Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft
File: UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft (raw, json)
Hash identifier: 14WNk4mUENy/ops4eAJrAKUWJFIhTEbRaelQ5kWbQ/o=
Subject key identifier: 24:36:8F:27:99:E4:30:A7:BF:BA:B5:DD:90:F5:22:D1:1C:38:F2:7B
Authority key identifier: 52:70:2C:DE:E0:43:09:4A:C2:F3:31:70:12:5F:94:F7:03:4D:A8:F0
Certificate issuer: /CN=52702cdee043094ac2f33170125f94f7034da8f0
Certificate serial: 019748C3048CBA12136E3675FC5F35139BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnAs3uBDCUrC8zFwEl-U9wNNqPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft
Manifest number: 0F17
Signing time: Sat 07 Jun 2025 05:00:29 +0000
Manifest this update: Sat 07 Jun 2025 05:00:29 +0000
Manifest next update: Sun 08 Jun 2025 05:00:29 +0000
Files and hashes: 1: UnAs3uBDCUrC8zFwEl-U9wNNqPA.crl (hash: y9KOWyMWIqSn2GNeocdJ3j7C8Ag+ksx7gh+XwBgI4ZM=)
2: eZTqCsy1o9f-eq_FZSRPL4-aBD8.roa (hash: cQOdS5lB0S1LA9krJg3sdASUyUTn/NkoA0OQ3se0FuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UnAs3uBDCUrC8zFwEl-U9wNNqPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:04:8c:ba:12:13:6e:36:75:fc:5f:35:13:9b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52702cdee043094ac2f33170125f94f7034da8f0
Validity
Not Before: Jun 7 05:00:29 2025 GMT
Not After : Jun 8 05:00:29 2025 GMT
Subject: CN=24368f2799e430a7bfbab5dd90f522d11c38f27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2c:45:23:4e:fb:c6:01:bd:59:61:5a:28:86:
24:6b:f9:de:b8:69:c9:aa:c8:51:1e:59:c0:2c:0e:
97:d5:9f:f6:c5:6e:88:47:08:a0:1a:3f:70:14:99:
86:f4:57:d1:2a:ff:23:c3:29:87:f8:3c:a7:c6:de:
18:dd:0e:5a:e8:2c:04:fe:be:8a:ca:3c:56:e5:55:
d3:b8:f3:e0:7c:0b:07:f1:10:73:2d:6f:e2:f7:18:
f2:c7:72:b4:79:95:41:5a:0f:2f:1a:a1:a4:aa:a6:
df:f8:04:8c:3e:3e:f1:f1:2b:2e:ad:0d:df:d5:68:
b9:e7:94:6d:38:ca:26:d4:28:43:56:bc:ca:93:84:
b7:e5:b4:ba:f3:84:74:b8:df:cf:76:44:fc:e7:ca:
1a:e0:7a:8d:4b:3b:71:c6:81:58:fc:98:ef:48:57:
47:f9:68:cc:8c:6c:cb:72:2d:9e:4d:c7:44:bc:15:
3e:bb:df:64:fe:e1:87:54:29:0d:16:85:f0:78:e5:
e0:7d:a8:03:06:1c:a7:57:e5:7c:fc:e5:a5:bf:03:
9d:67:f4:1d:35:4d:32:60:f0:84:2b:27:1f:94:a5:
5c:d4:07:63:d4:72:a6:11:5b:73:99:ae:37:55:28:
34:4d:d8:9e:8a:f6:4a:f8:aa:b2:5a:00:3d:be:27:
7c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:36:8F:27:99:E4:30:A7:BF:BA:B5:DD:90:F5:22:D1:1C:38:F2:7B
X509v3 Authority Key Identifier:
keyid:52:70:2C:DE:E0:43:09:4A:C2:F3:31:70:12:5F:94:F7:03:4D:A8:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnAs3uBDCUrC8zFwEl-U9wNNqPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b9:e3:29:94:f1:a1:d0:90:c2:46:7e:86:ea:12:77:55:fc:
91:41:40:53:5a:cf:53:c3:9e:a8:5f:02:74:05:8c:a7:ea:ad:
ae:23:5b:c2:48:86:3a:dc:a7:05:34:ad:27:d1:63:4f:30:81:
ab:df:2b:27:4b:17:41:28:bb:42:cf:a6:49:10:dd:db:6c:aa:
ef:75:82:2c:98:cf:4c:18:19:e4:89:8c:6a:7a:8a:e4:bc:b4:
93:a8:f4:a6:2e:54:f3:fc:5c:28:5a:eb:77:1b:90:2b:23:ee:
76:0b:93:f1:05:98:44:b6:81:55:ae:f7:5f:3d:b1:b3:5b:f4:
89:59:da:74:a8:10:24:7f:fb:66:6a:ac:9a:38:c8:b7:7b:c6:
a9:34:3e:b3:83:ae:fe:59:02:8e:36:5a:84:c7:c8:ea:52:9c:
00:06:57:3c:46:15:49:7d:12:59:18:f0:d9:06:40:c3:0a:05:
6c:ce:6a:3c:c9:7d:ba:91:ec:1f:ed:05:97:b3:d9:a9:e0:43:
1e:64:04:06:29:65:8c:d3:64:96:53:aa:8f:f2:d3:f1:43:e3:
62:5d:b3:12:97:4a:59:0e:64:68:f3:e8:d7:ab:3d:fe:d0:7e:
29:1a:8c:4e:3e:d8:db:af:da:9b:46:86:5b:fa:48:a6:fc:ba:
97:51:ea:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:48:09 2025 by rpki-client