Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft
File: pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft (raw, json)
Hash identifier: hA4zyMZAicNraDfRrRY2E6SMkTNbE5F/u5NF14QIlpc=
Subject key identifier: 87:D9:04:74:F8:3B:79:71:F6:FC:8E:9D:F8:99:6D:2F:BD:19:5D:6C
Authority key identifier: A5:40:AB:D1:98:82:CA:C8:0B:76:6D:72:AD:8F:EC:24:AB:95:50:AF
Certificate issuer: /CN=a540abd19882cac80b766d72ad8fec24ab9550af
Certificate serial: 0199221F238D707C1201229CB77332EB39AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUCr0ZiCysgLdm1yrY_sJKuVUK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft
Manifest number: 3D
Signing time: Sun 07 Sep 2025 03:01:29 +0000
Manifest this update: Sun 07 Sep 2025 03:01:29 +0000
Manifest next update: Mon 08 Sep 2025 03:01:29 +0000
Files and hashes: 1: pUCr0ZiCysgLdm1yrY_sJKuVUK8.crl (hash: 7n6X/1bdmLc/XXGhws/8HVK4fI3nVdpqD8SSpS1ae0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUCr0ZiCysgLdm1yrY_sJKuVUK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:23:8d:70:7c:12:01:22:9c:b7:73:32:eb:39:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a540abd19882cac80b766d72ad8fec24ab9550af
Validity
Not Before: Sep 7 03:01:29 2025 GMT
Not After : Sep 8 03:01:29 2025 GMT
Subject: CN=87d90474f83b7971f6fc8e9df8996d2fbd195d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4f:f2:ad:db:94:3b:9a:77:ce:36:bd:42:8c:
99:f7:05:c2:d7:79:c9:72:9d:9e:e5:3c:12:7e:f6:
bc:87:39:d7:ef:82:8e:cc:2e:f0:c1:a3:37:31:bc:
64:34:65:ed:93:09:65:c7:92:52:a9:43:45:6c:27:
8b:e4:2d:a6:30:ae:16:9f:c8:cf:31:55:19:eb:c2:
fc:78:1f:35:54:4d:16:ca:0d:53:4d:dc:5b:09:34:
8e:3e:bb:d7:4e:6e:ab:26:10:0d:7a:27:8b:77:31:
78:13:71:97:26:4a:57:6a:d6:94:8f:b8:2c:b6:42:
25:77:d2:45:b6:1e:b6:51:42:0b:2e:6d:23:5d:ba:
28:4c:a5:10:47:65:b9:67:06:19:87:de:56:0f:43:
7d:04:f3:40:64:ea:af:a5:94:11:ac:57:41:3e:54:
58:03:7c:0e:a9:e4:de:60:53:72:86:95:b6:5d:c7:
64:ce:93:2e:c2:3a:25:60:5e:b4:a5:1a:82:87:bc:
89:66:44:ed:33:df:9b:fd:27:c6:bb:00:ad:13:e6:
a7:bc:44:ca:cc:6a:8a:ce:94:6a:7d:6d:90:0d:e6:
b7:21:98:71:18:32:03:29:c0:e9:8e:a2:d4:c6:55:
da:6b:de:38:3e:30:04:93:b5:a3:f2:79:2d:e0:7d:
49:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D9:04:74:F8:3B:79:71:F6:FC:8E:9D:F8:99:6D:2F:BD:19:5D:6C
X509v3 Authority Key Identifier:
keyid:A5:40:AB:D1:98:82:CA:C8:0B:76:6D:72:AD:8F:EC:24:AB:95:50:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUCr0ZiCysgLdm1yrY_sJKuVUK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e8:92:cc:d6:4c:a4:a8:6a:b7:ff:d7:94:3f:e2:40:62:ce:71:
b1:41:09:0e:d2:93:41:46:ba:9b:a3:d8:9c:77:4d:9f:5a:d6:
f5:14:54:2f:10:37:74:d3:6c:48:22:8c:7c:a3:c9:d5:3e:d0:
b3:6d:9b:2a:0f:f0:fd:bf:8e:85:3c:2f:14:f3:44:a5:cd:de:
e1:09:2f:af:f2:a4:99:16:28:83:43:c3:d5:5b:dd:9f:12:87:
20:ad:cd:f6:84:34:59:3c:96:21:87:87:9d:7d:f2:2b:69:63:
d5:d1:65:c7:72:2c:33:56:52:52:ff:c9:7f:6d:d3:f7:ea:4e:
dd:f7:69:b0:48:d8:e5:11:42:17:40:e5:26:9b:a3:ce:d9:e2:
a7:8d:39:e2:bf:21:15:0a:11:27:9c:26:43:e5:91:6d:ad:02:
e0:09:17:74:5e:69:75:82:f3:47:7d:0e:c7:6e:6b:bb:db:f1:
a8:14:9a:1d:79:d3:3c:98:21:1e:a5:6f:d7:f4:a6:58:80:16:
85:9b:db:4b:e5:c0:db:ef:1b:5b:fb:2f:63:27:b2:0d:57:7b:
59:82:14:d4:57:69:da:db:29:bd:00:bd:a3:45:46:8e:dc:ee:
f7:d9:a9:2f:8e:ec:d5:94:85:5f:5e:74:1c:9e:5c:20:c2:3b:
ba:ea:03:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:39:57 2025 by rpki-client