Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.mft
File: URG_0pCvtSDrpBT3ijl1C36Z9MU.mft (raw, json)
Hash identifier: yWNnyvlfZYS3XQJ3frNKaAIVKNJW+NmMLSBbYd517mw=
Subject key identifier: 43:6A:08:B8:33:32:1C:DD:25:FF:91:82:02:F0:01:82:1C:6A:F7:34
Authority key identifier: 51:11:BF:D2:90:AF:B5:20:EB:A4:14:F7:8A:39:75:0B:7E:99:F4:C5
Certificate issuer: /CN=5111bfd290afb520eba414f78a39750b7e99f4c5
Certificate serial: 0199228CA2283300FD1C61D40F5A82DBE475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/URG_0pCvtSDrpBT3ijl1C36Z9MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.mft
Manifest number: 037E
Signing time: Sun 07 Sep 2025 05:01:05 +0000
Manifest this update: Sun 07 Sep 2025 05:01:05 +0000
Manifest next update: Mon 08 Sep 2025 05:01:05 +0000
Files and hashes: 1: URG_0pCvtSDrpBT3ijl1C36Z9MU.crl (hash: VpZLKyNTDgixPW06GJCaVP85UcWVu8wR/PqjerRduTY=)
2: zVUl367uAuWMVUPRoi840j0jiPg.roa (hash: qS11jDGkCNzMKbCIBI9UQyUrb/zBjJR7FmPuRC9w0J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.mft
rsync://rpki.ripe.net/repository/DEFAULT/URG_0pCvtSDrpBT3ijl1C36Z9MU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:a2:28:33:00:fd:1c:61:d4:0f:5a:82:db:e4:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5111bfd290afb520eba414f78a39750b7e99f4c5
Validity
Not Before: Sep 7 05:01:05 2025 GMT
Not After : Sep 8 05:01:05 2025 GMT
Subject: CN=436a08b833321cdd25ff918202f001821c6af734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:30:43:5a:d7:e7:48:df:8b:02:8d:a2:40:53:
dc:3d:70:75:e5:c0:ad:3b:1d:ab:88:7c:a2:7a:dc:
64:6a:0d:82:9d:9c:2c:5a:5d:72:f9:21:c1:87:41:
17:fe:3c:15:7d:69:eb:bd:12:09:d9:a6:82:c8:8a:
44:ee:fb:c7:51:2a:b4:0f:76:85:0a:62:71:a8:33:
ef:d2:f8:92:fb:f5:54:2e:12:e2:73:20:05:9c:f3:
c6:f3:f5:ab:b1:ab:fd:1e:56:60:db:41:24:e4:64:
61:80:c1:52:21:46:14:6f:ad:52:33:09:70:b1:6a:
f8:17:77:61:1a:d7:9c:ef:b1:78:ce:db:89:49:e6:
d8:5a:57:70:2a:05:aa:49:03:79:f8:65:3c:e4:61:
59:b5:7e:e9:cd:2b:37:66:9c:84:57:12:46:3c:59:
bb:4d:6e:4e:59:81:79:f3:c4:9e:0d:20:1b:0c:db:
0c:7f:92:14:89:16:50:bb:f1:55:19:f4:6b:6e:8c:
08:f9:1f:f3:09:b4:f5:12:5c:f1:fd:40:ca:cf:03:
e6:e0:87:cc:48:0a:f8:74:03:63:4a:ce:95:27:87:
f1:87:52:46:f2:fa:59:b2:b9:fd:1b:06:75:ab:05:
ff:a0:a5:09:38:52:0c:ce:01:05:44:ab:5a:46:76:
a4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6A:08:B8:33:32:1C:DD:25:FF:91:82:02:F0:01:82:1C:6A:F7:34
X509v3 Authority Key Identifier:
keyid:51:11:BF:D2:90:AF:B5:20:EB:A4:14:F7:8A:39:75:0B:7E:99:F4:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/URG_0pCvtSDrpBT3ijl1C36Z9MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:6c:0f:5a:77:1c:43:c2:3e:f9:dd:2f:c3:f4:8a:df:7f:de:
62:ca:22:25:47:56:c0:27:9a:0f:82:16:27:33:d3:c0:14:7a:
39:0e:a6:52:11:b8:13:a3:3f:d4:ca:1b:e0:d7:70:3f:a8:26:
71:ca:0f:ec:4d:97:70:fa:c6:99:f0:91:b2:80:b5:46:d8:df:
f2:15:3a:70:ae:2b:73:08:95:36:d6:13:4d:40:69:6b:22:2e:
ad:8a:03:f2:fa:72:e0:e3:52:50:6f:90:8e:47:6a:24:83:a1:
0a:8e:dc:d2:75:17:46:1c:59:a9:af:b3:78:1f:3d:fd:c2:00:
4c:81:01:53:93:28:fb:38:94:d8:cb:19:09:ee:7d:a0:1e:2a:
db:c5:79:ea:26:63:32:dd:10:be:05:ef:82:f6:73:1a:34:74:
47:16:3d:a9:25:5e:a1:5c:05:57:8f:bb:a6:92:32:9d:d4:b2:
c2:96:8d:72:3c:63:e3:78:96:f5:86:7e:b3:dc:96:80:17:03:
8e:f4:06:25:5e:b8:e0:43:46:b1:c2:a5:be:c5:f1:fd:34:bc:
f4:b3:4e:19:7d:4f:be:f7:7a:4c:2e:82:9d:88:5e:57:54:c6:
b5:44:9e:3e:c4:32:d2:d9:43:56:79:4d:54:33:b1:ac:b2:8b:
f7:ff:6a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:48 2025 by rpki-client