
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft
File: UB7eLUfXfhQKl78pidqCpYdzyMA.mft (raw, json)
Hash identifier: DuinFQmNq8XH/OR/qEgw3DCkScJmveVX/HJEemXRYYE=
Subject key identifier: F5:F3:49:ED:89:E3:C1:36:1F:8C:F6:C9:D6:AA:4B:7E:90:5A:C3:72
Authority key identifier: 50:1E:DE:2D:47:D7:7E:14:0A:97:BF:29:89:DA:82:A5:87:73:C8:C0
Certificate issuer: /CN=501ede2d47d77e140a97bf2989da82a58773c8c0
Certificate serial: 01974A7AF12058AB775FE5735B6A2070C025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UB7eLUfXfhQKl78pidqCpYdzyMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft
Manifest number: 0C62
Signing time: Sat 07 Jun 2025 13:01:00 +0000
Manifest this update: Sat 07 Jun 2025 13:01:00 +0000
Manifest next update: Sun 08 Jun 2025 13:01:00 +0000
Files and hashes: 1: UB7eLUfXfhQKl78pidqCpYdzyMA.crl (hash: 8sBQ0dsqi3SzAeActy0PUiQnc8QCzTPJ+npHztDEPB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UB7eLUfXfhQKl78pidqCpYdzyMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:f1:20:58:ab:77:5f:e5:73:5b:6a:20:70:c0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501ede2d47d77e140a97bf2989da82a58773c8c0
Validity
Not Before: Jun 7 13:01:00 2025 GMT
Not After : Jun 8 13:01:00 2025 GMT
Subject: CN=f5f349ed89e3c1361f8cf6c9d6aa4b7e905ac372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:40:d4:cf:90:a2:ba:98:a5:c9:45:72:6e:d7:
97:c8:a7:d4:ff:72:6c:4c:02:79:83:0d:b5:2d:5b:
7b:ee:22:3c:0a:01:57:75:10:fc:91:53:6d:87:4b:
ac:c5:e2:dd:45:4f:ec:61:67:08:0a:1c:20:8d:e3:
55:33:c9:8c:60:da:59:60:3e:b4:5e:2e:ab:87:55:
d2:44:0b:c7:60:7b:d2:6c:e3:f7:3e:e3:f2:32:ac:
34:da:1b:73:93:c5:b4:81:67:d8:95:5c:fb:1e:f2:
e3:ef:a0:15:8e:7e:47:cb:0b:54:4f:cc:cb:4c:e0:
46:d8:6b:f5:00:c0:6d:02:72:6f:1e:21:b0:1e:e6:
63:a1:13:da:9f:39:86:92:5b:4a:77:b3:fd:1b:f1:
4d:62:f6:88:34:08:77:30:bd:1e:19:ef:05:e1:a4:
3a:0b:62:62:0c:b4:62:4a:fd:46:39:a7:f2:21:6a:
bb:41:69:88:53:6a:ea:aa:5f:4b:d2:6e:ba:93:f6:
44:39:fa:70:bf:62:f3:4a:67:63:55:e1:ae:41:9a:
2c:a4:c2:ab:0d:a1:b9:9d:e3:78:cc:65:95:b1:3c:
e3:f8:e9:ac:a1:70:98:0d:10:1f:9e:d5:4d:ec:08:
d0:53:e5:a4:91:6e:d7:c5:39:5c:60:9a:66:95:1f:
b6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F3:49:ED:89:E3:C1:36:1F:8C:F6:C9:D6:AA:4B:7E:90:5A:C3:72
X509v3 Authority Key Identifier:
keyid:50:1E:DE:2D:47:D7:7E:14:0A:97:BF:29:89:DA:82:A5:87:73:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UB7eLUfXfhQKl78pidqCpYdzyMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:13:2a:7e:c1:bd:fa:24:ae:b4:43:5b:dd:3d:24:16:b5:a1:
bd:de:84:3e:6c:79:89:82:9b:8b:75:28:a7:d1:1d:8c:79:ee:
74:01:44:4f:ee:44:cf:e4:be:c8:56:90:d7:52:13:c4:73:5c:
8b:87:b5:91:4f:71:41:11:14:12:78:db:e5:68:a2:f5:c8:61:
c8:8a:f1:c9:4d:c0:10:80:65:c2:ec:00:f2:01:53:2a:87:ca:
9c:15:5c:42:81:7f:99:a1:1c:7a:02:e3:0f:16:f3:18:99:76:
b4:5d:a6:26:4a:69:f2:00:27:88:7e:f7:a4:69:1e:d0:65:7c:
65:a6:ac:63:17:85:db:8f:bc:1c:13:76:36:8c:2d:c1:6f:11:
31:78:f5:5b:01:30:11:4f:d0:50:ef:c0:92:20:5d:4e:8f:60:
f1:73:4b:90:a1:ce:f1:8d:87:9f:4e:5b:19:cd:a5:87:6b:24:
ca:7e:93:d3:31:a2:21:1d:54:bb:52:08:ca:cd:cc:40:9e:fe:
2f:37:c8:83:9d:64:8f:22:84:db:7e:1d:d2:70:e5:6f:b1:09:
0d:0d:53:a4:67:c4:fe:3d:ee:71:82:6d:c9:63:27:5f:74:70:
be:2b:9d:b5:71:38:85:4f:d3:31:10:eb:b4:b6:b1:7c:47:d6:
91:d8:04:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:13:54 2025 by rpki-client