Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
File: cUKDDu7SiwS83QP6P9pIxUha_P4.mft (raw, json)
Hash identifier: ZIbd9DxLtloOip5MQsVkOJ7USxqQKT4HjoEY6e2h9uo=
Subject key identifier: 7A:E7:A7:5C:11:D5:6D:3E:55:8B:40:1B:0A:26:B4:38:9F:42:51:C5
Authority key identifier: 71:42:83:0E:EE:D2:8B:04:BC:DD:03:FA:3F:DA:48:C5:48:5A:FC:FE
Certificate issuer: /CN=7142830eeed28b04bcdd03fa3fda48c5485afcfe
Certificate serial: 0197658404AD82ACCD92BEBADE4A016F7372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
Manifest number: 0E5E
Signing time: Thu 12 Jun 2025 19:00:40 +0000
Manifest this update: Thu 12 Jun 2025 19:00:40 +0000
Manifest next update: Fri 13 Jun 2025 19:00:40 +0000
Files and hashes: 1: cUKDDu7SiwS83QP6P9pIxUha_P4.crl (hash: 9p5XlFf8Sn7hPsL/dH27QeX5no6sE9eIHA/95jJxnCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:84:04:ad:82:ac:cd:92:be:ba:de:4a:01:6f:73:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7142830eeed28b04bcdd03fa3fda48c5485afcfe
Validity
Not Before: Jun 12 19:00:40 2025 GMT
Not After : Jun 13 19:00:40 2025 GMT
Subject: CN=7ae7a75c11d56d3e558b401b0a26b4389f4251c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b1:85:89:cf:15:80:95:28:4c:63:63:c2:78:
03:67:83:f4:76:2e:89:51:ed:16:d3:1d:4b:d2:22:
b9:ec:48:81:61:2e:b9:7e:4c:fb:b3:a1:c2:84:b1:
26:a3:4b:97:51:27:29:77:1f:61:83:f2:2e:5a:dc:
6e:03:0c:33:5a:7c:07:fb:bb:d1:f0:08:01:7b:0f:
5d:ea:04:67:d1:ba:53:57:bb:6a:e2:93:1d:27:07:
3a:00:e7:df:fb:3c:b6:cf:9a:62:ca:d0:fe:4f:96:
08:4e:50:7f:d2:1f:a2:90:26:34:4e:36:b8:b8:3f:
6f:ad:a4:39:c9:df:b1:db:0d:2d:75:56:9a:66:4d:
de:9b:2e:27:a2:70:c9:7f:f2:a5:e5:06:3f:33:aa:
6a:ca:bc:75:64:70:18:a5:12:0e:30:98:9f:89:90:
d5:2b:df:ee:f9:3e:42:80:0b:b0:11:4a:35:32:2f:
44:40:38:a2:e2:33:60:36:d2:eb:08:08:fc:fc:33:
4b:1d:f9:ae:31:80:bf:3f:12:5e:5c:d9:68:f1:33:
ba:45:2b:42:57:4b:bf:9d:47:11:24:3e:70:6f:6d:
3c:ef:8b:30:42:09:56:5a:08:9b:50:b1:32:d7:64:
06:e1:aa:1f:af:29:a2:39:e1:d3:ed:12:19:74:cd:
6b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E7:A7:5C:11:D5:6D:3E:55:8B:40:1B:0A:26:B4:38:9F:42:51:C5
X509v3 Authority Key Identifier:
keyid:71:42:83:0E:EE:D2:8B:04:BC:DD:03:FA:3F:DA:48:C5:48:5A:FC:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2c:a1:a2:b9:f7:95:e1:7b:83:e9:23:c2:02:47:b0:3b:dc:
dc:b6:b8:5d:e2:b9:40:a4:70:04:49:e0:84:ba:ec:18:13:ec:
c2:a4:d8:72:09:01:c7:14:37:d5:9e:ba:fc:04:4b:ea:9f:6d:
8a:71:ca:04:38:8c:22:04:26:34:62:a5:d8:fe:78:86:f2:aa:
03:da:fc:de:2e:2a:08:ed:eb:ac:d3:d2:63:39:7e:a4:f8:b7:
93:3c:f6:23:1e:4f:d8:ae:43:49:12:81:85:c4:93:72:2e:5e:
3a:a1:08:18:de:1e:f9:d5:56:2a:7d:6d:77:8f:e8:24:56:2d:
90:9d:16:46:ae:48:0e:4b:c8:d7:13:27:1c:93:91:ea:af:e7:
cd:00:74:47:e7:94:71:4e:d9:2a:01:d7:1a:d5:e2:e5:06:93:
d7:fb:6c:6b:f4:9e:60:c0:12:e7:9a:e6:97:0a:9d:06:76:a0:
88:0c:76:bd:83:61:14:62:20:3a:63:a4:bd:fb:f8:0d:d4:da:
83:8a:af:ce:43:b5:20:57:1b:24:47:d9:d3:27:cf:92:02:ff:
c4:64:16:96:0f:b9:25:5c:c7:b6:cb:c6:fb:31:25:2e:7b:4a:
46:11:72:1c:c9:89:1b:a8:cf:f1:56:e0:65:13:01:9b:9e:b7:
cf:9d:35:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 21:37:28 2025 by rpki-client