Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
File: Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft (raw, json)
Hash identifier: G1L61ue4F/28O8G2hXqJZW5AaozMpu2enyQhWrXaF88=
Subject key identifier: C0:3A:79:09:C0:88:47:9D:85:97:E5:E4:94:0F:CF:F8:61:BC:A9:3A
Authority key identifier: 53:1E:DB:25:54:D2:5D:1C:10:D8:71:4E:81:D3:6C:C2:95:D9:6B:F9
Certificate issuer: /CN=531edb2554d25d1c10d8714e81d36cc295d96bf9
Certificate serial: 01974C69DAC8F4CC13B22FB51DD355260DE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
Manifest number: 0A8A
Signing time: Sat 07 Jun 2025 22:01:35 +0000
Manifest this update: Sat 07 Jun 2025 22:01:35 +0000
Manifest next update: Sun 08 Jun 2025 22:01:35 +0000
Files and hashes: 1: Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl (hash: U0S8m5TSLaIzhXIc7Q8LUF1Vb2mLx41d8wBeiCSRW70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:da:c8:f4:cc:13:b2:2f:b5:1d:d3:55:26:0d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=531edb2554d25d1c10d8714e81d36cc295d96bf9
Validity
Not Before: Jun 7 22:01:35 2025 GMT
Not After : Jun 8 22:01:35 2025 GMT
Subject: CN=c03a7909c088479d8597e5e4940fcff861bca93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:be:4f:e9:cc:6f:ee:b3:ef:b2:55:22:64:5f:
2d:c5:72:79:3f:b4:42:7a:71:d0:f7:ca:0b:1f:83:
27:c7:e5:20:a9:0c:1c:0e:63:58:7d:eb:09:03:0d:
7e:68:9b:62:53:06:83:01:d7:29:1f:a7:d6:50:24:
2b:52:f8:87:2f:79:59:d8:ea:6b:be:af:08:f9:07:
c3:8d:e4:24:a4:99:9f:ea:a9:01:be:0b:8d:a4:f4:
0d:bf:44:87:f1:e7:ae:29:b9:cd:bb:a1:c5:71:cb:
5d:bd:82:32:25:f8:7d:74:cb:31:4f:3e:6e:af:00:
3b:50:55:20:df:ba:e5:8f:e3:93:2a:8f:87:27:b1:
46:6a:6e:08:c1:66:19:4b:31:be:4e:3a:b2:2c:d1:
f7:c6:ab:80:a0:fd:f6:06:5c:6f:16:56:e9:ba:56:
34:3a:9d:9d:ce:f6:c9:10:52:b7:8c:87:d6:3b:a2:
13:53:f6:97:f9:8e:aa:bd:48:fc:17:b6:b4:9c:b1:
99:2b:4f:68:dc:86:62:2a:bb:f5:1c:e3:8c:a1:db:
a4:9d:a7:80:a7:f1:31:97:44:77:6e:22:a5:8e:9d:
2e:8f:31:d5:7e:47:3f:50:fd:88:97:1a:ac:90:da:
99:d2:3f:af:a3:56:04:5e:fa:45:cc:45:4f:56:96:
c7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3A:79:09:C0:88:47:9D:85:97:E5:E4:94:0F:CF:F8:61:BC:A9:3A
X509v3 Authority Key Identifier:
keyid:53:1E:DB:25:54:D2:5D:1C:10:D8:71:4E:81:D3:6C:C2:95:D9:6B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8f:ac:66:d2:e6:d9:36:fb:bc:d4:d9:bb:c5:53:e4:e1:05:
25:94:a9:03:be:58:b8:22:39:92:28:8d:9c:01:a0:fa:f4:a5:
55:10:df:4b:66:1f:0a:a6:21:a4:26:34:c0:3d:ae:60:16:bc:
b8:cd:ed:03:c5:6a:9c:31:a8:c2:7a:32:a5:9c:1b:21:90:29:
8c:2b:99:19:3b:65:75:8a:4e:4d:65:d1:e9:f1:27:d1:dc:8f:
d0:57:06:c6:47:74:36:be:30:48:c2:4f:06:59:7f:67:d1:b4:
a3:4c:81:56:7d:68:43:50:80:c5:be:4d:01:01:82:1f:46:4d:
b5:02:49:e3:f3:cc:ff:67:7b:45:f1:d0:8f:d4:48:68:10:cd:
5e:5a:32:98:2c:2e:dd:a0:d4:cc:83:7d:c9:da:8f:a4:cd:0d:
a7:19:c3:8d:d0:c9:78:92:d1:30:45:09:59:b7:05:8a:a1:c6:
97:ea:03:39:d2:1c:cf:14:08:6e:85:e6:d6:f3:c8:48:9e:0f:
be:10:90:e6:78:92:d0:07:0c:56:2b:b2:1c:7f:1f:e7:87:88:
21:83:2e:0d:a6:e1:1a:ad:4b:fe:b5:5a:87:93:09:67:eb:cd:
02:24:68:94:e8:b7:65:a5:e7:c2:dc:c2:4e:3f:56:57:9b:c5:
46:d9:65:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:55:12 2025 by rpki-client