Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
File: g06Y-uclpT43QqjU7ehT9P9juRM.mft (raw, json)
Hash identifier: z5R4aU1qVUJZ7+695XCz4VeJY0JAoxJUykqAjjWili0=
Subject key identifier: B4:06:AA:85:08:8D:EC:92:86:8C:EE:D3:68:98:27:61:F6:72:39:C9
Authority key identifier: 83:4E:98:FA:E7:25:A5:3E:37:42:A8:D4:ED:E8:53:F4:FF:63:B9:13
Certificate issuer: /CN=834e98fae725a53e3742a8d4ede853f4ff63b913
Certificate serial: 01975DCA865305FB2EC72AC3F526131C7F0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
Manifest number: 0339
Signing time: Wed 11 Jun 2025 07:00:43 +0000
Manifest this update: Wed 11 Jun 2025 07:00:43 +0000
Manifest next update: Thu 12 Jun 2025 07:00:43 +0000
Files and hashes: 1: g06Y-uclpT43QqjU7ehT9P9juRM.crl (hash: Jqvp+cVPmSWmHfvaKkCKhZ7lF3TOEPvVl2/0/a3NtFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:ca:86:53:05:fb:2e:c7:2a:c3:f5:26:13:1c:7f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=834e98fae725a53e3742a8d4ede853f4ff63b913
Validity
Not Before: Jun 11 07:00:43 2025 GMT
Not After : Jun 12 07:00:43 2025 GMT
Subject: CN=b406aa85088dec92868ceed368982761f67239c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ee:88:44:7f:f1:e1:c9:a5:4d:ca:c8:bd:dc:
d6:38:f3:84:72:c4:aa:b2:d2:69:30:1d:23:1b:55:
65:96:57:cc:6f:b4:1e:e5:52:4e:9d:82:24:5c:bc:
c6:61:09:17:15:07:89:b2:fc:5f:76:4c:6c:46:7b:
9c:47:fe:0b:bf:cf:ea:bb:87:e1:ed:a6:ee:d2:4c:
b2:fa:15:39:d0:5a:37:2b:15:cc:5e:70:86:74:8d:
0c:66:03:b7:d4:b2:ea:55:69:83:f2:ca:0f:b5:f9:
90:bb:57:a4:d1:4e:0f:65:bf:e8:15:5e:01:18:45:
3b:3f:ef:37:8c:81:8e:c8:57:25:bd:82:0b:40:05:
bc:b9:98:b0:7e:5e:c4:64:e5:d2:d0:1d:61:1e:62:
cc:3f:0b:37:28:70:66:49:94:6f:e6:5e:a1:0d:2a:
70:58:62:24:8d:44:2a:75:b4:5e:70:9b:3e:a6:c8:
b8:5e:cc:03:a9:a8:7d:c4:4e:d0:c8:73:50:89:4c:
d2:ea:5b:fe:1f:04:26:9f:ae:5b:ce:8d:ac:9f:c1:
4b:9c:7d:90:1d:c1:78:5b:4f:99:73:cd:c8:85:6a:
1b:40:2b:4d:98:b8:1f:09:21:4f:93:7b:16:0a:bc:
13:64:2a:d1:85:ae:88:0b:06:02:79:2c:27:1e:21:
2f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:06:AA:85:08:8D:EC:92:86:8C:EE:D3:68:98:27:61:F6:72:39:C9
X509v3 Authority Key Identifier:
keyid:83:4E:98:FA:E7:25:A5:3E:37:42:A8:D4:ED:E8:53:F4:FF:63:B9:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:43:86:72:ef:3a:54:59:3a:f1:62:17:3a:1d:01:d6:f0:85:
8d:fc:52:a6:a2:3c:aa:7d:62:33:bb:8e:0b:2f:cc:c2:04:9c:
b3:ed:33:44:c6:de:6f:04:31:74:38:8c:a3:9b:a2:36:0a:7b:
99:a8:d8:94:80:2a:b9:d1:7e:1d:91:de:1c:32:95:08:88:c7:
9e:0d:c3:f6:70:71:62:59:e9:aa:89:a6:68:14:14:f1:9a:59:
f4:05:56:01:03:8b:d5:84:d7:35:4f:ca:72:36:e2:18:c4:6d:
a2:53:e6:93:10:92:bb:cd:d6:aa:2b:f9:8b:45:e2:bf:72:aa:
0a:84:23:1f:a0:84:41:bc:77:89:35:77:c2:d5:c3:ab:f4:19:
49:c3:bb:a1:96:c2:9f:65:de:4c:17:aa:6f:e8:ae:06:21:fb:
98:de:52:a3:fb:29:b4:84:67:8c:84:67:7e:ab:08:25:cc:3e:
47:69:08:80:d0:6a:48:30:78:28:fd:17:c8:81:9d:8a:3b:c4:
35:c8:08:d1:f8:f7:bf:11:d1:95:0d:ff:ce:56:c1:2c:f5:0b:
49:f2:48:e4:2a:a9:64:34:57:7d:dd:15:14:33:e1:f0:4c:e0:
05:55:4c:c5:7d:cf:04:c8:91:e2:4c:41:e8:d5:c1:40:e6:37:
7e:a9:29:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:34:01 2025 by rpki-client