Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
File: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft (raw, json)
Hash identifier: 43A6UveakyiqUE2Ynsyov8v/j1J6pvij/iU7XhGYc/w=
Subject key identifier: 0F:63:26:96:CA:CC:43:1A:7C:B6:E1:B9:B3:26:09:5E:1A:A3:F9:89
Authority key identifier: F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4
Certificate issuer: /CN=f94df3b8463da119fdd56d85da547a042a1798c4
Certificate serial: 01984589045866B5EEF15D439FBC45025753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
Manifest number: 15FB
Signing time: Sat 26 Jul 2025 07:01:04 +0000
Manifest this update: Sat 26 Jul 2025 07:01:04 +0000
Manifest next update: Sun 27 Jul 2025 07:01:04 +0000
Files and hashes: 1: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl (hash: qc5oixI9H4+3q3t2cFq9zhsS7ET7kqor6S8kMoKriiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:04:58:66:b5:ee:f1:5d:43:9f:bc:45:02:57:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df3b8463da119fdd56d85da547a042a1798c4
Validity
Not Before: Jul 26 07:01:04 2025 GMT
Not After : Jul 27 07:01:04 2025 GMT
Subject: CN=0f632696cacc431a7cb6e1b9b326095e1aa3f989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:84:64:90:54:9f:2b:83:c4:b5:96:7c:59:1c:
d3:d4:d6:77:90:82:0a:3d:b3:2f:b3:c9:69:b2:c4:
08:c6:6b:5b:67:55:70:ae:72:49:37:88:ab:62:17:
b9:2c:57:01:bd:7e:9e:d1:16:5f:7c:77:87:3b:8a:
15:a4:f1:98:89:d3:03:3e:57:59:64:fc:c0:11:53:
2a:fe:98:74:49:61:8a:1c:1d:b2:23:86:85:f8:8e:
53:bf:89:c2:df:8f:00:21:34:3e:3d:2d:d0:42:de:
8e:a2:f2:99:9b:bb:45:89:08:ce:08:49:f9:04:a2:
bd:db:07:c8:0c:8f:95:49:72:34:c4:51:82:65:12:
8b:30:fa:18:88:c0:e9:c0:72:b3:50:80:63:8a:05:
00:46:2b:dd:00:07:f1:bc:d1:e2:d4:60:d5:f2:e2:
58:74:5e:9c:c1:17:e1:3d:39:1a:88:dc:72:52:47:
ca:c1:a8:c4:cf:d4:be:6c:03:63:f7:22:5f:77:d5:
23:41:ca:bf:e2:06:cf:ef:35:40:51:95:df:88:23:
10:22:95:a8:f8:80:64:b2:58:f6:d5:1d:4e:bf:99:
75:15:e7:44:77:af:40:e6:2b:c0:ab:da:85:10:67:
37:58:2e:ab:f4:45:2a:f2:d5:90:26:9f:8c:4b:bf:
36:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:63:26:96:CA:CC:43:1A:7C:B6:E1:B9:B3:26:09:5E:1A:A3:F9:89
X509v3 Authority Key Identifier:
keyid:F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:eb:52:5e:16:9f:7d:f0:6e:ae:da:5b:59:3e:b8:17:ea:93:
9e:b5:3c:22:50:33:30:8d:9a:80:06:de:ce:5d:01:0b:8d:bb:
04:bc:55:a2:4f:4c:95:f1:70:31:b2:5b:19:6f:a0:82:42:01:
5b:35:46:41:ee:1e:00:61:ae:95:bf:a7:68:05:01:65:71:e7:
20:cc:98:eb:f1:6e:9d:a7:d0:ab:be:eb:ff:b1:32:8f:d6:87:
b4:38:51:3b:79:17:d3:57:4d:48:48:a1:74:d2:b9:7c:71:96:
82:22:32:52:e1:82:d3:3c:a2:e5:15:e9:d8:0a:0e:a4:0a:b6:
58:0d:2e:d7:94:f2:89:72:12:c6:fa:1e:3d:8b:aa:a8:4f:57:
d3:49:48:b6:7d:aa:0f:50:9c:08:0c:1c:18:47:6d:02:60:85:
70:2a:34:65:89:6c:19:bd:70:91:7e:76:67:c5:f8:30:71:60:
5e:1e:a8:2d:98:09:9e:df:5d:24:11:3f:dd:47:79:db:66:e8:
e0:f4:a9:c2:ed:2a:29:b5:8e:fb:28:82:7f:53:1e:26:67:ad:
25:ae:cf:98:74:69:a3:69:1b:0c:8f:69:4e:f0:dc:03:1a:29:
94:b8:22:f8:99:99:7b:24:e3:5c:fb:fa:5f:e3:9b:7f:03:21:
3e:bc:70:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:51:00 2025 by rpki-client