Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
File: 1-uafCinvjYwi2dbs3jowfYlNXBk.mft (raw, json)
Hash identifier: zHkehggCfGpERrIOycbbDZidriIeDbIvwr/D5zP+VPI=
Subject key identifier: 93:55:5B:94:85:72:64:22:F6:8A:F5:0A:1A:C2:F9:EC:35:57:EF:FB
Authority key identifier: FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19
Certificate issuer: /CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19
Certificate serial: 0199172D68CE032EECE7406E28C534429989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
Manifest number: 071A
Signing time: Fri 05 Sep 2025 00:01:15 +0000
Manifest this update: Fri 05 Sep 2025 00:01:15 +0000
Manifest next update: Sat 06 Sep 2025 00:01:15 +0000
Files and hashes: 1: 1-uafCinvjYwi2dbs3jowfYlNXBk.crl (hash: jeBUaWWz3mITLCKyqGRBmP8itOIBvb2Dv252dEmOQkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 00:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:2d:68:ce:03:2e:ec:e7:40:6e:28:c5:34:42:99:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19
Validity
Not Before: Sep 5 00:01:15 2025 GMT
Not After : Sep 6 00:01:15 2025 GMT
Subject: CN=93555b9485726422f68af50a1ac2f9ec3557effb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4d:ca:92:44:2f:4f:69:9d:29:b2:fe:93:7f:
f9:2c:fe:ad:6a:77:cc:ff:80:ef:e1:ee:08:2f:41:
8e:c9:1b:2c:f5:64:72:14:26:58:f1:9e:ac:da:17:
49:c3:59:cb:32:f9:63:48:f2:5b:65:ab:4f:3c:e7:
4b:b4:aa:55:e9:c9:b0:18:56:45:e6:41:47:7b:bf:
f5:4e:57:ce:e9:8a:c3:39:a1:b9:e5:d8:5c:80:90:
fc:f4:87:e3:d0:12:e0:6a:bd:c3:97:9f:a3:e5:97:
89:c4:5c:53:16:19:e9:ac:db:b9:aa:6b:54:30:4f:
db:8b:69:ff:af:87:0b:48:87:d8:47:66:99:17:f6:
b9:cc:6d:46:c2:9c:fe:e0:d1:0a:59:cf:d1:16:fc:
46:42:aa:4c:1e:6d:c8:30:d7:4e:fd:e5:21:0a:02:
92:15:f3:c6:cf:96:c0:81:cc:78:9d:69:48:88:96:
fa:cc:47:06:8f:45:2b:e1:81:ee:c2:7b:4f:5e:c6:
09:6c:20:04:3f:4a:3a:5b:fe:0b:a4:89:fe:91:e6:
9c:b4:83:d5:84:2b:b9:91:f3:79:19:32:eb:d8:82:
48:b8:0a:1d:63:22:2f:3f:97:86:8e:34:6a:07:33:
c3:e8:a3:90:de:82:8a:58:04:60:41:7b:0f:ec:6c:
f0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:55:5B:94:85:72:64:22:F6:8A:F5:0A:1A:C2:F9:EC:35:57:EF:FB
X509v3 Authority Key Identifier:
keyid:FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:df:f4:5a:e3:f4:05:ce:e9:77:3c:84:0e:d3:dd:8b:73:2b:
c7:cc:61:3b:1d:4c:3c:65:74:15:35:38:a6:f6:a5:05:e0:2d:
43:bd:ca:3b:c7:9a:ce:66:27:d6:be:a6:19:64:f4:67:bb:32:
b5:4d:b6:c0:03:f4:f5:8a:91:b3:43:f9:ce:cb:9e:4b:bb:93:
df:81:a4:56:23:e7:ff:e8:62:79:16:22:12:6a:8a:a1:8f:f2:
1b:d9:27:f4:26:82:96:ae:af:7e:13:4b:bd:f4:c5:ac:f8:b5:
3c:17:64:c8:38:11:8a:c8:99:d2:94:fd:68:7c:7a:40:03:a9:
03:de:85:96:9e:65:f5:70:8b:aa:ea:d3:42:93:0b:52:5d:b1:
5d:8b:ed:ef:59:0b:a6:a7:71:54:2e:c6:ab:94:6e:2c:f1:73:
e0:83:96:6c:eb:5d:56:35:94:4d:38:0e:7d:ac:e3:9a:bd:97:
28:e2:c7:40:e8:95:04:25:b9:8f:d1:b2:64:9d:86:92:64:51:
a1:f5:3a:30:cf:84:43:ba:10:f7:a8:1a:36:fa:8e:7a:db:86:
c9:77:25:23:a9:ac:fd:a6:a7:6a:14:c0:4e:33:d9:2e:7b:ab:
f2:88:89:1c:2d:1b:b6:37:9f:64:28:32:e1:7e:75:aa:ed:6e:
69:eb:80:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:54:54 2025 by rpki-client