Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft
File: uLhsyEeC6kEMbYfCzTv4agaqF7s.mft (raw, json)
Hash identifier: MLYFWDYqGaiJaJSavTezifbEiSwqHkb+JwU7VZQIM04=
Subject key identifier: B5:DD:BC:70:67:97:4A:2D:B8:10:DD:0D:AC:5E:2D:D1:35:02:DB:00
Authority key identifier: B8:B8:6C:C8:47:82:EA:41:0C:6D:87:C2:CD:3B:F8:6A:06:AA:17:BB
Certificate issuer: /CN=b8b86cc84782ea410c6d87c2cd3bf86a06aa17bb
Certificate serial: 01992255427D662FE5CBEB4855983D2A54A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLhsyEeC6kEMbYfCzTv4agaqF7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft
Manifest number: 0D02
Signing time: Sun 07 Sep 2025 04:00:36 +0000
Manifest this update: Sun 07 Sep 2025 04:00:36 +0000
Manifest next update: Mon 08 Sep 2025 04:00:36 +0000
Files and hashes: 1: uLhsyEeC6kEMbYfCzTv4agaqF7s.crl (hash: caOuNLcHhN9prD8zycTCJ6AioggnboujWLCoKyzGuiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uLhsyEeC6kEMbYfCzTv4agaqF7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:42:7d:66:2f:e5:cb:eb:48:55:98:3d:2a:54:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8b86cc84782ea410c6d87c2cd3bf86a06aa17bb
Validity
Not Before: Sep 7 04:00:36 2025 GMT
Not After : Sep 8 04:00:36 2025 GMT
Subject: CN=b5ddbc7067974a2db810dd0dac5e2dd13502db00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:46:cf:63:16:26:c7:eb:29:7d:86:94:9e:78:
e1:09:b3:83:39:6b:27:ef:83:2d:db:b0:b1:23:5f:
89:95:45:45:d1:a8:7b:76:60:83:6d:83:b4:61:8a:
94:90:a6:d0:55:4c:d9:37:12:c2:b0:52:e7:84:0c:
05:cf:51:7b:9a:86:cb:8b:93:2e:1b:18:e5:ce:b9:
30:cb:1a:81:9c:79:3b:c9:58:4a:f7:e5:c9:8b:83:
1b:65:76:82:9b:d3:2d:d9:fa:21:13:1e:7e:66:92:
c4:fe:cc:e6:f6:91:7a:96:7a:3d:82:f1:74:72:5f:
50:74:36:b6:47:75:6c:b3:db:db:67:52:30:4d:f5:
57:80:7a:22:cd:5c:1c:ae:f8:f4:7b:23:9f:91:52:
c7:ba:39:d0:e0:27:04:87:c9:cd:5b:97:d7:7c:c2:
de:51:9a:3c:8b:bd:da:e7:9b:01:72:01:84:e3:f5:
cc:d2:2c:8d:dd:f3:d6:d7:d3:6f:8c:ad:67:41:92:
86:58:07:8a:33:a3:57:d5:cc:11:bd:b7:28:3d:cd:
b7:c4:3d:d9:3f:93:82:db:31:eb:1c:b8:55:d8:6e:
b0:45:48:21:70:78:95:81:0b:dd:ab:14:4c:9b:f2:
c8:0c:ac:19:db:95:d8:fd:03:03:bc:59:ea:78:c1:
38:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DD:BC:70:67:97:4A:2D:B8:10:DD:0D:AC:5E:2D:D1:35:02:DB:00
X509v3 Authority Key Identifier:
keyid:B8:B8:6C:C8:47:82:EA:41:0C:6D:87:C2:CD:3B:F8:6A:06:AA:17:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLhsyEeC6kEMbYfCzTv4agaqF7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:5b:63:67:62:af:9f:19:40:f0:24:cf:60:a9:a7:cb:54:85:
88:eb:02:c5:59:50:14:0e:90:30:1f:c5:45:3a:50:ca:e8:b3:
6b:2f:d0:eb:97:e2:aa:0b:d6:00:ca:d3:ad:5e:4e:c7:3c:15:
89:28:0b:7c:18:39:ce:4b:43:48:ff:5c:9e:c9:a7:87:e4:4f:
15:47:86:e0:4f:34:ab:4b:b8:aa:b2:a3:ea:65:96:5f:3d:a5:
32:77:bb:a1:a3:12:82:3d:d8:d8:fe:0c:3e:56:dc:f2:7b:8c:
e8:55:e1:ba:47:6c:78:ab:41:91:ff:7d:c9:79:34:74:fe:d8:
f2:60:c5:29:d4:a6:74:27:7c:bb:71:44:62:52:07:d7:3b:86:
5e:07:f8:4d:20:a9:33:22:74:70:8a:fc:6d:ad:c4:1d:be:2b:
e6:e5:fe:26:d9:29:6b:26:57:24:92:39:27:10:40:e4:9d:4c:
4c:04:98:17:a3:b6:81:84:78:f5:92:76:0f:25:7f:a6:9b:5d:
c3:73:40:67:87:2b:1b:6b:9f:35:e1:27:5e:3f:31:4e:72:ed:
d6:1e:d2:0e:95:5e:22:fc:fe:de:bf:8a:76:15:a0:49:23:45:
84:bb:ba:97:ee:99:49:26:bd:b7:70:f8:b9:0b:5e:47:a5:42:
2b:e6:ad:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:25 2025 by rpki-client