Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.mft
File: Unzgu6rDVu3srWci8qhvjgZJCY4.mft (raw, json)
Hash identifier: 77HVVhWlNCJx2lEBuQR4OG2xeKG86+HKg78qj7RTIOw=
Subject key identifier: 1E:50:F4:31:A2:89:0E:8B:FC:57:1C:1D:DC:FD:20:F9:07:6B:8B:E5
Authority key identifier: 52:7C:E0:BB:AA:C3:56:ED:EC:AD:67:22:F2:A8:6F:8E:06:49:09:8E
Certificate issuer: /CN=527ce0bbaac356edecad6722f2a86f8e0649098e
Certificate serial: 01992255160DFF69B39CD8B21786A134C96D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Unzgu6rDVu3srWci8qhvjgZJCY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.mft
Manifest number: 1601
Signing time: Sun 07 Sep 2025 04:00:25 +0000
Manifest this update: Sun 07 Sep 2025 04:00:25 +0000
Manifest next update: Mon 08 Sep 2025 04:00:25 +0000
Files and hashes: 1: Unzgu6rDVu3srWci8qhvjgZJCY4.crl (hash: JZIonQNeaGXvl0A4jsCSzODKplHeUPGbYuTsOp8x62g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Unzgu6rDVu3srWci8qhvjgZJCY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:16:0d:ff:69:b3:9c:d8:b2:17:86:a1:34:c9:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=527ce0bbaac356edecad6722f2a86f8e0649098e
Validity
Not Before: Sep 7 04:00:25 2025 GMT
Not After : Sep 8 04:00:25 2025 GMT
Subject: CN=1e50f431a2890e8bfc571c1ddcfd20f9076b8be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d0:64:e0:4a:1f:c1:2f:7d:e4:07:a9:d4:42:
e3:0d:96:7e:45:2d:1e:90:6a:22:05:ac:e4:77:00:
8a:83:62:77:73:df:b4:1b:42:6b:ee:5d:0c:e0:5e:
1f:30:67:7e:12:d7:f7:b3:65:e5:2a:05:27:58:08:
93:10:04:1b:51:4e:cf:a8:1a:4f:cf:7b:c8:1a:4c:
de:c7:8f:2f:87:4c:07:83:e0:74:b6:25:57:9a:78:
58:f7:c9:a5:23:df:97:c2:f6:0c:ee:05:67:92:8a:
4e:e5:7c:8b:c1:9a:c0:bd:e4:7a:ba:aa:de:15:10:
e8:89:6d:4a:0b:55:06:5d:37:26:b7:66:5a:d0:c0:
76:21:b1:b1:b0:cf:e8:08:a3:db:e4:a9:6c:71:46:
f2:4e:2f:dd:a9:b4:7b:5e:5a:b7:1c:cf:8a:f6:8b:
0c:92:0b:a4:04:ca:aa:b8:10:98:49:de:06:89:f6:
4b:57:8e:9f:dc:b4:26:8f:35:a7:1b:05:45:bd:1f:
10:16:cd:df:41:36:57:6b:45:a9:6e:bc:44:ab:4b:
fa:aa:ef:c4:ae:aa:5f:ed:c8:7c:9c:5e:c4:72:2a:
6b:95:80:a5:c9:de:63:30:95:0f:a7:88:76:7f:2d:
2f:8a:2c:27:01:31:f7:42:3a:cf:d5:45:fc:70:9c:
c6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:50:F4:31:A2:89:0E:8B:FC:57:1C:1D:DC:FD:20:F9:07:6B:8B:E5
X509v3 Authority Key Identifier:
keyid:52:7C:E0:BB:AA:C3:56:ED:EC:AD:67:22:F2:A8:6F:8E:06:49:09:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Unzgu6rDVu3srWci8qhvjgZJCY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:75:24:7a:c8:5e:39:04:3e:37:cf:f6:e2:3b:1c:3e:01:ab:
b6:b8:26:97:de:56:13:0f:27:3f:1e:8c:8e:60:b5:a4:ae:ee:
df:c0:67:b8:21:92:75:37:79:1d:22:6a:e1:81:4e:a6:8b:46:
92:5c:65:50:47:80:76:5d:fb:7a:b4:14:fe:c4:ed:4d:7a:50:
51:6d:76:bc:5d:89:26:69:40:75:2b:81:07:56:9c:3f:ed:40:
28:bb:98:68:aa:14:6c:78:8a:a2:f4:0f:00:f8:e3:70:37:7a:
43:fd:99:42:55:1a:87:86:2a:01:95:c9:c8:20:89:12:90:24:
d6:64:3e:fb:d1:69:09:97:63:2b:fa:39:77:87:a4:ac:7f:26:
07:63:6a:1d:30:69:74:6e:f3:7f:4b:b5:c9:c8:51:81:70:37:
f7:d2:c1:2d:24:e8:85:bf:2e:18:a3:12:1a:d3:cf:ac:af:13:
2c:3c:f8:b1:4d:f0:b8:fb:ab:8a:a9:2c:2a:d9:47:2c:fa:bb:
1d:4d:3e:0e:07:e0:75:eb:c9:aa:63:75:89:ad:22:da:d2:25:
44:b4:79:f7:53:e6:81:b2:95:6f:b4:b4:1b:e1:d0:09:49:96:
96:e9:f5:8a:7a:71:42:4b:0e:8a:db:d4:48:0b:14:b0:b7:af:
d8:cb:f5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:10 2025 by rpki-client