Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
File: 9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft (raw, json)
Hash identifier: +xsTz9ZbUM3c7ujxiF7CGlKIm2Q+fGygSFyN3uDnKKE=
Subject key identifier: 94:C6:5D:CD:C7:4D:CD:48:F4:43:C5:AC:4B:BA:08:3C:D7:13:E0:D6
Authority key identifier: F5:45:0C:63:76:65:5E:EC:1D:D2:DA:4B:D2:1D:5F:10:4A:96:D9:04
Certificate issuer: /CN=f5450c6376655eec1dd2da4bd21d5f104a96d904
Certificate serial: 01983CF36B0A2CAE9C91BC5385143D845969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
Manifest number: 15B7
Signing time: Thu 24 Jul 2025 15:00:42 +0000
Manifest this update: Thu 24 Jul 2025 15:00:42 +0000
Manifest next update: Fri 25 Jul 2025 15:00:42 +0000
Files and hashes: 1: 9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl (hash: Fay4eScVm5m0E9bsDnBtVVgM9IbU0PvI5LAjF07/vFM=)
2: As_EZ-RvP3qi1sws1jil8dnna6k.roa (hash: OtrJo+OCLnikRPWLn5xnNsduIJXUQk6NGSjartknylA=)
3: MSgwMQBVeKrb-aSmClVXWXeIrYA.roa (hash: QNReZgAEU8FQp9RxZ7cqr3S4KzJDn6XR61dqK9DUir4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3c:f3:6b:0a:2c:ae:9c:91:bc:53:85:14:3d:84:59:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5450c6376655eec1dd2da4bd21d5f104a96d904
Validity
Not Before: Jul 24 15:00:42 2025 GMT
Not After : Jul 25 15:00:42 2025 GMT
Subject: CN=94c65dcdc74dcd48f443c5ac4bba083cd713e0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f9:3f:f1:5e:46:1e:78:0c:fb:b3:0d:0e:bc:
a8:d5:9b:2b:17:cd:14:01:0d:61:75:64:f1:5e:af:
18:39:2f:37:a3:ce:a0:9c:0e:92:5f:55:bd:58:86:
c6:5f:53:98:a4:f9:74:3d:d4:6c:95:21:22:b7:48:
af:ca:b2:3d:c3:1f:a2:a1:f5:d0:fb:15:33:4c:43:
71:d5:97:7d:5b:ce:69:fc:b1:0b:63:17:77:64:a6:
7f:6d:85:16:50:3f:9c:80:1c:bb:f1:2d:cc:5e:89:
bf:88:5f:18:92:30:fb:61:85:8c:e3:e2:2f:29:c6:
93:2f:b0:82:87:4a:64:9e:39:a6:e3:4c:fd:0a:c4:
a4:5f:58:a3:3b:40:56:4f:fb:13:bb:5f:34:03:5e:
2f:2d:e2:f1:02:db:ed:a0:7a:a1:20:9e:32:df:1d:
19:8f:2f:97:9c:61:fe:25:20:c1:f8:a8:d7:90:6d:
4f:4f:24:69:31:3b:9c:23:cd:d5:9c:39:ce:15:ed:
ba:e5:f6:89:95:18:46:65:a4:af:62:3c:2b:14:dc:
97:4d:c2:00:fc:de:49:4c:07:8a:1f:fc:9f:be:73:
16:91:de:46:cf:f2:f7:4b:40:0b:fc:4f:69:66:a8:
9c:e1:31:5b:83:0c:c1:4a:a4:42:73:b2:46:17:a2:
10:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C6:5D:CD:C7:4D:CD:48:F4:43:C5:AC:4B:BA:08:3C:D7:13:E0:D6
X509v3 Authority Key Identifier:
keyid:F5:45:0C:63:76:65:5E:EC:1D:D2:DA:4B:D2:1D:5F:10:4A:96:D9:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e5:9f:f9:a1:fb:a9:e9:cb:b2:05:b3:33:7a:e0:db:7a:b8:
72:14:fb:cb:a6:07:5d:86:de:7a:d2:42:45:5f:b6:2e:bf:64:
53:2b:03:92:c8:e8:ce:47:f4:d5:fa:6b:5c:30:4d:84:c5:6b:
c0:ad:80:6b:69:19:00:f1:c7:43:58:cb:f9:59:6b:43:0d:71:
4d:f1:2c:65:57:14:90:d3:69:4f:89:58:b1:1e:82:12:dc:c9:
e9:9a:90:e0:c1:97:60:b6:38:80:72:0d:f3:4c:0a:2e:8d:ed:
16:bd:19:55:03:6d:37:4e:41:c7:00:61:88:4b:ae:27:5c:06:
43:b7:28:62:93:05:96:95:86:46:77:79:c6:7b:68:24:f6:d2:
15:ea:84:f2:69:e3:94:64:fe:60:5f:db:35:e2:71:93:c4:0f:
15:06:d9:48:0f:25:06:06:4e:18:06:47:b0:67:59:9b:b1:c0:
4e:a0:39:b9:05:50:81:6e:3c:ed:3a:73:07:df:45:db:19:41:
e3:ab:e9:bc:da:13:33:88:64:a7:00:1c:63:b9:b8:15:97:73:
02:7a:e0:df:f0:66:93:c6:e7:3c:02:81:b1:f2:5e:0c:9c:f4:
8d:05:df:09:25:10:65:28:91:40:ba:8f:8a:85:d4:37:d1:c1:
18:13:f6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 17:47:11 2025 by rpki-client