Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft
File: uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft (raw, json)
Hash identifier: DskUFAfh8EYmJZwnY1uUj5MlzcfaPmBY1XBjJaTCwoM=
Subject key identifier: 90:EA:B2:89:F3:CD:D5:94:7D:1C:2F:8C:50:EB:7A:FC:5C:52:E1:11
Authority key identifier: B8:15:25:AE:1A:5A:FC:EF:19:3F:5A:40:17:7B:F2:73:88:83:10:78
Certificate issuer: /CN=b81525ae1a5afcef193f5a40177bf27388831078
Certificate serial: 019922FA5E39E9D4EF4C964E90E612A06ADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft
Manifest number: 038D
Signing time: Sun 07 Sep 2025 07:00:57 +0000
Manifest this update: Sun 07 Sep 2025 07:00:57 +0000
Manifest next update: Mon 08 Sep 2025 07:00:57 +0000
Files and hashes: 1: uBUlrhpa_O8ZP1pAF3vyc4iDEHg.crl (hash: reJhMWRC1WSh7FmN8/ksXmPIuxKJPNxRm455cBHeQao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:5e:39:e9:d4:ef:4c:96:4e:90:e6:12:a0:6a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81525ae1a5afcef193f5a40177bf27388831078
Validity
Not Before: Sep 7 07:00:57 2025 GMT
Not After : Sep 8 07:00:57 2025 GMT
Subject: CN=90eab289f3cdd5947d1c2f8c50eb7afc5c52e111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:78:5d:db:6b:4a:43:4d:5d:0f:21:49:77:a1:
a2:e5:2b:54:22:42:67:0f:e5:65:b2:cf:4c:ea:5a:
80:d0:1a:87:02:f6:75:e4:d1:45:9b:b7:c2:b5:c9:
d9:a6:10:18:9d:5d:05:48:c4:51:68:49:27:c3:91:
65:42:10:2d:c9:ed:94:fe:48:25:39:b7:7b:f5:65:
f8:21:87:cc:4a:e8:77:92:de:d6:8d:11:5c:a2:a3:
06:8a:51:08:b3:76:1d:6f:23:2b:a2:7e:1f:21:ef:
cb:4c:82:7a:65:b3:d1:56:12:ea:3d:5b:1c:5f:3e:
96:bb:0b:07:69:4d:4b:74:0b:64:4d:a0:de:6a:22:
d4:14:32:a7:35:d6:7d:3e:bb:2e:30:9a:3c:2b:12:
c2:3b:f8:68:6f:4e:09:a8:ea:a9:84:46:dc:16:6b:
5f:8a:dc:ee:59:8e:11:5c:ad:dd:92:49:82:ad:3f:
8a:38:96:47:96:4c:6e:62:11:a4:80:8d:f3:56:2b:
b6:a7:a2:2b:ef:e9:57:8e:a3:3e:b3:a6:1a:22:a3:
55:74:59:91:d4:80:a5:a8:61:7c:06:b9:c4:93:46:
6c:a1:8b:ee:01:58:ea:32:c0:09:13:95:06:1d:59:
ee:87:59:34:2b:37:99:bf:d4:41:02:75:fc:5d:52:
40:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EA:B2:89:F3:CD:D5:94:7D:1C:2F:8C:50:EB:7A:FC:5C:52:E1:11
X509v3 Authority Key Identifier:
keyid:B8:15:25:AE:1A:5A:FC:EF:19:3F:5A:40:17:7B:F2:73:88:83:10:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:aa:44:a8:f3:4e:be:cc:dc:3f:77:3b:8b:52:0d:ec:52:08:
df:c8:40:c1:00:29:d0:73:09:f2:d4:ce:38:5b:dc:0d:06:95:
4e:e9:79:1f:58:f6:d0:ed:d2:60:d3:ac:c6:86:20:17:03:8d:
95:ce:06:28:9e:b5:ce:d4:cf:2a:3e:c5:c4:81:66:56:76:30:
72:f5:9f:83:61:7e:7c:ee:a6:89:af:da:56:f9:56:cb:6d:88:
93:a1:27:ce:9c:91:7f:57:d5:8c:83:51:dc:70:fa:fd:9b:78:
5c:b7:14:a7:f6:d1:ee:c5:78:44:78:1a:c5:27:84:cb:42:11:
77:28:69:c0:44:44:5e:9c:be:59:fb:1f:42:e5:0c:f3:33:59:
95:d6:5a:35:5e:70:26:ef:e4:35:06:7d:69:ce:82:e7:a6:f7:
b8:98:89:81:2a:cb:77:7d:a7:ed:7c:25:02:51:68:91:ac:86:
40:d0:de:54:e6:9f:f2:96:b3:42:9c:20:e6:c5:7d:3b:5a:87:
77:94:e1:aa:46:4d:dc:09:00:f9:12:cb:fd:1e:04:4d:14:bd:
20:5f:7b:3e:48:54:1b:7b:23:7b:bd:46:f8:6f:7c:23:95:c5:
5f:24:f6:d5:02:69:88:08:9a:21:09:1b:53:0c:f3:c2:dd:c1:
89:05:cf:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:19 2025 by rpki-client