Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
File: un1KwTROw43OmXaNeKEU6_fxfYU.mft (raw, json)
Hash identifier: L34WejnhxauKFFW3BW7UjUGSKDv/XrEVA17mEVI/WuA=
Subject key identifier: 4B:6F:27:B5:8F:4B:1D:CC:4C:1B:54:E2:D7:56:A6:B7:61:A6:70:CC
Authority key identifier: BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
Certificate issuer: /CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Certificate serial: 019847AD88F825458B281BDF125107F1CF26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
Manifest number: 0CB9
Signing time: Sat 26 Jul 2025 17:00:11 +0000
Manifest this update: Sat 26 Jul 2025 17:00:11 +0000
Manifest next update: Sun 27 Jul 2025 17:00:11 +0000
Files and hashes: 1: eJvxqWQVuJlIAcOu0zuhq-FEIwc.roa (hash: T9Btt+1WHrBsFsD5c6tC5d0RHMAv0qfav0ae3k59Hwg=)
2: un1KwTROw43OmXaNeKEU6_fxfYU.crl (hash: 8tJ8Uf1V0Glaz4JPmbM64OsHQarNhZe4rEAbfhk5x+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:88:f8:25:45:8b:28:1b:df:12:51:07:f1:cf:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Validity
Not Before: Jul 26 17:00:11 2025 GMT
Not After : Jul 27 17:00:11 2025 GMT
Subject: CN=4b6f27b58f4b1dcc4c1b54e2d756a6b761a670cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a6:24:e3:5d:9c:d3:4f:2b:a7:26:98:78:4f:
39:e6:e1:97:8e:95:04:39:9c:53:51:3f:da:ef:16:
e1:81:1c:bb:ef:0b:13:65:05:35:0b:ff:7b:2e:c1:
8b:27:d7:f3:38:7d:6f:28:bd:a6:39:5f:4d:dc:7c:
ef:f6:92:1c:a0:67:cd:30:2a:c9:b6:ee:18:3f:0e:
f9:04:0c:e7:30:84:7b:f9:d1:93:42:fc:ce:ba:ed:
a6:08:90:b3:91:39:e5:29:3c:59:d3:de:78:be:4c:
14:b1:72:61:b7:c5:93:7a:20:dc:15:9b:04:97:39:
1c:5d:5b:32:b1:e8:e7:35:b1:29:7a:86:a0:b3:65:
bb:d0:5f:f5:1d:a8:7d:2f:46:f4:1b:54:03:dd:2e:
c6:59:c0:d7:ec:13:3a:3a:28:49:77:63:59:92:67:
d3:99:77:ca:16:48:db:cb:b3:08:e7:05:27:22:2a:
53:91:9c:bc:4c:ea:9d:f6:63:5b:b2:95:ec:ac:13:
20:4b:e1:a2:77:eb:3d:1b:32:05:3e:c8:31:f4:ca:
97:b2:e3:26:23:98:29:e8:27:46:63:62:f3:27:f8:
3e:ea:f5:d2:0b:24:36:fc:a2:fd:d5:1a:b8:c8:cf:
24:e2:f0:2f:99:ff:d9:2b:4c:02:d7:68:8a:59:e5:
84:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6F:27:B5:8F:4B:1D:CC:4C:1B:54:E2:D7:56:A6:B7:61:A6:70:CC
X509v3 Authority Key Identifier:
keyid:BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:01:00:79:92:a7:98:42:fc:48:50:1e:9e:93:21:d4:96:75:
65:14:26:6e:9b:0e:5a:71:c0:01:12:ad:dd:0a:51:a3:b3:3c:
9a:92:fe:a9:de:5d:a9:13:cd:b3:9f:1c:6f:53:f5:3a:07:64:
0f:58:c4:f1:e2:6e:ee:b2:82:00:16:37:a5:57:e1:63:73:24:
81:82:dc:b0:8a:51:2e:39:23:fb:c5:b0:a6:dc:c9:82:93:94:
b3:29:be:06:59:3e:13:4d:d1:a3:97:57:a3:9a:7d:84:59:e8:
22:46:20:94:b1:e0:69:8d:82:d6:62:c0:e0:a4:0e:3e:64:4d:
f2:d0:fa:a1:2f:94:1f:80:29:cd:01:a1:9d:0c:56:1c:4b:60:
6b:a4:2d:42:89:c2:97:b1:e5:b5:45:ca:1a:d3:f6:ff:e0:58:
08:ce:50:94:22:05:b9:b3:eb:dd:78:df:59:45:36:ae:61:26:
12:0a:9a:8c:d5:f6:82:f5:79:87:91:eb:c9:38:d5:13:c8:b1:
da:85:3f:c1:47:d7:51:1a:88:8a:a6:4b:c0:3f:59:73:0b:d0:
6b:99:9c:10:da:4d:e2:c6:b7:1b:81:ee:51:9e:a6:29:5f:41:
2d:cf:19:d9:e8:f2:1a:14:dd:9f:9c:fe:cb:aa:6d:78:4d:06:
72:a0:25:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:29:32 2025 by rpki-client