Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
File: UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft (raw, json)
Hash identifier: U9OwAnZDCQMRzXKe61Wv5NBPRGULR8vhvxANzqgGt68=
Subject key identifier: C7:03:C7:DD:20:35:76:F2:59:40:48:80:4B:DD:C2:70:68:95:A9:53
Authority key identifier: 52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
Certificate issuer: /CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Certificate serial: 019845F6FF72A0080EF53347678CF23F0F77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
Manifest number: 0E5F
Signing time: Sat 26 Jul 2025 09:01:11 +0000
Manifest this update: Sat 26 Jul 2025 09:01:11 +0000
Manifest next update: Sun 27 Jul 2025 09:01:11 +0000
Files and hashes: 1: 6O-rdAPfJL5ja0fsAq0cDrxpBv4.roa (hash: 6xTcUx7aYzPFSdoIn+1iA2U6ilYMmAiW4t3gwfarhms=)
2: UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl (hash: 9cnDAhkMwOSplmVYhyIueJzFwVWGONvCgxVbG4EhzaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:ff:72:a0:08:0e:f5:33:47:67:8c:f2:3f:0f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Validity
Not Before: Jul 26 09:01:11 2025 GMT
Not After : Jul 27 09:01:11 2025 GMT
Subject: CN=c703c7dd203576f2594048804bddc2706895a953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8a:72:60:e6:0b:6e:8a:9d:7e:f7:ee:46:50:
0d:bc:87:40:67:06:7b:de:db:35:36:cc:4e:f3:e2:
7e:f6:33:ca:cb:a1:59:a5:7b:f2:21:42:c8:72:81:
d9:9a:79:4c:26:f8:c6:23:b1:88:18:df:94:64:e9:
4a:74:79:0c:90:3b:55:ae:a7:ad:f7:14:c7:7c:ae:
77:10:08:79:19:e8:f6:29:35:0d:f4:c6:03:32:7c:
c7:aa:86:e4:07:a7:b3:ec:d7:8a:06:68:1d:68:7e:
ca:d2:92:a5:48:6c:2d:22:55:31:33:83:41:65:cb:
6c:06:09:9d:db:8b:e3:d2:e3:ef:71:1b:ac:38:0b:
04:e1:1f:89:93:c9:0a:3c:09:b3:3d:78:ab:80:cf:
ca:13:a4:96:24:ba:7e:c1:33:d5:3e:6a:da:73:11:
a3:6b:a4:51:ec:5c:c2:28:ec:ba:98:a3:88:79:34:
df:b5:b0:bd:f0:be:f9:90:1b:15:2d:9b:52:45:90:
d1:73:93:56:65:4b:7b:0b:c8:99:74:50:f3:35:b6:
ec:d1:ab:69:07:12:bb:aa:9e:9a:5b:b5:9e:1b:4e:
2d:02:d5:e9:98:b0:a9:7a:da:61:39:72:88:de:0b:
bd:2a:d0:7a:8d:c4:0e:66:23:06:25:84:62:52:60:
b1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:03:C7:DD:20:35:76:F2:59:40:48:80:4B:DD:C2:70:68:95:A9:53
X509v3 Authority Key Identifier:
keyid:52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:16:bd:89:57:54:ab:5a:28:57:5c:a6:c0:bc:30:62:4c:05:
fb:7b:97:38:36:51:54:af:ab:d2:a8:53:fa:32:66:39:c3:d4:
5a:74:4c:56:65:5d:8c:32:dc:ae:f7:54:c0:41:dc:95:f9:c8:
9c:7e:ca:f4:b0:a6:65:97:49:ac:b3:bd:cd:52:a5:60:74:7a:
3c:ba:05:63:da:5f:8f:20:83:92:fb:40:18:e4:3b:e9:d7:51:
2e:3e:25:ac:60:70:e8:a4:43:af:43:12:ab:68:f9:70:f5:09:
5f:3c:3b:a8:72:81:dc:3e:a6:73:d9:46:18:2a:36:13:57:85:
f5:64:e9:98:b6:a3:f3:f6:b3:a6:ae:33:d5:ee:a4:98:74:1e:
c3:8d:23:c3:6d:50:20:bf:5b:48:2a:28:47:92:bf:0d:cd:4a:
c7:8a:5e:56:fb:7d:ee:04:bf:1d:d8:48:46:b0:c4:28:d5:4e:
97:bc:64:f5:0e:05:88:ff:df:d2:3a:43:d3:37:20:0a:75:10:
fd:ab:3f:74:fe:1e:0f:52:65:02:8d:7c:70:67:b8:65:49:dc:
8d:ee:ae:11:39:5e:11:18:41:42:aa:bd:b2:63:8e:45:5f:36:
f1:ab:25:4b:35:c3:c1:87:4f:cf:2b:63:57:84:db:17:f7:14:
88:51:8f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:49:44 2025 by rpki-client