Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/aca6e7-20d8-4f2d-adad-754413b98db2/1/UJFp9pOVg8wdvmUtulwMglBAoBI.mft
File: UJFp9pOVg8wdvmUtulwMglBAoBI.mft (raw, json)
Hash identifier: ApcEITuQbCywX3Ru9ztNZ7ZbetbdOwLsNbpVMNideeM=
Subject key identifier: 5C:4C:33:FD:9A:56:65:8A:11:9B:B0:5E:EE:78:08:D5:B9:BD:A8:EB
Authority key identifier: 50:91:69:F6:93:95:83:CC:1D:BE:65:2D:BA:5C:0C:82:50:40:A0:12
Certificate issuer: /CN=509169f6939583cc1dbe652dba5c0c825040a012
Certificate serial: 0199180A91EE7C4CBC58213C8FBC6C0103AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJFp9pOVg8wdvmUtulwMglBAoBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/aca6e7-20d8-4f2d-adad-754413b98db2/1/UJFp9pOVg8wdvmUtulwMglBAoBI.mft
Manifest number: 0310
Signing time: Fri 05 Sep 2025 04:02:49 +0000
Manifest this update: Fri 05 Sep 2025 04:02:49 +0000
Manifest next update: Sat 06 Sep 2025 04:02:49 +0000
Files and hashes: 1: UJFp9pOVg8wdvmUtulwMglBAoBI.crl (hash: an1+nxKA6buigFjwUe0JpcZfzdktj0r5pREK6zHrwHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/aca6e7-20d8-4f2d-adad-754413b98db2/1/UJFp9pOVg8wdvmUtulwMglBAoBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/aca6e7-20d8-4f2d-adad-754413b98db2/1/UJFp9pOVg8wdvmUtulwMglBAoBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJFp9pOVg8wdvmUtulwMglBAoBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:0a:91:ee:7c:4c:bc:58:21:3c:8f:bc:6c:01:03:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509169f6939583cc1dbe652dba5c0c825040a012
Validity
Not Before: Sep 5 04:02:49 2025 GMT
Not After : Sep 6 04:02:49 2025 GMT
Subject: CN=5c4c33fd9a56658a119bb05eee7808d5b9bda8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:55:41:0f:68:4b:5c:a7:75:a7:62:8e:40:63:
e7:bb:ac:48:75:ba:af:24:41:c6:7f:f6:72:aa:e7:
c4:02:25:ff:9a:64:53:00:f3:9a:74:cf:2b:47:ca:
2b:ad:3e:32:8c:8b:8f:e6:d2:8f:2b:ad:cc:d4:62:
69:1e:94:c7:74:86:4a:a3:a6:be:6f:2d:97:98:d3:
e7:6d:e1:27:19:bb:7b:61:45:d9:ca:14:78:08:1f:
7b:d9:9a:ed:85:af:61:27:95:4a:bf:e3:f9:64:32:
53:06:6d:b3:4d:ef:4c:52:d2:45:4b:bc:e6:2a:a2:
18:0b:0c:12:0c:64:19:8f:48:d3:eb:bf:16:68:9b:
1d:88:a2:1d:db:72:59:4f:df:6b:00:d7:6a:1c:1f:
9b:81:7e:f5:38:68:e1:38:98:7c:5d:97:03:60:c3:
dd:14:d9:e2:b8:ef:cd:cf:e8:61:47:8e:33:0e:d1:
7e:ba:c5:61:a5:b1:15:fa:22:5c:2c:7e:ec:fa:70:
b4:8a:75:d2:a3:08:46:1f:0a:5b:b4:00:4b:ea:7f:
3e:d3:6a:3c:04:d6:ac:54:43:be:cd:7d:e2:7d:f1:
36:84:23:57:ea:10:9d:1e:da:93:85:c4:9b:f1:09:
f2:5d:7c:97:99:fa:2a:66:a7:0b:77:7e:d3:67:6b:
dd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4C:33:FD:9A:56:65:8A:11:9B:B0:5E:EE:78:08:D5:B9:BD:A8:EB
X509v3 Authority Key Identifier:
keyid:50:91:69:F6:93:95:83:CC:1D:BE:65:2D:BA:5C:0C:82:50:40:A0:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJFp9pOVg8wdvmUtulwMglBAoBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/aca6e7-20d8-4f2d-adad-754413b98db2/1/UJFp9pOVg8wdvmUtulwMglBAoBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/aca6e7-20d8-4f2d-adad-754413b98db2/1/UJFp9pOVg8wdvmUtulwMglBAoBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:44:31:f6:60:2d:91:da:39:38:11:4e:60:fa:35:5f:52:11:
ae:7a:7f:a6:c0:61:b0:c5:45:c3:7e:2f:de:90:32:23:b7:3f:
df:9c:4b:57:78:ef:35:11:bf:49:07:4e:35:1f:c7:a7:fe:73:
34:29:cf:9c:25:65:30:b6:67:20:0e:f0:73:6d:73:7a:b0:fc:
09:30:9a:29:34:00:80:bb:4f:47:66:f0:64:68:ec:57:6e:ea:
81:ce:2f:bb:f7:a9:ae:9d:f3:ef:77:40:83:7f:75:bd:58:69:
1e:f9:1b:4b:90:05:08:ef:01:3a:fc:32:1b:83:63:8c:b0:b4:
2c:75:36:92:7a:a6:31:7e:12:b7:b2:f0:77:ac:d4:c4:a1:c0:
45:8d:f4:98:0e:1a:55:53:42:fe:c7:08:54:6a:cf:35:a6:1e:
9c:76:ee:11:f8:85:57:e8:fb:fc:f2:b8:12:67:84:33:92:1a:
84:5e:73:ed:4c:96:8f:73:e9:54:56:53:5f:13:95:96:66:c9:
7e:1a:f7:75:ec:55:0c:69:5f:a1:9c:ff:d3:0b:7b:14:c4:6d:
2d:f8:be:07:86:83:c5:85:04:90:86:ce:96:23:70:53:fc:72:
ed:88:59:be:e9:82:a4:c9:81:9c:0e:98:71:db:d2:d7:fc:41:
68:06:05:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:27:20 2025 by rpki-client