
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
File: g-ULKlHI9a25N7IqkMcg9rBPKXM.mft (raw, json)
Hash identifier: o7UrI8zTbtz7nb1P0XGgkCVYLk2EKTR/be6lMFZScWA=
Subject key identifier: 93:AE:D0:61:25:8D:7B:9B:8D:19:8A:A9:CC:35:EA:95:77:7C:F2:97
Authority key identifier: 83:E5:0B:2A:51:C8:F5:AD:B9:37:B2:2A:90:C7:20:F6:B0:4F:29:73
Certificate issuer: /CN=83e50b2a51c8f5adb937b22a90c720f6b04f2973
Certificate serial: 0199221E27FC8E6AD00A18B579A01018C48D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
Manifest number: 1484
Signing time: Sun 07 Sep 2025 03:00:25 +0000
Manifest this update: Sun 07 Sep 2025 03:00:25 +0000
Manifest next update: Mon 08 Sep 2025 03:00:25 +0000
Files and hashes: 1: g-ULKlHI9a25N7IqkMcg9rBPKXM.crl (hash: SDaCg0Ng5pUY2xaHhNidetJpbD14Zb/S6t1f4zgpUiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:27:fc:8e:6a:d0:0a:18:b5:79:a0:10:18:c4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e50b2a51c8f5adb937b22a90c720f6b04f2973
Validity
Not Before: Sep 7 03:00:25 2025 GMT
Not After : Sep 8 03:00:25 2025 GMT
Subject: CN=93aed061258d7b9b8d198aa9cc35ea95777cf297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:49:1c:e9:cd:a3:dd:ae:a3:4c:4f:10:a6:1e:
6a:55:61:54:10:3f:a8:e9:4f:2f:c3:2f:fc:cd:61:
ab:6f:2a:f1:99:63:ea:28:99:fb:2c:9f:82:72:52:
3c:7a:bb:50:f0:26:81:da:e3:04:91:60:bb:7b:fe:
d3:9b:80:de:b3:e8:46:ae:7f:58:c3:4f:7e:3f:f9:
a9:f7:47:83:b5:74:0c:35:45:77:32:fd:59:6b:28:
39:9c:9f:d1:27:ad:32:ac:71:fc:84:7a:01:d8:d3:
0c:88:92:45:3b:1e:e4:ae:3c:3d:29:ae:6e:bb:7e:
7a:aa:cf:61:cd:0b:8b:60:c0:58:9a:ae:27:e7:e5:
28:2e:81:b1:6b:32:df:6e:7b:ab:e4:3b:e5:4f:48:
7b:b9:84:9b:a9:cb:e0:72:96:8f:f0:99:14:da:f7:
99:93:28:9a:67:9b:4e:7e:03:25:74:61:ce:07:f0:
27:06:6e:da:f1:7b:8a:ea:f6:43:2f:a9:71:c7:35:
26:01:79:b1:26:88:6c:56:a4:a1:f7:c8:d4:d5:3d:
25:70:d7:1d:77:87:bc:ba:4f:71:6c:0a:cc:f7:9d:
a4:08:9f:e0:a1:48:5d:b6:cb:04:60:ee:4f:ce:16:
53:fa:f1:bb:09:1c:40:e4:2b:e6:eb:67:8d:1b:cf:
07:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AE:D0:61:25:8D:7B:9B:8D:19:8A:A9:CC:35:EA:95:77:7C:F2:97
X509v3 Authority Key Identifier:
keyid:83:E5:0B:2A:51:C8:F5:AD:B9:37:B2:2A:90:C7:20:F6:B0:4F:29:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e7:32:32:56:99:dc:95:11:bc:e1:2c:ab:be:48:3c:5a:75:
28:04:88:84:b1:f0:38:ab:13:4d:31:7e:bd:06:d3:27:b6:e9:
15:84:55:58:10:26:86:00:1a:ab:58:18:64:dd:2c:d6:fb:b1:
87:d8:3a:a4:e7:91:bc:89:ac:36:37:cc:68:96:b6:f4:46:2a:
b3:df:e5:a0:da:19:e7:58:0b:9c:7b:2d:30:72:2d:b1:bf:3d:
a2:b8:cc:26:35:51:b3:7c:10:b3:f6:86:dd:c4:23:7d:c6:ac:
69:fe:b0:28:a0:71:62:d4:39:34:6c:f5:85:56:1b:c5:e6:83:
3d:89:a6:16:14:4a:cb:7e:b6:6b:09:ad:52:55:24:18:97:d5:
c2:2a:22:5d:03:25:b4:e8:cd:39:1a:d4:63:7f:d8:81:fc:17:
99:ef:1e:6e:52:b5:41:97:f1:3d:22:27:02:c1:d8:fd:17:81:
0c:89:cf:de:3e:f4:51:0e:7b:60:8c:0d:91:f3:57:f1:03:95:
d9:37:25:73:da:43:5f:a6:72:cb:45:2a:31:33:c3:40:ff:bb:
e8:db:83:90:58:49:75:35:0f:06:62:9e:43:fd:35:cf:3c:e1:
28:3e:cb:15:43:81:81:02:b0:3b:e7:d6:ff:a7:a0:b8:22:25:
76:ba:ca:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:37:30 2025 by rpki-client