Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft
File: ur1G6GLeAxkf8xMazHjhlwlZahw.mft (raw, json)
Hash identifier: 6vO59vsBfCK5BznMibdocYDJaTcdIA/6DGqci1P9tfY=
Subject key identifier: 8A:75:C8:EC:EC:92:24:9D:5D:62:81:DD:03:88:6C:9B:3D:02:3B:9B
Authority key identifier: BA:BD:46:E8:62:DE:03:19:1F:F3:13:1A:CC:78:E1:97:09:59:6A:1C
Certificate issuer: /CN=babd46e862de03191ff3131acc78e19709596a1c
Certificate serial: 0199221F4E0DDD7D27F661BA4195D3EC499E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ur1G6GLeAxkf8xMazHjhlwlZahw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft
Manifest number: 48
Signing time: Sun 07 Sep 2025 03:01:40 +0000
Manifest this update: Sun 07 Sep 2025 03:01:40 +0000
Manifest next update: Mon 08 Sep 2025 03:01:40 +0000
Files and hashes: 1: ur1G6GLeAxkf8xMazHjhlwlZahw.crl (hash: oDkJgP0wzUfh2KI3fdCrygEOQ6Gxt40CSdsTnJFpFZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ur1G6GLeAxkf8xMazHjhlwlZahw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:4e:0d:dd:7d:27:f6:61:ba:41:95:d3:ec:49:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=babd46e862de03191ff3131acc78e19709596a1c
Validity
Not Before: Sep 7 03:01:40 2025 GMT
Not After : Sep 8 03:01:40 2025 GMT
Subject: CN=8a75c8ecec92249d5d6281dd03886c9b3d023b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:98:d6:22:2a:bd:24:fe:7e:fb:a1:ba:20:38:
b7:64:cf:1c:39:1d:47:28:a8:e2:28:3e:4a:86:d0:
2f:2c:ee:38:b0:66:43:d9:ab:da:7a:1d:84:4b:6b:
31:23:5d:62:65:9b:1c:f5:c5:64:76:69:81:84:97:
e2:65:fa:f6:da:9c:80:28:05:dd:1f:3f:a7:0d:7c:
a6:b8:87:06:c0:e5:c0:13:4d:79:56:c3:27:18:39:
e6:ec:f3:c0:03:c9:90:48:2f:2b:ab:39:ea:6b:d6:
62:9e:c1:63:07:e3:fb:96:cb:95:6f:3e:b5:f1:07:
31:68:12:3f:6b:f5:e4:7c:ce:d8:e0:ad:63:3c:93:
ec:7e:16:bf:9e:85:39:cd:43:7a:c0:91:2d:1b:fa:
db:49:8e:67:56:63:66:bb:d1:bb:b3:d6:e9:11:c0:
00:b7:4a:e1:68:b2:ce:0d:99:b0:94:f7:9c:11:3b:
27:ed:62:cb:e6:70:cc:92:4f:72:15:59:d4:6d:e0:
f1:e8:a3:b3:69:12:71:45:54:97:66:c3:aa:28:2f:
71:f4:ae:44:26:aa:46:34:f3:b6:c5:39:3b:37:84:
8e:7b:72:df:24:93:02:9d:f9:be:c6:15:aa:f7:a1:
c1:34:b6:5c:1f:d3:54:ac:25:9c:cb:23:de:96:14:
4d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:75:C8:EC:EC:92:24:9D:5D:62:81:DD:03:88:6C:9B:3D:02:3B:9B
X509v3 Authority Key Identifier:
keyid:BA:BD:46:E8:62:DE:03:19:1F:F3:13:1A:CC:78:E1:97:09:59:6A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ur1G6GLeAxkf8xMazHjhlwlZahw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ac:43:7b:f5:28:7d:ea:11:10:52:14:58:28:73:7c:bb:4f:
6d:d5:72:e2:40:c7:b7:d5:56:72:51:f2:1a:01:f0:fd:71:99:
2c:fb:a4:36:2d:1b:51:5e:71:4f:02:51:bd:5e:fc:32:7c:6c:
66:48:d9:5b:97:77:03:cf:a0:15:80:c0:80:b0:0c:3b:73:ec:
97:30:d3:ec:c5:ce:59:39:3a:9e:4c:3d:9c:a6:8f:60:0a:d7:
50:4a:9b:81:45:a9:eb:23:00:7f:f4:9c:78:ad:a2:bd:5a:69:
28:78:8d:9d:74:59:68:1a:66:34:d3:4c:90:80:64:b2:d3:d0:
2b:a0:b9:8e:37:8a:5d:74:72:98:41:41:05:31:7f:82:a1:d5:
8f:e2:55:ff:16:f4:33:d2:34:b6:71:5b:ac:a3:0e:52:7d:b2:
59:98:c8:71:57:3a:58:19:ba:bb:38:62:94:ed:06:25:96:ab:
93:e6:c1:cd:41:c0:5b:29:0b:e1:7e:f8:91:8f:5a:98:ad:8d:
52:2f:8b:d2:82:22:4b:a0:d1:f5:1b:8e:b4:d9:68:83:b1:f8:
11:a6:96:18:39:83:5d:00:00:b9:f5:7f:18:c6:d1:90:9b:ee:
e9:27:be:07:53:0f:70:66:9d:5e:d4:9e:67:87:9b:d4:90:e0:
b5:d9:f0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:43 2025 by rpki-client