Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
File: UnksdxTtV0Vtc1XkoEubqL7VfkI.mft (raw, json)
Hash identifier: AeAr36Sq9y2LGD7IbQiAzz4uNxfaLQJY8TyLoIFdgJk=
Subject key identifier: DB:BD:6A:F3:36:C5:90:6B:DD:8B:96:04:9E:64:DE:88:63:DF:EA:57
Authority key identifier: 52:79:2C:77:14:ED:57:45:6D:73:55:E4:A0:4B:9B:A8:BE:D5:7E:42
Certificate issuer: /CN=52792c7714ed57456d7355e4a04b9ba8bed57e42
Certificate serial: 0199221E908F116958E159EF36E2777AEE50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
Manifest number: 071F
Signing time: Sun 07 Sep 2025 03:00:52 +0000
Manifest this update: Sun 07 Sep 2025 03:00:52 +0000
Manifest next update: Mon 08 Sep 2025 03:00:52 +0000
Files and hashes: 1: UnksdxTtV0Vtc1XkoEubqL7VfkI.crl (hash: 6lO26Nr4TkIYC5Y6VN97ymwknSH9K7G9G1avGxe9O9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:90:8f:11:69:58:e1:59:ef:36:e2:77:7a:ee:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52792c7714ed57456d7355e4a04b9ba8bed57e42
Validity
Not Before: Sep 7 03:00:52 2025 GMT
Not After : Sep 8 03:00:52 2025 GMT
Subject: CN=dbbd6af336c5906bdd8b96049e64de8863dfea57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bb:56:0c:31:2a:41:da:2f:78:64:3a:d4:d9:
7d:1e:dc:27:21:7e:89:a8:ab:14:cc:17:d0:c2:d7:
a2:18:80:13:37:9b:70:11:e2:13:c3:12:f5:c0:44:
7f:93:d5:96:50:77:a0:c3:b2:2a:68:90:6f:db:40:
9f:a1:70:af:f1:a0:93:f3:f4:d5:ec:fa:3f:f4:be:
28:e8:a7:0d:b8:ce:a7:89:93:96:e7:7c:2a:96:5d:
77:9b:9c:a9:61:4d:5f:80:4f:f2:28:5c:7c:b3:65:
a3:08:57:dc:e3:21:ab:5b:23:ae:79:71:e2:c5:c9:
22:b0:b4:31:40:d7:58:94:c6:e4:5a:e5:a9:34:dc:
fe:05:db:b4:dd:8f:78:dd:0b:31:cf:52:9f:46:25:
68:0b:20:c8:a5:87:bb:00:8a:cb:01:dc:37:8a:13:
47:e7:39:54:22:6b:60:b2:ff:ff:51:34:bf:ad:2a:
fc:ae:14:1d:10:8b:52:1f:f3:87:e1:0b:19:8f:3c:
6f:f9:f4:ff:29:a4:b6:a3:12:3d:01:9f:f6:8d:d5:
ff:1e:31:e5:6e:a2:ed:4d:62:c5:9e:7f:cf:f3:cb:
ea:4b:d7:54:bb:b8:14:a6:75:ec:d4:f4:7a:b9:38:
9a:d0:21:61:3c:2b:73:0f:10:cd:8a:3e:f2:08:da:
e5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BD:6A:F3:36:C5:90:6B:DD:8B:96:04:9E:64:DE:88:63:DF:EA:57
X509v3 Authority Key Identifier:
keyid:52:79:2C:77:14:ED:57:45:6D:73:55:E4:A0:4B:9B:A8:BE:D5:7E:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:be:c2:50:9e:36:77:f3:55:9b:7c:e0:0e:08:01:3b:88:b2:
64:1c:f5:5e:96:c9:d0:2e:10:88:39:bb:0b:d9:74:65:c9:db:
e1:f5:26:f2:90:c2:3e:cc:9c:8f:e4:6a:e4:f3:90:9b:25:a4:
76:c9:7a:d7:07:5e:1b:37:9b:5a:73:c2:a0:e2:ed:91:61:db:
b3:51:84:2d:01:de:7c:25:4b:64:b9:4b:75:87:bf:1b:ff:42:
57:4f:9c:c4:ef:cd:ba:a2:01:81:43:aa:62:36:37:c3:8e:06:
c8:6b:7c:c4:4a:b7:e4:7f:36:ba:fe:bb:4f:c9:ea:20:49:af:
55:e2:3e:a0:b6:ae:1c:ab:7e:0b:4f:7a:25:37:24:15:8e:6b:
d9:c3:88:a1:39:91:51:ba:c3:5a:38:40:54:76:68:9b:bb:97:
fb:5f:b1:e1:0a:2e:ee:89:fb:8b:48:d8:a0:a2:90:c2:f2:1d:
0e:bf:93:b7:2b:f6:5e:37:85:52:d7:14:0a:97:15:ec:14:fb:
a0:0c:ba:7e:af:2d:e1:e5:25:2a:f2:1b:af:5a:10:ea:2f:e1:
a2:df:d0:11:53:2e:20:49:71:05:e0:38:c9:85:95:f5:ba:69:
03:04:31:23:37:4d:c0:77:c2:63:2b:a2:13:57:41:1d:bb:5c:
7d:22:fe:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:33 2025 by rpki-client