Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft
File: Uuopd4vrKAAYKU4jlcv6AELI94o.mft (raw, json)
Hash identifier: HQBeeD0XZq1dVWqaeDWch2+21tY/PQTOlN0YT+mbPvc=
Subject key identifier: C9:75:09:18:FF:C3:FD:D6:82:E7:30:CE:5D:51:F7:5B:24:64:38:A9
Authority key identifier: 52:EA:29:77:8B:EB:28:00:18:29:4E:23:95:CB:FA:00:42:C8:F7:8A
Certificate issuer: /CN=52ea29778beb280018294e2395cbfa0042c8f78a
Certificate serial: 019923A01E57120D2CC85A61003D0748DB0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uuopd4vrKAAYKU4jlcv6AELI94o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft
Manifest number: 089A
Signing time: Sun 07 Sep 2025 10:02:00 +0000
Manifest this update: Sun 07 Sep 2025 10:02:00 +0000
Manifest next update: Mon 08 Sep 2025 10:02:00 +0000
Files and hashes: 1: Uuopd4vrKAAYKU4jlcv6AELI94o.crl (hash: subPOrOew4wrwkQ3CARN+a9DJN/glpFm/aGRl9YNpAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uuopd4vrKAAYKU4jlcv6AELI94o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:1e:57:12:0d:2c:c8:5a:61:00:3d:07:48:db:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ea29778beb280018294e2395cbfa0042c8f78a
Validity
Not Before: Sep 7 10:02:00 2025 GMT
Not After : Sep 8 10:02:00 2025 GMT
Subject: CN=c9750918ffc3fdd682e730ce5d51f75b246438a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1e:a7:ee:a4:f9:5e:49:c4:c6:48:d5:ab:39:
61:ba:61:df:64:25:17:2d:06:d1:8b:4a:24:95:77:
9b:62:27:e0:44:9f:58:f7:56:1b:9e:1f:8b:59:f4:
d9:c4:e3:07:c9:32:b2:bf:d4:1f:25:e0:f7:64:68:
e7:24:1f:c8:cc:b6:13:47:76:09:ee:43:c0:78:db:
94:32:35:3e:a0:25:03:2e:2c:a4:f7:5a:3e:d6:c3:
97:c1:b6:ca:ba:79:15:1d:b9:e0:c4:73:6a:40:c2:
31:3e:6e:26:b2:7b:1b:8e:a3:25:26:e7:78:d0:70:
26:19:d3:17:c9:c0:16:6d:57:2b:89:c6:06:bc:31:
ce:06:fd:f1:7c:7e:31:25:79:72:6e:81:6f:e5:e6:
90:7e:32:da:85:c1:f0:29:b8:8f:5a:68:57:97:ba:
0a:62:f4:0f:5a:b7:a9:ad:66:5d:6f:84:0e:85:6a:
a1:00:95:5b:ce:25:7e:57:5f:de:4c:fd:32:ea:43:
70:e1:c1:24:7a:b9:66:2f:b1:29:1f:4a:8e:85:01:
78:59:2d:13:69:0b:bd:1f:82:f2:df:c8:d4:08:5e:
d2:03:1a:af:68:ee:89:ca:d3:c9:e0:a0:dd:4d:d6:
5f:e9:9f:6b:7c:71:96:e6:c3:ba:d1:b2:c5:30:30:
7e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:75:09:18:FF:C3:FD:D6:82:E7:30:CE:5D:51:F7:5B:24:64:38:A9
X509v3 Authority Key Identifier:
keyid:52:EA:29:77:8B:EB:28:00:18:29:4E:23:95:CB:FA:00:42:C8:F7:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uuopd4vrKAAYKU4jlcv6AELI94o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:28:a8:12:2a:eb:58:82:6a:7d:5c:e2:37:1b:9e:bf:c8:fc:
de:9c:80:6b:e4:a4:2b:ba:5e:eb:80:5d:d4:4d:3a:8f:d7:bd:
99:3e:0a:4d:fb:1f:44:fc:a6:35:a9:31:78:45:58:42:7a:9c:
cb:6c:0b:28:9f:9b:a1:7b:85:a2:77:d5:77:18:01:63:e2:c4:
d4:fd:82:d3:15:18:c4:e5:7a:c3:e4:7f:96:17:71:2c:22:58:
f1:58:03:6b:7d:74:25:89:d4:e5:5a:b9:44:c9:09:ad:59:0a:
f1:27:09:97:32:7e:13:12:43:fb:50:67:30:a7:0b:7e:24:8b:
1f:78:16:ae:f9:aa:03:9e:08:75:6a:06:1a:53:33:ad:2d:89:
e0:90:da:c4:0e:50:44:5d:e9:d1:ec:60:ca:e4:1f:44:3d:72:
a6:cc:02:75:65:97:84:5f:76:c8:84:09:67:1c:ab:6c:70:86:
ff:77:fb:15:f4:3f:0b:b3:91:f8:b6:9f:22:4a:f6:e5:59:cf:
77:1d:7f:58:ff:0c:21:8e:83:93:00:dd:41:4a:b3:95:ea:e2:
7b:60:ea:55:fb:db:84:3e:c7:88:2a:71:ca:b4:9b:55:d3:33:
c2:50:47:bf:c0:ae:a4:5e:fc:ec:31:f8:fc:1c:c9:70:f5:1c:
f6:46:d6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:38 2025 by rpki-client