Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
File: r1UJ13Yi0who8jYTxagW5ySEAWU.mft (raw, json)
Hash identifier: d8BABRtLwwiOHSw8cPSKYRBJyVK3Yz6bUm17QDCdSHM=
Subject key identifier: 3B:3B:9B:AC:BD:D5:DB:89:A3:04:3C:51:FC:58:B8:95:C0:32:56:D4
Authority key identifier: AF:55:09:D7:76:22:D3:08:68:F2:36:13:C5:A8:16:E7:24:84:01:65
Certificate issuer: /CN=af5509d77622d30868f23613c5a816e724840165
Certificate serial: 01984B546A4E6967B4C3402EE0780E8F2838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
Manifest number: 06B6
Signing time: Sun 27 Jul 2025 10:01:20 +0000
Manifest this update: Sun 27 Jul 2025 10:01:20 +0000
Manifest next update: Mon 28 Jul 2025 10:01:20 +0000
Files and hashes: 1: r1UJ13Yi0who8jYTxagW5ySEAWU.crl (hash: WyqJd2JpKvzDKUOFG5UsXQeRC0T03OxWwWJHsqfaEJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:6a:4e:69:67:b4:c3:40:2e:e0:78:0e:8f:28:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5509d77622d30868f23613c5a816e724840165
Validity
Not Before: Jul 27 10:01:20 2025 GMT
Not After : Jul 28 10:01:20 2025 GMT
Subject: CN=3b3b9bacbdd5db89a3043c51fc58b895c03256d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:af:47:4e:43:ed:1b:87:18:91:1e:0f:49:9c:
af:f4:1f:1d:04:5a:7f:a1:26:38:d5:7f:0f:50:fe:
9b:f8:43:fe:7d:9d:78:c5:10:d1:fb:35:31:c8:24:
57:fa:a2:a6:af:ce:72:7d:0e:ca:8b:c1:bd:24:c7:
b0:fa:73:16:3d:4e:b6:b1:29:3c:a4:b0:80:f5:bc:
03:5d:05:1d:bb:13:52:82:b5:0c:55:db:06:81:bc:
55:a3:c9:58:4c:7e:9f:d4:03:c5:99:36:e8:3b:d2:
a5:0c:50:82:1f:e1:44:3c:97:e5:30:cb:4d:5e:b1:
2b:83:f1:12:c1:04:61:0b:8f:14:d7:e7:ee:fe:4a:
97:5c:c8:d6:01:ad:86:38:88:98:27:0f:d2:d5:df:
cb:38:f8:dd:ac:e2:ff:42:92:c4:d4:1f:2a:aa:04:
83:be:51:6a:99:b4:e2:1a:02:7e:0d:ba:f5:11:a2:
b7:22:02:f1:28:ec:31:e9:23:81:14:ff:6c:8a:57:
de:d7:4b:b5:9f:d2:e4:68:ee:2f:23:b1:57:46:db:
98:44:42:be:a5:7e:1a:80:50:2c:fb:82:ee:2a:68:
75:e8:41:4e:0b:ec:5b:ee:73:d9:10:6b:54:8e:4f:
ad:50:22:20:97:f6:e2:66:35:cd:50:e6:0a:01:c6:
08:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3B:9B:AC:BD:D5:DB:89:A3:04:3C:51:FC:58:B8:95:C0:32:56:D4
X509v3 Authority Key Identifier:
keyid:AF:55:09:D7:76:22:D3:08:68:F2:36:13:C5:A8:16:E7:24:84:01:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:53:2b:c2:77:69:cd:b4:df:6a:6c:3a:05:5f:b3:95:14:53:
7c:f1:da:1b:c8:b1:e0:f2:00:6a:78:6d:e1:de:7e:4f:df:16:
09:75:29:6e:2c:54:19:1b:1c:e6:0d:51:c3:1a:c9:db:80:8b:
df:a5:c4:ad:f0:62:43:4c:20:07:52:47:2b:31:c8:06:79:22:
b1:4b:d6:61:09:96:de:04:5b:1c:41:29:4e:fb:44:de:25:6c:
d4:b7:fb:44:58:e2:be:9a:49:f3:f8:44:73:7c:8e:86:a8:71:
53:fa:f9:2f:70:f0:e3:22:93:4d:e2:a4:21:eb:70:46:34:5f:
3e:14:be:0d:d5:dc:df:1b:e5:ef:35:4b:67:24:cc:0c:e5:c2:
22:fb:75:db:49:4f:98:6b:16:7f:d1:f3:6c:c2:f2:51:28:76:
48:a4:fe:bf:c6:55:16:bf:66:cc:b3:0e:fb:a6:6e:05:06:b6:
af:68:b7:65:2d:fb:0a:ca:47:24:76:dd:c7:b9:70:7e:04:5b:
96:5a:21:5e:d2:5b:ac:7f:3c:04:fb:19:99:8a:7b:bf:3e:29:
09:24:9e:48:28:67:f4:47:e2:05:96:07:74:3d:b7:3b:49:6e:
10:29:8a:b2:fc:ae:5b:d8:51:c4:c9:54:f6:d2:0b:60:67:6e:
55:a2:3c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:11:21 2025 by rpki-client