Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
File: ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft (raw, json)
Hash identifier: dyVlnHO+jvmkii/0mVir2C4hXr6OlUp/kFzrImUvqTY=
Subject key identifier: FA:BE:B8:94:4A:B2:BA:93:DF:BC:15:2E:CF:9A:9C:5F:8F:C1:78:8F
Authority key identifier: BA:58:27:55:72:43:48:93:B9:CB:D1:4E:4A:DE:70:89:29:E4:67:F8
Certificate issuer: /CN=ba58275572434893b9cbd14e4ade708929e467f8
Certificate serial: 019923A079F032AA7820904572D55954AC65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
Manifest number: 124D
Signing time: Sun 07 Sep 2025 10:02:23 +0000
Manifest this update: Sun 07 Sep 2025 10:02:23 +0000
Manifest next update: Mon 08 Sep 2025 10:02:23 +0000
Files and hashes: 1: ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl (hash: UvmjWeAVR9McosO4+bm0PYOHzlhr62/FTUx2jVSq6zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:79:f0:32:aa:78:20:90:45:72:d5:59:54:ac:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba58275572434893b9cbd14e4ade708929e467f8
Validity
Not Before: Sep 7 10:02:23 2025 GMT
Not After : Sep 8 10:02:23 2025 GMT
Subject: CN=fabeb8944ab2ba93dfbc152ecf9a9c5f8fc1788f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:39:9d:72:b0:29:13:24:7e:2b:87:25:e7:1c:
11:e9:ae:71:17:8b:21:70:6c:74:df:13:45:a2:63:
b7:32:7c:2e:38:0f:59:f0:34:73:23:d2:df:c3:93:
14:65:6a:64:34:f7:65:45:4f:f9:c3:7b:85:2f:ed:
12:76:20:00:a5:f9:69:f3:ae:31:fe:94:ae:05:8f:
66:d9:fb:53:73:4f:2d:4a:dd:da:2b:34:b3:77:0b:
2e:36:31:d5:f4:92:a7:e7:4b:37:63:b6:af:d4:fa:
a2:bc:7a:f7:f8:60:f0:18:55:c2:d5:0c:84:b8:7b:
5c:c7:7e:60:76:96:fc:58:48:fa:0e:34:8e:2b:ef:
7e:d9:13:83:2d:6a:37:8c:20:43:56:4c:dc:0b:4f:
3f:12:a0:49:46:82:33:aa:57:21:0e:f0:6f:57:8d:
d0:ac:a5:68:83:59:b5:10:7b:92:f0:6b:e4:d3:7d:
45:ec:18:ab:90:95:7e:38:a2:d5:f1:7f:e4:17:5a:
80:fa:82:ef:0c:0a:7a:9d:ee:ca:da:5a:40:8d:ea:
25:78:3f:6b:15:77:ba:0a:60:06:4a:f2:2d:1a:84:
d0:e0:7f:bf:ec:53:45:2d:c3:73:fa:c2:2e:8b:73:
c6:9b:4a:9f:85:5a:ce:a5:75:74:96:3a:57:e4:14:
12:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BE:B8:94:4A:B2:BA:93:DF:BC:15:2E:CF:9A:9C:5F:8F:C1:78:8F
X509v3 Authority Key Identifier:
keyid:BA:58:27:55:72:43:48:93:B9:CB:D1:4E:4A:DE:70:89:29:E4:67:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:32:fc:20:8b:6d:ac:31:f0:6b:1d:fb:ba:52:b5:50:47:5e:
ab:4d:a8:fe:cd:f1:51:89:76:3d:48:5d:32:ec:00:af:bd:2f:
bd:86:84:5a:1e:8d:a4:65:d7:c9:8f:ba:1b:fe:30:88:bf:9d:
28:8c:26:b0:53:42:e7:81:6d:b2:de:cc:0f:38:a7:f8:82:73:
91:38:6d:ab:4b:6a:94:c4:b6:b0:e6:de:76:0f:7f:03:b3:84:
e2:84:dc:cd:fd:d0:e4:81:07:b8:6a:a0:57:45:66:7c:c2:9a:
c5:1d:b5:68:25:55:6c:81:13:b8:0b:1e:06:57:fb:94:bd:e4:
47:80:31:a5:03:24:c0:d2:71:ea:47:05:50:25:02:bc:b0:c8:
66:40:08:d7:10:f1:f9:24:db:e4:73:9c:f6:35:e9:f6:a7:ce:
1a:a6:f1:2b:ea:b3:11:9a:58:08:7d:a2:33:d1:38:d0:2d:34:
27:80:54:4e:6a:e1:7d:e5:0f:55:11:f1:60:f3:e3:fb:f9:96:
23:10:c8:60:6e:93:ba:c2:42:b3:34:21:c8:99:96:05:5a:29:
5b:ab:f5:00:8f:db:f0:4e:84:46:54:64:29:af:be:71:00:8b:
86:64:72:ae:f0:04:06:2d:6c:eb:4a:34:21:7d:82:01:53:66:
51:a3:f0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:56 2025 by rpki-client