Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
File: UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft (raw, json)
Hash identifier: C+XpeZ4ubt3ZAfrWSwWy9dkN3EQtZHNrEZocu/KtjuY=
Subject key identifier: FF:14:F5:31:90:7C:D6:5F:B5:B2:5A:B6:1D:C4:41:02:C2:88:02:2C
Authority key identifier: 50:3F:73:FE:FE:9D:BD:16:56:14:37:5A:18:A3:4C:DC:FB:4A:31:EE
Certificate issuer: /CN=503f73fefe9dbd165614375a18a34cdcfb4a31ee
Certificate serial: 019749D5B0EBBDC8CA9AD9B08D2268BF7A2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UD9z_v6dvRZWFDdaGKNM3PtKMe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
Manifest number: 0936
Signing time: Sat 07 Jun 2025 10:00:30 +0000
Manifest this update: Sat 07 Jun 2025 10:00:30 +0000
Manifest next update: Sun 08 Jun 2025 10:00:30 +0000
Files and hashes: 1: UD9z_v6dvRZWFDdaGKNM3PtKMe4.crl (hash: KK6e74R6NMpxKGuwtZEBeFqB99Hsp5TjYcToEsmB23I=)
2: rB2uaCwrLsHd8QP3gzLrvvAfPiA.roa (hash: rFl9lkx1744U+43ipMxs7m2ICQoiTAYXwAH+fMGwgoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UD9z_v6dvRZWFDdaGKNM3PtKMe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:b0:eb:bd:c8:ca:9a:d9:b0:8d:22:68:bf:7a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=503f73fefe9dbd165614375a18a34cdcfb4a31ee
Validity
Not Before: Jun 7 10:00:30 2025 GMT
Not After : Jun 8 10:00:30 2025 GMT
Subject: CN=ff14f531907cd65fb5b25ab61dc44102c288022c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:20:b2:c2:bc:90:3b:9c:0b:12:53:bd:6c:ef:
5b:eb:d2:df:97:30:5d:2f:7d:59:6f:5c:4e:0c:5a:
03:41:69:8d:15:79:5b:d3:66:d2:db:e0:1f:28:23:
86:73:06:39:6d:82:df:34:99:58:ed:38:8c:f9:5e:
80:96:7b:0b:8d:6f:da:8d:cc:e8:e8:e9:c2:38:c3:
29:27:42:c0:b1:65:d4:c4:b2:14:5f:49:be:9c:dd:
15:a1:1e:cb:1f:0b:0e:24:48:78:87:26:52:1e:67:
47:2d:49:37:92:7c:fb:33:de:78:51:5c:9b:8e:9a:
4d:72:91:8a:e7:6f:69:e0:e4:63:90:96:56:9c:a7:
ef:88:4c:6b:b6:4a:35:d5:c6:20:70:84:c6:f7:2d:
85:81:c2:dc:72:0d:f6:29:33:97:c1:5a:45:fe:9d:
60:e4:89:11:a9:c7:3a:da:47:2f:6c:b7:ba:7d:34:
99:23:25:e7:bd:8e:82:3b:e2:a6:55:7b:b3:4b:37:
61:88:ac:a2:df:be:53:c4:c4:df:b7:4d:2a:13:9d:
f4:ae:6b:68:04:47:f1:9b:4e:e7:e4:c6:14:49:70:
cb:b9:57:ae:52:f5:fa:16:59:cf:67:18:90:37:75:
9d:f5:a9:9b:42:1f:40:62:1e:ae:2c:51:66:25:77:
27:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:14:F5:31:90:7C:D6:5F:B5:B2:5A:B6:1D:C4:41:02:C2:88:02:2C
X509v3 Authority Key Identifier:
keyid:50:3F:73:FE:FE:9D:BD:16:56:14:37:5A:18:A3:4C:DC:FB:4A:31:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UD9z_v6dvRZWFDdaGKNM3PtKMe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:15:a5:b3:7d:ad:f1:7b:91:cf:4d:78:4e:51:b0:6f:53:51:
8b:92:5f:0a:0f:0e:49:10:83:72:4f:bd:0a:08:98:66:58:2a:
73:89:a4:bd:3a:a7:f8:d8:ee:83:f1:75:7f:47:d8:67:ff:16:
db:4a:b0:5f:e1:fc:22:8b:05:9a:bb:8e:7e:f9:34:4a:64:2d:
c3:eb:50:b4:70:d6:49:30:6d:3f:62:23:95:91:c9:aa:11:2f:
7d:4c:a6:59:9f:81:6f:fe:26:d7:68:f3:8e:c3:12:5b:39:70:
33:bd:30:b8:a1:47:bb:d6:2b:bf:60:93:64:6b:8d:d8:1c:96:
c9:f6:52:1f:49:1f:c6:1a:dc:aa:fa:a7:32:90:1d:68:64:d3:
a9:82:dd:d1:38:18:09:ca:1e:9e:2c:41:47:5a:66:9b:bd:f3:
6f:f2:af:5d:da:a2:9c:f0:cd:f8:fe:72:e2:a4:c2:ae:31:22:
74:6d:00:1b:87:2f:35:7b:bc:f0:e8:ca:6e:dd:29:9d:ae:9c:
03:9b:f1:a7:8e:96:ba:6c:ad:ee:f3:43:f3:91:49:31:29:32:
ea:eb:62:7c:7f:25:78:bf:5e:dc:e1:ff:21:81:59:cb:25:86:
f1:3e:70:1b:aa:bc:77:19:83:93:99:c9:e5:94:fd:58:2a:04:
4f:97:72:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:25:12 2025 by rpki-client