Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
File: UrDyNFHcBfp-z50etB3T0TdWRTs.mft (raw, json)
Hash identifier: 6gzdY37Id8OEieboSqq/J1kflX1tcVZ3LO2H9Wnmr3Q=
Subject key identifier: 74:59:12:DF:70:38:6B:EA:E2:5C:7B:13:A6:8D:25:8A:C1:63:AF:BC
Authority key identifier: 52:B0:F2:34:51:DC:05:FA:7E:CF:9D:1E:B4:1D:D3:D1:37:56:45:3B
Certificate issuer: /CN=52b0f23451dc05fa7ecf9d1eb41dd3d13756453b
Certificate serial: 01974EC514680F8FDE96F9138999750E5F16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
Manifest number: 157C
Signing time: Sun 08 Jun 2025 09:00:28 +0000
Manifest this update: Sun 08 Jun 2025 09:00:28 +0000
Manifest next update: Mon 09 Jun 2025 09:00:28 +0000
Files and hashes: 1: UrDyNFHcBfp-z50etB3T0TdWRTs.crl (hash: ZJ2h/K4JjrvXCRTTmN4HasHlh3QewbZeSKpofc3IFCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:14:68:0f:8f:de:96:f9:13:89:99:75:0e:5f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b0f23451dc05fa7ecf9d1eb41dd3d13756453b
Validity
Not Before: Jun 8 09:00:28 2025 GMT
Not After : Jun 9 09:00:28 2025 GMT
Subject: CN=745912df70386beae25c7b13a68d258ac163afbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:35:ab:92:af:f4:b0:89:89:c6:52:6a:05:f9:
e4:29:e0:ca:cb:4e:f8:4a:e5:ed:81:14:d2:c2:73:
47:ee:86:d5:3e:31:42:b6:91:d5:85:02:d4:3c:97:
32:c8:6f:b5:6f:02:29:4a:49:f9:cf:a4:a0:9b:30:
0d:e4:28:7a:c8:ff:94:57:6e:ef:03:47:fc:6d:eb:
ae:d5:36:0b:8c:01:e1:42:0d:45:37:34:d0:3b:91:
b3:f1:2c:46:5c:24:1c:48:f6:a3:c0:41:f7:bf:0f:
54:c4:1d:29:e4:d6:19:7e:c1:9e:84:34:b9:15:55:
d2:4c:34:5f:9f:77:72:c3:73:35:d0:26:83:20:ad:
5b:d5:b2:b9:46:f4:0d:1c:0a:93:5a:77:05:83:c7:
89:a4:49:95:3b:1d:16:57:d4:ba:35:94:5f:26:6c:
71:1f:7a:ed:55:d2:85:89:20:b4:ef:19:ad:81:52:
5d:c4:30:0c:2d:c2:e4:d8:f4:64:c1:ee:13:82:ca:
78:ac:f7:d5:39:21:fc:4a:ea:0d:2f:50:c6:51:70:
f1:35:ec:e0:56:d7:34:3b:d1:e0:3f:bc:ce:90:ab:
b1:f9:57:46:8d:45:06:08:e9:14:89:68:c0:e6:e1:
9d:85:88:48:91:05:41:ca:9a:ce:ed:9d:74:f9:19:
5a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:59:12:DF:70:38:6B:EA:E2:5C:7B:13:A6:8D:25:8A:C1:63:AF:BC
X509v3 Authority Key Identifier:
keyid:52:B0:F2:34:51:DC:05:FA:7E:CF:9D:1E:B4:1D:D3:D1:37:56:45:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:22:66:8a:3d:ee:ba:54:64:b0:56:a5:ec:86:99:cc:82:0d:
bc:df:73:d1:0d:61:7e:e6:39:5c:e5:f0:bf:3f:84:2b:be:ce:
3a:2b:dc:36:1d:67:74:1a:89:a0:9e:36:ea:34:9e:b1:61:16:
9f:d5:23:16:c3:b5:05:84:10:5e:fe:ae:05:42:89:ec:79:c8:
34:54:73:ce:5a:79:f7:df:ae:82:28:3f:83:d3:53:9f:bf:53:
40:61:40:7a:a2:10:48:e5:40:d4:ae:55:c0:5e:2a:6c:06:c1:
0d:76:e8:4d:bb:08:7d:eb:70:db:24:b8:64:ab:c7:d6:cc:e5:
d6:f4:a7:22:dc:67:26:0e:cf:38:33:1f:fb:72:c7:b5:0a:cb:
1a:09:c4:17:92:57:8b:6b:82:34:8b:1d:8f:df:68:c7:6d:70:
86:26:55:47:28:68:e8:85:82:89:04:13:bd:2e:d8:4e:e6:26:
75:69:ad:a7:55:d7:f8:d6:f7:97:84:4f:4f:99:50:65:bb:da:
c8:e0:d8:f2:b9:b3:c2:cb:5e:5d:6c:2e:cc:78:c3:46:b6:88:
36:27:49:7f:16:66:7d:bf:30:1e:03:fb:e6:f6:34:a1:09:93:
eb:f1:bb:cc:32:de:3f:c4:cf:6f:33:d5:37:10:43:c2:f8:5d:
67:25:b1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:47:41 2025 by rpki-client