Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
File: UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft (raw, json)
Hash identifier: 8UcPNtcvRMCPtcCI8UUmXjYnCwY/GEOKRrRTpgGvF1Y=
Subject key identifier: 8A:9F:28:1E:49:1F:A5:29:90:96:38:C1:C1:18:74:14:5A:E2:8E:C0
Authority key identifier: 51:C3:CC:54:41:4F:B4:42:BE:39:D6:E1:A4:AF:72:4C:FF:EE:EE:FF
Certificate issuer: /CN=51c3cc54414fb442be39d6e1a4af724cffeeeeff
Certificate serial: 0199239FE40822066B6EB43F9F8BFCC85167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UcPMVEFPtEK-OdbhpK9yTP_u7v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
Manifest number: 1577
Signing time: Sun 07 Sep 2025 10:01:45 +0000
Manifest this update: Sun 07 Sep 2025 10:01:45 +0000
Manifest next update: Mon 08 Sep 2025 10:01:45 +0000
Files and hashes: 1: UcPMVEFPtEK-OdbhpK9yTP_u7v8.crl (hash: 9fwpqdFPAeqt0OcFquJZ5DOMPLvbCvLdB2/BzPqbYBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UcPMVEFPtEK-OdbhpK9yTP_u7v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:e4:08:22:06:6b:6e:b4:3f:9f:8b:fc:c8:51:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51c3cc54414fb442be39d6e1a4af724cffeeeeff
Validity
Not Before: Sep 7 10:01:45 2025 GMT
Not After : Sep 8 10:01:45 2025 GMT
Subject: CN=8a9f281e491fa529909638c1c11874145ae28ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a1:43:76:44:ff:1e:a9:d1:d2:f6:1c:4a:87:
f2:80:87:3d:b6:d0:64:73:ce:a8:1f:c6:66:68:ba:
20:26:76:f8:8e:7e:46:7b:b0:86:fb:a4:6d:b6:c3:
1d:e6:98:0a:46:14:8c:28:f8:df:3d:17:cf:db:f5:
da:7b:05:f8:04:8a:20:5f:ba:73:16:e8:70:cc:66:
a0:10:84:8b:c2:33:f2:8d:88:be:92:fc:0c:bf:aa:
9b:f6:18:8c:46:02:96:ea:6b:39:52:0b:a1:14:e0:
b7:67:17:52:98:8b:6d:8b:79:00:72:e2:aa:a7:48:
64:b6:40:18:8c:f0:da:51:61:43:22:94:4a:a1:c5:
56:3d:88:be:ce:4f:23:08:6c:2a:f9:f2:52:d6:34:
d2:f4:bd:7a:5c:2b:13:9f:94:db:a6:2c:2d:12:3c:
8c:b7:cc:f0:51:5c:33:83:a1:b4:98:31:3d:43:8d:
8d:d7:17:39:34:ba:7c:a5:cf:86:77:2f:24:60:cc:
83:4e:bc:7a:81:27:98:d2:c8:be:d7:82:62:cd:d4:
2d:83:b4:34:3a:06:87:02:a7:87:01:15:7c:31:b5:
39:2d:e4:bc:54:82:38:42:73:c7:30:30:49:47:01:
eb:5a:43:1a:2d:6c:39:bb:92:88:a2:76:e5:17:d7:
db:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9F:28:1E:49:1F:A5:29:90:96:38:C1:C1:18:74:14:5A:E2:8E:C0
X509v3 Authority Key Identifier:
keyid:51:C3:CC:54:41:4F:B4:42:BE:39:D6:E1:A4:AF:72:4C:FF:EE:EE:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UcPMVEFPtEK-OdbhpK9yTP_u7v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:6b:a2:fe:f0:1d:ec:34:57:8c:56:e6:ca:63:08:3e:68:61:
bd:3d:69:22:30:49:6f:15:eb:f0:82:46:25:3a:63:bb:4b:45:
d4:53:f2:bf:4a:5c:ef:8a:f1:cd:9a:0b:73:3b:44:c5:10:bd:
23:c4:ff:8b:6a:4b:ad:2d:4f:86:b1:ae:13:83:e4:5d:65:04:
36:f9:c7:1b:5b:bc:1a:85:c7:2a:1f:00:b0:9b:30:e6:03:99:
40:84:1d:02:e1:4e:5b:57:1f:c2:10:16:d7:d5:5b:fd:8c:48:
40:89:5a:bd:e7:f6:f0:46:4d:ea:dc:37:b2:4d:87:2f:33:f2:
05:0c:19:44:7d:c0:b7:35:30:5e:34:6f:d1:19:c8:45:83:33:
90:4c:89:ee:18:cb:f3:53:2d:87:2f:11:69:82:7b:6b:11:51:
ef:bd:3c:dd:6a:49:25:57:c4:92:dc:94:75:72:d9:83:f6:24:
96:8b:c7:01:f4:da:30:57:85:9a:5b:04:54:ff:40:86:50:85:
5b:c8:05:15:17:14:6f:47:be:4d:ad:ca:81:bf:e8:cf:30:21:
a6:5e:41:e0:93:45:11:a0:e4:7c:17:5a:03:ec:71:0e:93:ad:
2d:e1:96:23:b9:eb:64:7e:36:88:13:0b:3e:7d:51:0d:a5:89:
8f:50:50:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:32:23 2025 by rpki-client