
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
File: Uw4xZLFq4JEmhPqpDkORTeH91aU.mft (raw, json)
Hash identifier: ZnXflTd22P601YjTnrx+xNvQ37xo9vKx96b3X+srvGc=
Subject key identifier: 96:C6:44:DC:E0:6A:85:A8:11:73:8D:04:97:94:30:C8:B3:04:C7:45
Authority key identifier: 53:0E:31:64:B1:6A:E0:91:26:84:FA:A9:0E:43:91:4D:E1:FD:D5:A5
Certificate issuer: /CN=530e3164b16ae0912684faa90e43914de1fdd5a5
Certificate serial: 01974A7A86ABFD3FE6114FD00F575E33CFED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
Manifest number: 0E30
Signing time: Sat 07 Jun 2025 13:00:33 +0000
Manifest this update: Sat 07 Jun 2025 13:00:33 +0000
Manifest next update: Sun 08 Jun 2025 13:00:33 +0000
Files and hashes: 1: Uw4xZLFq4JEmhPqpDkORTeH91aU.crl (hash: FccFZ5ixxITeqvPGJEuvMhf1L27DT9gOzYVJN4q6tNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:86:ab:fd:3f:e6:11:4f:d0:0f:57:5e:33:cf:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=530e3164b16ae0912684faa90e43914de1fdd5a5
Validity
Not Before: Jun 7 13:00:33 2025 GMT
Not After : Jun 8 13:00:33 2025 GMT
Subject: CN=96c644dce06a85a811738d04979430c8b304c745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dd:62:b4:da:0f:51:50:19:bb:d0:92:12:44:
66:eb:9c:93:4f:4c:23:72:48:50:8f:a6:de:6c:f2:
f0:c8:df:b1:e7:de:90:11:41:97:10:83:77:52:8c:
62:8c:ea:34:6b:ea:59:1d:dc:e6:27:60:02:ac:3f:
f4:a0:42:2b:c4:e4:8b:ad:8a:04:47:f5:ff:ca:2c:
9a:90:18:9f:41:8e:d3:cc:62:e0:57:4e:63:f8:d6:
27:1f:5d:04:32:83:94:32:5d:ea:5c:22:fa:d9:80:
b3:91:e5:4b:f2:e2:3a:5f:24:17:8e:d1:e3:c4:d2:
bd:0b:03:fd:f0:81:56:fb:14:3c:90:33:31:85:a4:
2f:4c:79:cd:9d:4d:c1:62:ae:da:9c:7d:6d:6f:71:
e9:b7:15:34:17:a3:4e:bf:16:92:5d:c1:be:07:2e:
64:b4:db:a7:63:77:be:76:73:8b:a3:0c:8d:bc:57:
23:f4:c0:c3:a7:fc:68:8c:27:e7:73:a5:33:c0:7c:
73:72:14:08:f2:67:96:eb:cd:32:ba:f0:7d:84:1c:
c4:8d:ce:3f:7d:3d:00:f8:da:fd:28:48:c4:cb:b7:
d8:23:3a:55:35:9a:71:67:69:8f:bd:8f:b1:f9:f7:
b9:bb:e9:4c:a4:c5:70:04:74:07:e9:1f:45:1f:7f:
81:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C6:44:DC:E0:6A:85:A8:11:73:8D:04:97:94:30:C8:B3:04:C7:45
X509v3 Authority Key Identifier:
keyid:53:0E:31:64:B1:6A:E0:91:26:84:FA:A9:0E:43:91:4D:E1:FD:D5:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:1c:51:ac:06:45:dd:56:d1:80:b9:09:ed:7d:42:0c:b5:e4:
e4:81:1e:76:88:98:0c:a8:9f:38:04:81:47:36:b0:a2:4d:18:
24:ff:52:47:b2:b7:da:79:e5:23:6a:22:ca:45:1b:6b:37:dd:
f9:b7:a4:8b:15:92:05:a2:ad:ff:7a:7b:4e:48:29:83:99:7d:
a4:9b:8f:b8:31:9e:48:00:60:92:60:4e:4b:d6:5e:4b:7a:da:
25:8c:76:b4:f2:4c:40:7f:8c:cc:a6:83:7f:6a:7a:11:ce:af:
c3:59:41:47:d7:f8:0a:29:9e:ac:81:96:96:a9:53:e5:60:e4:
65:70:4c:c8:cd:64:f9:f1:c6:a8:34:00:5a:db:7e:f0:c0:3d:
ad:99:ea:f4:a2:46:54:7b:4d:ac:e6:b6:f0:34:c1:c4:c8:a2:
ac:50:cc:b5:f7:30:59:ce:20:e3:5c:27:a4:1d:f6:48:33:b5:
42:5f:d6:11:05:37:0a:ea:4e:0c:69:6d:75:32:de:89:58:05:
26:1b:b2:61:53:f8:da:a1:66:f5:98:64:fe:3f:7f:9e:b0:eb:
64:ac:d4:4d:23:f3:15:7f:6b:6e:99:49:b2:02:09:a1:34:da:
76:1b:06:29:6d:57:c1:b7:a6:c9:59:b1:ed:d2:dc:08:e3:68:
6f:0a:26:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:10:43 2025 by rpki-client