
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
File: Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft (raw, json)
Hash identifier: iCgg8JBupmZWUWGOH3Uoc7GUgcjieBshPIT54WFgJxs=
Subject key identifier: DE:89:DA:0B:81:D3:64:D9:DA:DF:92:B4:DB:E7:16:DD:D8:8E:AE:7C
Authority key identifier: 53:1E:DB:25:54:D2:5D:1C:10:D8:71:4E:81:D3:6C:C2:95:D9:6B:F9
Certificate issuer: /CN=531edb2554d25d1c10d8714e81d36cc295d96bf9
Certificate serial: 019923A06513FAC62912B6B4265158A83DAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
Manifest number: 0B7E
Signing time: Sun 07 Sep 2025 10:02:18 +0000
Manifest this update: Sun 07 Sep 2025 10:02:18 +0000
Manifest next update: Mon 08 Sep 2025 10:02:18 +0000
Files and hashes: 1: Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl (hash: Fhxu4TWvioPtHFmP3++DYG34vXSi6gUdwJavA0IIMx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:65:13:fa:c6:29:12:b6:b4:26:51:58:a8:3d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=531edb2554d25d1c10d8714e81d36cc295d96bf9
Validity
Not Before: Sep 7 10:02:18 2025 GMT
Not After : Sep 8 10:02:18 2025 GMT
Subject: CN=de89da0b81d364d9dadf92b4dbe716ddd88eae7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ba:79:92:39:f7:47:c1:b6:08:3b:e4:fd:13:
00:fc:55:94:ff:62:6d:c1:a5:92:49:f9:94:3d:2f:
4e:54:d5:c5:c4:32:81:0e:7d:74:7d:db:ef:9f:bd:
27:f7:a6:2b:4c:24:cc:20:85:19:c6:d4:63:af:17:
e2:77:f8:48:d5:47:75:8e:04:56:cb:36:7b:12:da:
4e:a1:3d:3e:33:b1:13:c7:d4:77:cf:2b:74:b7:c4:
52:3d:f0:2b:41:fe:23:3e:e5:e3:3d:84:4f:c7:00:
6d:d3:5b:09:2f:8c:3b:2d:83:9a:3c:8f:ff:17:9a:
c9:af:6e:35:df:aa:59:2e:a7:7a:cd:75:2b:b6:a4:
80:ff:00:53:85:16:eb:ba:82:41:4d:33:d9:27:96:
4f:6d:43:89:77:38:55:94:21:61:bc:41:f2:3c:b0:
8f:bf:2a:fc:e2:7f:d8:ef:01:04:99:cb:f7:01:0e:
dd:82:b9:71:63:69:77:1f:0a:e6:64:04:e6:47:63:
ee:66:2c:30:da:32:9b:d8:ba:6c:9f:08:3f:cb:a7:
39:7c:71:a9:d4:12:b7:9c:88:fb:6e:22:93:34:39:
51:ea:bd:47:20:96:2b:87:02:92:4b:45:9e:ce:8b:
62:7c:ee:db:80:e1:04:01:01:08:f0:9a:10:b1:7d:
f4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:89:DA:0B:81:D3:64:D9:DA:DF:92:B4:DB:E7:16:DD:D8:8E:AE:7C
X509v3 Authority Key Identifier:
keyid:53:1E:DB:25:54:D2:5D:1C:10:D8:71:4E:81:D3:6C:C2:95:D9:6B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:71:30:82:92:52:25:af:98:60:84:8f:1b:fc:93:9c:18:46:
c7:5f:4e:0c:e4:91:56:7b:60:54:c0:a7:29:2b:4e:76:1d:73:
b7:a8:a1:31:9d:50:7b:f4:90:67:6c:ae:82:03:58:7e:5d:eb:
9e:dc:7e:56:45:ec:6c:25:02:e7:ca:3d:0e:c3:fd:d8:f1:83:
2d:9f:57:49:5e:80:39:da:6c:3c:3f:2f:d0:66:c3:3b:bc:bd:
68:3f:54:d1:88:dd:ae:3b:d6:7f:c4:b6:eb:b4:71:2f:9a:6d:
e6:8d:88:94:5d:87:71:af:61:eb:b1:50:e5:63:5a:ae:8f:70:
98:0e:75:58:5b:a8:b6:01:ff:87:24:0a:5a:86:ae:4f:b5:b3:
e2:fc:c3:4b:07:7a:07:c2:b2:1a:58:a3:0e:7e:02:8e:c3:50:
0f:f3:2f:d7:21:68:a0:5a:00:7d:f1:33:ba:02:80:65:21:4d:
d0:a5:f7:86:01:93:28:8f:65:c8:07:bf:7a:64:e4:b1:68:39:
44:1f:64:f3:65:6c:90:f7:c1:6a:ae:34:42:01:46:9d:1c:36:
35:b5:73:79:5a:c4:a2:3e:22:fd:b2:57:5f:a0:ec:f2:6d:c9:
57:ae:b8:dd:49:3b:d6:73:5c:ff:47:9d:c6:42:19:69:6b:2b:
2a:54:85:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:51:16 2025 by rpki-client