
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft
File: UJVwBFEY_ttvz2G1lCDIc7cVh78.mft (raw, json)
Hash identifier: YzU4pS2McmaexT8msZ1eYVZmVX5WyeF05AKcjrkMloA=
Subject key identifier: C1:D0:A4:BF:0B:B1:82:08:4E:9B:99:BC:98:FE:28:58:B8:AD:DC:4C
Authority key identifier: 50:95:70:04:51:18:FE:DB:6F:CF:61:B5:94:20:C8:73:B7:15:87:BF
Certificate issuer: /CN=509570045118fedb6fcf61b59420c873b71587bf
Certificate serial: 0197D060476D169D4F79B6B69424B57A5C6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJVwBFEY_ttvz2G1lCDIc7cVh78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft
Manifest number: 15BF
Signing time: Thu 03 Jul 2025 13:00:59 +0000
Manifest this update: Thu 03 Jul 2025 13:00:59 +0000
Manifest next update: Fri 04 Jul 2025 13:00:59 +0000
Files and hashes: 1: UJVwBFEY_ttvz2G1lCDIc7cVh78.crl (hash: bPM4euPrSlC6IRVJfr22u1IEZDpwC9gP9zomHyFqYQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJVwBFEY_ttvz2G1lCDIc7cVh78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d0:60:47:6d:16:9d:4f:79:b6:b6:94:24:b5:7a:5c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509570045118fedb6fcf61b59420c873b71587bf
Validity
Not Before: Jul 3 13:00:59 2025 GMT
Not After : Jul 4 13:00:59 2025 GMT
Subject: CN=c1d0a4bf0bb182084e9b99bc98fe2858b8addc4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:15:21:6b:68:c0:12:f4:88:d4:b5:82:69:ae:
78:3b:1b:29:db:bc:4e:d6:ae:3e:6d:8b:4d:96:f9:
0c:d4:6e:67:69:99:11:19:52:12:ea:a9:58:71:75:
d9:7e:40:dc:8e:a0:6d:5e:ea:e1:b9:c7:53:0d:d3:
d3:36:12:e1:c5:14:52:52:13:bc:29:f8:2d:a7:2c:
33:b1:fe:c5:5b:c9:83:66:c7:a3:11:1a:93:20:b9:
a0:7c:25:3f:09:fd:cf:a4:0c:23:9f:6f:f6:3d:87:
c1:d4:bf:5b:58:58:5d:76:3e:bf:b1:3a:68:97:a3:
ea:0b:9c:5a:aa:09:b1:ae:ec:de:9d:45:3e:d7:f3:
ea:99:ab:b2:9e:36:56:dd:63:66:23:51:de:75:2e:
9a:69:46:d1:17:8c:d8:5a:40:62:c4:cb:f2:6d:40:
ce:18:9b:5c:d3:38:2e:e6:08:ae:6b:5c:f1:a3:74:
d1:cc:21:4b:4e:1b:ce:f8:33:0d:41:09:63:af:95:
94:f1:ee:ec:72:11:c7:11:31:3c:2d:14:8e:39:79:
01:36:ea:39:3f:f0:a3:31:b9:5e:21:d0:4f:a0:72:
42:e8:c2:fb:c9:6a:7f:85:db:9f:b6:3e:8a:b5:4e:
36:b7:54:e6:e5:b2:ac:f2:6b:4d:6a:b9:02:0d:76:
ac:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D0:A4:BF:0B:B1:82:08:4E:9B:99:BC:98:FE:28:58:B8:AD:DC:4C
X509v3 Authority Key Identifier:
keyid:50:95:70:04:51:18:FE:DB:6F:CF:61:B5:94:20:C8:73:B7:15:87:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJVwBFEY_ttvz2G1lCDIc7cVh78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:1b:23:92:5b:ea:b6:11:e6:a5:f4:92:64:76:b3:fb:d8:4c:
3e:8f:ca:22:f2:4a:88:eb:15:6f:16:8a:b8:06:38:66:67:7c:
51:31:e3:87:f8:7d:a3:37:c8:25:9a:19:65:f2:91:fb:8d:0b:
87:74:48:2b:cc:26:56:72:43:37:40:2c:17:99:f6:21:9f:14:
d1:f1:b5:06:fe:c7:01:5a:53:a9:4f:50:f4:89:00:89:85:75:
99:4e:76:a9:82:d6:2d:3a:ca:12:d7:2a:d4:a4:dc:34:5b:e7:
03:09:71:e5:f5:ee:4c:d6:8d:3b:7f:de:61:bc:3e:d4:7c:80:
67:da:52:f9:59:f8:e6:99:7d:9d:f0:da:b8:0f:cd:c5:c2:96:
63:be:e9:89:d6:26:b8:4d:b1:48:c6:65:60:02:14:18:2b:fa:
c0:75:52:6a:05:8f:5f:76:23:1d:ca:a7:d9:d8:8c:32:6b:4f:
29:4f:00:e9:9e:02:87:bf:fe:4b:d2:1c:95:e2:ba:8b:bc:ab:
6a:7d:79:75:12:ae:64:a3:31:48:1c:2e:83:a2:a0:2d:e2:3d:
b8:79:de:cd:55:b5:1a:57:6a:54:5c:24:a6:cd:55:d1:e9:53:
15:53:07:d1:b0:fe:3f:5b:d8:1d:a4:9e:93:c2:40:32:fd:71:
3b:01:b5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 21:07:50 2025 by rpki-client