Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
File: g-ULKlHI9a25N7IqkMcg9rBPKXM.mft (raw, json)
Hash identifier: Xb0brcdB1xy0jTz+94/hkb4OK2j2ei5ufgm/ERt6w6Y=
Subject key identifier: 2F:A3:6F:F1:E4:39:6B:D4:57:DE:BC:D3:8B:6C:03:B0:20:54:8D:09
Authority key identifier: 83:E5:0B:2A:51:C8:F5:AD:B9:37:B2:2A:90:C7:20:F6:B0:4F:29:73
Certificate issuer: /CN=83e50b2a51c8f5adb937b22a90c720f6b04f2973
Certificate serial: 0197CC4CB00CD2CE940C35AC9160039A89E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
Manifest number: 13D3
Signing time: Wed 02 Jul 2025 18:01:07 +0000
Manifest this update: Wed 02 Jul 2025 18:01:07 +0000
Manifest next update: Thu 03 Jul 2025 18:01:07 +0000
Files and hashes: 1: g-ULKlHI9a25N7IqkMcg9rBPKXM.crl (hash: grKk3mNZqHBmPtpAiR99gQXiUznGvXPYlGx2SMOsj8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 18:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:4c:b0:0c:d2:ce:94:0c:35:ac:91:60:03:9a:89:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e50b2a51c8f5adb937b22a90c720f6b04f2973
Validity
Not Before: Jul 2 18:01:07 2025 GMT
Not After : Jul 3 18:01:07 2025 GMT
Subject: CN=2fa36ff1e4396bd457debcd38b6c03b020548d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e5:54:3f:2c:d5:a7:1e:8f:e8:ea:d2:58:7d:
de:5f:b5:e8:60:0f:4e:a8:67:78:91:3b:2a:20:f4:
43:3c:49:01:db:f9:e4:c4:2d:2e:e0:4e:c2:61:43:
7a:45:ac:2d:4d:63:26:9e:1a:64:d6:17:7f:99:59:
6b:d3:e1:55:97:79:ef:d0:28:f2:ca:8a:bb:ec:22:
68:6b:e6:8c:a8:a3:bf:74:e1:34:01:09:f1:01:1d:
d4:e9:00:40:49:8f:74:f4:9c:2f:ee:11:43:0e:7b:
fc:ea:98:d0:a2:4a:70:2e:59:02:e4:3b:a3:70:27:
83:72:e1:26:35:b4:67:c0:50:66:fe:9e:35:fc:1d:
98:25:c0:c7:c7:7e:e7:a8:b9:05:32:60:b6:b4:ad:
88:eb:d4:ee:38:f2:5b:3b:9a:af:a4:53:7f:98:ff:
a8:c9:98:82:0c:7b:4a:38:f3:47:0b:02:e6:f5:16:
a0:a4:80:c3:47:4c:6c:05:07:17:06:c5:9f:00:40:
7b:37:b5:1b:45:d6:1f:f3:1a:f5:39:0e:7a:8e:34:
54:39:b8:a5:ef:eb:64:fb:84:a4:00:d3:01:47:ee:
92:65:0d:eb:9b:ed:ed:e8:c7:ae:52:e5:94:ca:7b:
a7:31:31:03:37:66:5b:90:ee:5e:e3:e6:7a:d2:5c:
79:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A3:6F:F1:E4:39:6B:D4:57:DE:BC:D3:8B:6C:03:B0:20:54:8D:09
X509v3 Authority Key Identifier:
keyid:83:E5:0B:2A:51:C8:F5:AD:B9:37:B2:2A:90:C7:20:F6:B0:4F:29:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:38:f6:fd:74:5e:09:8d:47:53:b5:76:22:52:6b:69:82:f2:
d4:bd:fb:6f:e3:55:6c:37:ad:05:c7:b4:7d:4e:01:01:5c:48:
84:94:1a:64:a2:45:9b:54:09:d4:bf:ae:ff:eb:77:02:3a:d7:
04:a4:b3:37:11:1a:ae:72:c8:f1:93:0a:41:72:d5:55:c3:2e:
e6:f6:30:63:93:27:d0:d5:68:6c:10:3f:67:67:5b:93:c7:17:
6c:18:b1:7a:8b:70:7a:6e:6e:3f:f2:ce:b8:a4:4e:b3:c9:e7:
c6:27:50:41:a2:61:48:b3:42:44:6a:84:e4:a5:82:1f:7d:74:
1c:28:63:2f:17:45:f9:de:b8:22:66:41:a3:84:cc:3a:0f:fd:
28:74:c4:1a:c4:fc:c4:c2:cc:65:2c:1d:86:fc:6e:3c:2f:35:
93:90:86:be:18:35:61:a1:14:f0:e8:1e:9f:46:59:aa:cd:2d:
ec:9c:73:ad:ce:e5:19:8a:9e:4a:67:c6:fe:e5:05:8f:82:e4:
bc:71:89:62:ef:8a:89:d7:95:0f:6b:ea:54:11:be:01:35:68:
f2:c6:47:c9:23:69:b6:f2:8b:23:1a:45:66:89:f9:d5:4d:6f:
f7:14:d9:d6:fc:a0:38:f7:e3:f9:09:92:2e:e8:57:06:bc:5f:
3e:86:91:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 23:13:46 2025 by rpki-client