:aa:a2:c2:91:96:2b:a2:d4:d3:
30:41:4a:23:3e:b9:74:40:4b:29:09:bf:39:f6:3e:
aa:69:72:18:2c:c5:1c:a8:58:c2:f2:c6:0d:79:fb:
32:bc:cd:36:b7:4a:58:a0:f5:69:ac:4e:15:8a:09:
31:30:7f:88:70:8e:a0:86:d1:dd:ab:6e:a4:b8:c0:
18:91:a7:57:55:fc:f6:c4:67:81:c6:41:b7:a1:7a:
df:e2:47:a3:f0:c6:97:68:bf:e3:af:a8:ba:3a:d1:
74:c5:4c:4b:f2:6e:01:97:a0:b1:6e:10:37:40:16:
71:47:d9:10:37:53:b4:66:8a:90:ef:32:81:9b:e6:
ec:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:08:8D:1D:7B:A7:3C:7E:E1:07:B8:1C:1F:F9:12:AA:AE:D2:13:E4
X509v3 Authority Key Identifier:
keyid:52:B0:F2:34:51:DC:05:FA:7E:CF:9D:1E:B4:1D:D3:D1:37:56:45:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:80:b1:de:6d:08:d3:eb:de:fe:e2:a9:84:87:99:3a:41:3d:
47:08:48:4c:e1:87:4d:82:86:d9:65:90:6b:17:40:9a:6a:1e:
b6:c4:98:d1:a4:8c:5c:22:95:09:c7:6c:99:7d:51:ff:da:93:
18:f6:68:21:6e:7b:a4:ed:84:77:82:14:7d:c5:b0:82:8f:de:
83:eb:92:e4:81:9e:8c:93:90:d4:6d:92:04:30:0f:8a:3c:4b:
fd:d2:a5:72:e0:79:42:ba:22:89:78:f6:b6:a6:96:a8:cd:42:
c1:77:02:d0:54:1c:bc:29:50:2f:04:ce:93:bc:69:47:17:ab:
3b:07:ee:c2:1e:dc:af:7d:f4:1c:7b:6b:92:be:e7:18:61:5b:
5b:8e:78:39:3f:0a:8d:1a:f1:d7:1c:1d:97:e4:3c:24:c6:5d:
8f:06:64:7e:7b:0a:f4:d6:b2:a4:9b:fd:54:08:69:40:d9:0e:
bd:ee:9c:6b:ac:81:e8:37:4a:7f:5a:c2:02:04:bd:93:8c:16:
4a:b1:22:53:e7:d2:5a:a2:94:60:1a:a2:ba:e3:8b:aa:a4:17:
24:80:7a:6f:56:7a:e9:7d:e5:98:5e:bd:91:94:20:97:d2:d5:
50:24:dd:2c:0a:7d:6a:5a:67:99:93:ff:2c:b9:1f:b3:d2:d6:
ad:c8:b2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:26 2025 by rpki-client