
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
File: kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft (raw, json)
Hash identifier: uohaS6Rv6L6Xb/kw6lu1DoojgXmC7CRLRLsqS0iELXo=
Subject key identifier: 39:37:2E:00:9A:C1:39:85:42:3A:1B:61:23:0F:E2:3D:6C:8C:22:5B
Authority key identifier: 91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63
Certificate issuer: /CN=9143c5f48c77a79c985f5e5362e082ad54e23063
Certificate serial: 0197488CD0E9DF5B1B9B16102D3D95736B6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
Manifest number: 0C61
Signing time: Sat 07 Jun 2025 04:01:17 +0000
Manifest this update: Sat 07 Jun 2025 04:01:17 +0000
Manifest next update: Sun 08 Jun 2025 04:01:17 +0000
Files and hashes: 1: kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl (hash: 1wFoah2iisK1CsfZAN/I57TyiwoYvm66LQTkuV8acIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:d0:e9:df:5b:1b:9b:16:10:2d:3d:95:73:6b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9143c5f48c77a79c985f5e5362e082ad54e23063
Validity
Not Before: Jun 7 04:01:17 2025 GMT
Not After : Jun 8 04:01:17 2025 GMT
Subject: CN=39372e009ac13985423a1b61230fe23d6c8c225b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5b:13:8d:a0:51:8f:e6:6d:03:54:7d:5e:85:
29:81:9f:bf:4c:c7:e1:b5:46:3d:98:f5:ec:7b:29:
1b:74:8c:0c:57:ad:68:68:38:ee:08:1d:36:76:3e:
c9:e9:6c:a9:af:0c:2e:6e:92:ab:b7:c2:9c:1e:d7:
1c:7a:b3:e4:f1:28:d7:22:52:51:a0:b7:78:d1:49:
ee:d1:45:a3:d9:29:9e:42:2b:04:ed:f3:75:e9:65:
98:25:70:1d:a7:96:5e:a7:4e:8d:bd:a3:8d:22:bb:
f7:69:fb:e6:84:b4:6f:4d:1a:21:a3:0c:00:83:3a:
23:4e:48:b1:f9:36:1f:95:c5:5e:a4:af:51:9f:c6:
e1:78:ce:8f:e8:a5:bb:61:f2:7c:5a:9d:23:32:69:
3e:9b:c5:40:ce:71:0c:fe:9c:4e:5c:d9:43:25:f8:
11:75:ab:44:23:b2:88:9f:d4:93:94:9a:b8:41:77:
99:2a:6a:4f:6f:6e:94:51:f4:c1:02:45:24:ca:a1:
c2:90:7c:3d:15:6e:1f:9f:b1:11:31:98:0c:73:27:
24:f3:76:26:d9:e3:ad:6d:84:b2:02:18:0a:ed:9d:
0d:ae:ef:33:53:ee:c8:b2:c6:c5:90:68:a3:6e:c1:
60:f7:cf:f3:68:a6:ad:cd:b3:2c:3f:5f:04:94:13:
9d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:37:2E:00:9A:C1:39:85:42:3A:1B:61:23:0F:E2:3D:6C:8C:22:5B
X509v3 Authority Key Identifier:
keyid:91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e4:24:96:fe:bc:bb:92:a9:cc:08:6c:08:d5:a9:96:d3:86:
44:d5:3c:e1:2a:75:58:e2:af:28:a4:df:84:e8:b8:ac:f1:f4:
f7:83:ba:c6:5e:fa:50:c8:2d:80:00:d7:28:5b:5f:45:36:16:
fd:0f:f2:16:82:5f:74:bf:73:f5:83:c0:c8:c8:c3:ea:3e:4b:
5d:33:c8:14:0a:90:2f:6e:e8:41:0e:cf:63:b3:c4:0f:39:cf:
f8:0b:1d:75:5a:88:fa:b7:ed:d5:ef:0f:6a:00:d4:ec:b8:05:
1c:a5:b0:4e:f0:0d:d1:35:bc:4f:76:68:0b:61:e7:3e:6e:50:
59:e0:3e:bf:1d:0d:45:9f:13:f3:13:74:27:5f:1e:ab:82:21:
4e:4e:f5:24:e1:d0:06:78:f9:d9:89:e7:90:27:fe:5c:1b:6a:
1d:99:a0:c7:44:34:0c:bb:ff:20:97:60:c2:bb:c8:82:05:04:
04:1a:ea:66:1b:00:77:b1:2e:1e:31:ef:ff:10:7f:98:9d:b7:
30:4b:45:14:56:43:5e:0c:00:56:85:ed:c2:5c:f4:5e:7a:c6:
fd:95:82:5e:e9:20:0b:6a:4f:0d:5e:7d:a1:c4:7a:bb:8d:76:
b0:1e:dc:d8:55:fa:0a:5c:b7:41:da:ca:2a:d8:41:63:77:75:
e5:95:f5:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjNDp31sbmxYQLT2Vc2tqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNDNjNWY0OGM3N2E3OWM5ODVmNWU1MzYyZTA4MmFkNTRl
MjMwNjMwHhcNMjUwNjA3MDQwMTE3WhcNMjUwNjA4MDQwMTE3WjAzMTEwLwYDVQQD
EygzOTM3MmUwMDlhYzEzOTg1NDIzYTFiNjEyMzBmZTIzZDZjOGMyMjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilsTjaBRj+ZtA1R9XoUpgZ+/TMfh
tUY9mPXseykbdIwMV61oaDjuCB02dj7J6WyprwwubpKrt8KcHtccerPk8SjXIlJR
oLd40Unu0UWj2SmeQisE7fN16WWYJXAdp5Zep06NvaONIrv3afvmhLRvTRohowwA
gzojTkix+TYflcVepK9Rn8bheM6P6KW7YfJ8Wp0jMmk+m8VAznEM/pxOXNlDJfgR
datEI7KIn9STlJq4QXeZKmpPb26UUfTBAkUkyqHCkHw9FW4fn7ERMZgMcyck83Ym
2eOtbYSyAhgK7Z0Nru8zU+7IssbFkGijbsFg98/zaKatzbMsP18ElBOd0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDk3LgCawTmFQjobYSMP4j1sjCJbMB8GA1UdIwQY
MBaAFJFDxfSMd6ecmF9eU2Lggq1U4jBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VQRjlJeDNwNXlZWDE1VFl1Q0NyVlRpTUdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9lYmM4MDQtZTNjNi00MGU2LWJmYmUt
YmRmMzY0YmE3N2NkLzEva1VQRjlJeDNwNXlZWDE1VFl1Q0NyVlRpTUdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9lYmM4MDQtZTNjNi00MGU2LWJmYmUtYmRmMzY0YmE3N2Nk
LzEva1VQRjlJeDNwNXlZWDE1VFl1Q0NyVlRpTUdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOQklv68
u5KpzAhsCNWpltOGRNU84Sp1WOKvKKTfhOi4rPH094O6xl76UMgtgADXKFtfRTYW
/Q/yFoJfdL9z9YPAyMjD6j5LXTPIFAqQL27oQQ7PY7PEDznP+AsddVqI+rft1e8P
agDU7LgFHKWwTvAN0TW8T3ZoC2HnPm5QWeA+vx0NRZ8T8xN0J18eq4IhTk71JOHQ
Bnj52YnnkCf+XBtqHZmgx0Q0DLv/IJdgwrvIggUEBBrqZhsAd7EuHjHv/xB/mJ23
MEtFFFZDXgwAVoXtwlz0XnrG/ZWCXukgC2pPDV59ocR6u412sB7c2FX6Cly3QdrK
KthBY3d15ZX1HA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:26:06 2025 by rpki-client