Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
File: UfKdGEvMUP5lTd70AV3hfSRv0qM.mft (raw, json)
Hash identifier: G/8KS5C2zsbJxAx4Ns2ERfQZqIGB7CKt2b/cs0TVkvg=
Subject key identifier: 61:45:45:CB:0B:C8:DB:FC:C1:CB:0D:D3:4B:2F:1E:F7:67:EA:72:10
Authority key identifier: 51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3
Certificate issuer: /CN=51f29d184bcc50fe654ddef4015de17d246fd2a3
Certificate serial: 0199233116DD59523EB7E492FD1352B40BDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
Manifest number: 66
Signing time: Sun 07 Sep 2025 08:00:43 +0000
Manifest this update: Sun 07 Sep 2025 08:00:43 +0000
Manifest next update: Mon 08 Sep 2025 08:00:43 +0000
Files and hashes: 1: UfKdGEvMUP5lTd70AV3hfSRv0qM.crl (hash: a8f+G76s5Qs5sZrFIvf22F1uHuBxSRguFZAzltSENCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:16:dd:59:52:3e:b7:e4:92:fd:13:52:b4:0b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51f29d184bcc50fe654ddef4015de17d246fd2a3
Validity
Not Before: Sep 7 08:00:43 2025 GMT
Not After : Sep 8 08:00:43 2025 GMT
Subject: CN=614545cb0bc8dbfcc1cb0dd34b2f1ef767ea7210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4e:5b:04:ca:79:22:4c:5d:f4:66:2c:a5:d9:
de:a6:cc:82:c5:96:8d:8e:10:a3:d8:b0:cb:e3:b7:
43:12:73:25:74:3c:5e:07:fd:76:1c:35:05:5e:c4:
e2:2f:cf:05:7a:ed:4e:47:7b:74:a6:80:09:db:51:
0d:d2:82:2e:65:80:fd:48:74:e8:ed:87:06:22:62:
f9:9c:25:71:29:7b:d3:2a:64:04:51:aa:74:1a:75:
cf:ad:c2:30:c0:b0:a8:35:aa:3c:60:03:c0:11:92:
cc:fe:97:15:8a:02:59:60:43:3c:89:7b:74:94:f7:
22:81:99:72:e7:1d:43:34:54:70:85:b3:22:74:7f:
01:69:5d:11:f2:81:c3:61:f3:fb:c3:8d:b4:91:46:
36:30:b7:3f:79:73:eb:c3:22:e3:37:45:04:27:a1:
d5:2f:f2:3b:74:d5:43:97:6c:f8:12:dd:05:97:4b:
ae:c8:25:b6:c2:78:3d:45:cf:f2:25:e3:d8:e1:7b:
73:29:7f:db:b7:3c:90:de:4e:6a:57:a6:2a:83:7a:
ea:7c:1b:7a:62:fa:3a:33:ca:24:5c:11:f0:5f:45:
8b:8f:ac:09:ca:f5:2c:88:5d:18:e2:e5:e5:f9:55:
1a:df:5a:9d:ea:5a:78:1a:91:6e:91:41:d9:76:ee:
93:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:45:45:CB:0B:C8:DB:FC:C1:CB:0D:D3:4B:2F:1E:F7:67:EA:72:10
X509v3 Authority Key Identifier:
keyid:51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:b9:9d:ea:5b:31:ca:3d:13:c1:c8:f3:96:e9:5f:04:e3:b5:
91:ab:a5:31:e0:3e:a3:1b:8e:dc:83:fc:38:be:f1:e7:95:7b:
a8:97:ba:69:f2:f9:7b:bf:a4:8c:ea:ea:11:4d:5c:8d:2f:5a:
c2:25:c4:17:f9:48:38:d6:5f:c9:5d:4a:cf:6f:7f:f2:65:f9:
0d:02:46:bc:f3:07:62:56:68:61:4b:c3:d3:ee:2a:1e:19:4d:
b3:d6:56:a9:34:48:60:21:0d:9e:bd:2d:1a:07:24:e4:4c:19:
8a:15:5f:09:03:ec:ce:5d:ee:28:d9:56:60:29:0c:7d:44:41:
62:09:18:89:8b:b0:0a:77:0b:ed:3c:35:48:f7:6e:18:0f:fc:
48:d1:5d:0e:45:bf:da:65:0b:46:f2:30:1d:34:a8:4f:2b:73:
b8:1b:87:23:b4:cc:1c:0e:a0:66:13:12:bb:10:83:58:96:9b:
c3:65:c3:88:b1:1c:84:25:f7:62:e3:04:70:a5:b4:43:61:0f:
a1:39:2a:8c:ff:96:67:58:e4:11:4c:78:97:05:04:56:33:39:
9b:1e:d3:8a:c0:16:a8:d2:19:1b:93:3e:5b:67:e7:43:bc:10:
91:c7:25:3b:b1:9b:f8:02:cd:5d:ef:d0:2a:8d:51:f5:95:5d:
33:01:75:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:34:12 2025 by rpki-client