Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft
File: UJw4zD6qNVb6OaIvMNwbpINv6J8.mft (raw, json)
Hash identifier: Hkm5j4VDUnDB9ntzeFWOy4rS7s2jL+qdtfRcH/kkhzw=
Subject key identifier: 47:1D:C1:C8:96:3C:56:F4:6A:4E:2E:A9:14:AF:E5:2D:2F:50:73:13
Authority key identifier: 50:9C:38:CC:3E:AA:35:56:FA:39:A2:2F:30:DC:1B:A4:83:6F:E8:9F
Certificate issuer: /CN=509c38cc3eaa3556fa39a22f30dc1ba4836fe89f
Certificate serial: 019923A03A37DC26D07118B301D096FBC9CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJw4zD6qNVb6OaIvMNwbpINv6J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 10:02:07 +0000
Manifest this update: Sun 07 Sep 2025 10:02:07 +0000
Manifest next update: Mon 08 Sep 2025 10:02:07 +0000
Files and hashes: 1: UJw4zD6qNVb6OaIvMNwbpINv6J8.crl (hash: BXQOzOlGxQsF6bzL2WmdlQxTLwRA8s47V9+hfMLItTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJw4zD6qNVb6OaIvMNwbpINv6J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:3a:37:dc:26:d0:71:18:b3:01:d0:96:fb:c9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509c38cc3eaa3556fa39a22f30dc1ba4836fe89f
Validity
Not Before: Sep 7 10:02:07 2025 GMT
Not After : Sep 8 10:02:07 2025 GMT
Subject: CN=471dc1c8963c56f46a4e2ea914afe52d2f507313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b9:d6:6d:b6:12:79:99:62:66:ec:83:53:cd:
74:d4:63:45:e9:0b:8a:07:d6:dc:62:c2:6b:01:79:
f3:5a:f8:e6:c3:99:6f:17:d7:35:73:1b:60:1e:9c:
3d:4f:c0:66:7c:a6:27:d2:ae:80:97:c6:30:13:8d:
75:f0:66:2a:80:6a:e8:e0:cd:42:57:32:80:c5:91:
c2:79:a4:e3:02:69:c4:23:c8:e1:03:7b:fd:dc:46:
a5:1a:a9:f5:94:58:ae:65:cb:e4:b0:55:8f:07:01:
3d:6e:df:06:f5:f0:2f:a8:f5:f8:7c:0b:1c:ed:6d:
2e:a2:b5:12:c1:83:8b:ec:e1:23:e4:37:e4:a2:12:
5d:95:17:ff:f6:76:7d:09:fb:2a:01:04:61:48:19:
c5:51:b2:80:bf:05:06:57:c1:3f:26:f2:a7:bd:f6:
30:de:97:d2:7e:80:d6:15:6a:39:3d:d2:e4:ac:55:
16:f2:aa:51:55:79:d4:53:20:59:3d:bd:0c:23:9b:
1f:b1:be:3d:2e:cd:09:03:e3:a2:40:22:83:86:a2:
34:b2:9f:cd:f4:6b:b2:ff:69:71:e7:39:ed:32:f8:
3e:75:81:bb:c1:b2:40:a5:36:67:be:41:bb:e2:97:
1a:0e:c0:2e:61:2f:7a:a8:fc:59:62:33:3f:0d:ca:
6e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1D:C1:C8:96:3C:56:F4:6A:4E:2E:A9:14:AF:E5:2D:2F:50:73:13
X509v3 Authority Key Identifier:
keyid:50:9C:38:CC:3E:AA:35:56:FA:39:A2:2F:30:DC:1B:A4:83:6F:E8:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJw4zD6qNVb6OaIvMNwbpINv6J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:3a:e2:a9:3f:90:d6:0d:4f:b8:e9:1b:07:4b:98:69:7f:fd:
d6:6e:61:bd:12:09:23:1c:b9:3f:f0:fc:b8:ab:f3:53:b2:cc:
61:e3:84:10:a1:79:83:6b:50:53:f4:0f:68:90:a2:18:35:14:
9d:2e:54:64:1a:f7:64:a0:1e:e5:0c:a1:09:7b:83:28:b5:f0:
c0:7e:72:a3:38:94:e2:2c:5e:e7:7d:c2:81:84:47:63:18:8a:
ca:d4:46:05:fe:53:32:d3:e7:28:ff:e3:4c:29:dc:aa:30:4b:
3b:d5:e5:42:99:4d:9f:91:7f:2a:ee:12:b1:1b:0d:2a:35:96:
a6:0a:48:de:ab:d0:fc:6d:6c:cb:34:3a:e6:9a:79:3b:71:d7:
8a:62:a4:c8:e7:77:fa:58:a9:9a:62:87:d2:5b:8e:e9:ba:f0:
4c:00:d6:a5:1a:a5:73:2c:f7:fc:69:02:ef:55:21:ad:86:87:
1c:1b:85:37:34:5a:6b:01:be:57:c8:91:eb:7e:ee:3e:ca:20:
4d:fd:83:81:6d:68:71:33:45:20:c5:76:c1:c2:a4:93:2b:cb:
ed:01:0a:2d:fd:1c:78:f8:6e:c9:71:97:0b:ae:9c:63:04:63:
2a:dc:a3:08:20:49:50:da:96:37:52:6c:58:63:d4:a4:f1:4f:
39:df:57:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:51 2025 by rpki-client