Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
File: 0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft (raw, json)
Hash identifier: XxfaFMXuqRYYmvhKLSHo2mLEoR/IT0vNFx0lnfGNJ9U=
Subject key identifier: 20:59:EF:CB:CD:F8:2E:73:11:C4:B8:CE:C1:67:D5:22:60:47:1E:5D
Authority key identifier: D2:E0:BD:13:B9:B4:66:C3:2E:13:76:58:08:8D:28:2A:3B:7D:56:32
Certificate issuer: /CN=d2e0bd13b9b466c32e137658088d282a3b7d5632
Certificate serial: 0198530EB0436594C9B83C30EE40B9EE13D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
Manifest number: 12D5
Signing time: Mon 28 Jul 2025 22:02:07 +0000
Manifest this update: Mon 28 Jul 2025 22:02:07 +0000
Manifest next update: Tue 29 Jul 2025 22:02:07 +0000
Files and hashes: 1: 0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl (hash: rkXA4LBVWJaTFbR7dYjdP5nplssO8lDvq54cdF6DMrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:b0:43:65:94:c9:b8:3c:30:ee:40:b9:ee:13:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e0bd13b9b466c32e137658088d282a3b7d5632
Validity
Not Before: Jul 28 22:02:07 2025 GMT
Not After : Jul 29 22:02:07 2025 GMT
Subject: CN=2059efcbcdf82e7311c4b8cec167d52260471e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bc:c0:41:de:74:1f:d2:b8:1d:3a:ff:7e:a7:
c8:db:a8:0b:65:6c:d1:76:8c:0b:01:fd:06:53:cf:
63:f3:69:7e:d6:78:1a:8d:50:fd:5f:ba:ad:a1:85:
8b:1f:97:3f:9d:9c:fa:e9:bb:5a:72:7c:93:1a:7a:
8a:0f:b2:5f:fe:17:91:2a:06:83:da:31:ea:b9:8e:
d4:2e:db:fb:fc:64:47:62:66:68:84:e7:d2:50:e6:
6f:f8:e2:fb:55:fc:6e:03:62:29:4a:8e:19:6d:51:
2c:4b:c9:dc:9e:65:2a:3e:41:a5:87:cf:b2:35:62:
54:97:de:84:6f:23:29:50:1d:73:11:07:ff:72:b3:
8a:29:b0:59:9f:0f:bd:1a:9e:07:64:36:81:85:b8:
3d:8f:a2:f2:15:3b:ab:ae:17:fa:4d:e1:08:74:6c:
2c:10:a2:62:88:fe:00:05:bf:c4:32:e0:d4:f0:1d:
79:7a:e2:9a:4e:66:65:66:57:09:0f:5d:d1:a1:68:
4e:65:6b:ef:fb:f4:48:09:11:c5:31:10:66:6a:15:
ef:0d:1b:14:08:01:ee:09:13:8d:27:08:0d:bf:55:
ca:6b:60:a5:06:d8:da:c5:37:36:8b:eb:25:8d:00:
e9:4f:68:6d:b4:33:4f:66:4d:11:33:aa:49:45:62:
8b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:59:EF:CB:CD:F8:2E:73:11:C4:B8:CE:C1:67:D5:22:60:47:1E:5D
X509v3 Authority Key Identifier:
keyid:D2:E0:BD:13:B9:B4:66:C3:2E:13:76:58:08:8D:28:2A:3B:7D:56:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:46:7e:e9:1c:db:1f:a5:24:4c:d6:8a:78:58:26:17:98:28:
46:9b:09:f3:2d:9a:ef:df:bc:7a:0a:8e:ab:4f:0e:ad:d4:30:
30:84:d7:3e:8e:96:41:ef:95:ca:5f:d9:1f:f3:8d:2a:ae:81:
b3:b0:a4:3f:5e:d8:b4:36:4c:19:b2:c7:eb:4e:8f:87:e3:c4:
0e:eb:78:b5:07:b2:1e:74:d7:31:11:2e:20:36:aa:00:67:63:
73:63:d8:3b:3b:5a:c5:c4:34:f8:72:ef:7c:84:17:44:94:0f:
4a:33:2e:03:3a:97:25:67:95:8f:7c:92:1b:81:13:39:dd:55:
10:8c:2f:24:93:9b:e9:cc:d2:93:d5:a7:27:c1:e2:bb:44:78:
b9:3f:00:ad:80:f6:1c:e6:e2:b5:ed:f2:57:06:b3:98:f9:01:
52:e0:13:ee:25:26:7a:30:65:20:5d:00:5d:61:11:ca:51:17:
6b:ec:90:ef:a8:74:0b:ec:21:f9:7a:03:66:7f:3f:a2:93:81:
60:c2:3b:99:99:27:15:23:a7:2a:ae:0b:aa:9c:c6:69:4b:8f:
1c:75:72:8c:85:10:65:aa:52:08:d6:49:fa:66:a7:9c:18:67:
60:01:b9:bb:92:d8:c4:11:d2:06:79:5e:4e:cb:1f:7e:f9:a6:
70:71:f4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:39:42 2025 by rpki-client