
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
File: r1UJ13Yi0who8jYTxagW5ySEAWU.mft (raw, json)
Hash identifier: 0THQRpaSdDLvaoSTrXRr+8bDZNde1TGBplMx711C2jU=
Subject key identifier: 27:9F:C2:A4:52:DA:D9:70:6C:2B:08:51:01:80:32:E4:36:67:C0:EF
Authority key identifier: AF:55:09:D7:76:22:D3:08:68:F2:36:13:C5:A8:16:E7:24:84:01:65
Certificate issuer: /CN=af5509d77622d30868f23613c5a816e724840165
Certificate serial: 01974E571B95901BDDB1FCFDA9FE4526CE40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
Manifest number: 0633
Signing time: Sun 08 Jun 2025 07:00:20 +0000
Manifest this update: Sun 08 Jun 2025 07:00:20 +0000
Manifest next update: Mon 09 Jun 2025 07:00:20 +0000
Files and hashes: 1: r1UJ13Yi0who8jYTxagW5ySEAWU.crl (hash: 7XN1FXXTOpT0qKXahaHVEu4bgmzfyirAh6qZA62sOQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:1b:95:90:1b:dd:b1:fc:fd:a9:fe:45:26:ce:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5509d77622d30868f23613c5a816e724840165
Validity
Not Before: Jun 8 07:00:20 2025 GMT
Not After : Jun 9 07:00:20 2025 GMT
Subject: CN=279fc2a452dad9706c2b0851018032e43667c0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c1:e1:72:29:70:f0:41:2a:67:6b:6f:fd:1f:
c0:cd:68:d2:c5:0c:c6:14:1e:46:ac:05:ec:f3:1a:
18:9f:cd:7f:30:a1:da:18:48:3f:c1:c4:c7:6f:19:
bd:85:1e:da:52:53:71:f8:93:6c:79:b2:21:d7:74:
da:8d:65:a0:53:15:0a:00:15:42:3c:e2:73:32:e6:
fe:2e:4c:79:c1:9e:01:ce:dd:ec:2e:68:ef:99:35:
cd:92:b1:93:d8:76:9b:07:93:cc:4d:a5:22:80:f5:
0b:75:d8:81:2f:55:fc:c5:48:93:0b:2f:0a:ed:30:
52:b4:c3:67:8a:bf:5c:22:b3:a5:d6:f1:e7:2a:2f:
49:3f:be:b7:8e:62:d5:7a:98:84:28:f5:13:cf:60:
6a:c7:aa:ef:88:69:b4:42:85:d8:cb:ab:50:ec:ad:
ca:2c:a0:a3:b8:dc:18:54:12:64:53:dc:80:66:65:
fa:6e:7a:6e:40:48:e7:80:51:3e:bf:8a:87:49:63:
3f:72:1c:1a:a9:35:0d:f6:84:cb:fd:fe:cc:ab:bd:
f4:f2:e8:1c:1e:92:76:07:8e:e4:77:dd:13:d9:ee:
8f:df:4c:bd:bb:ef:9d:d4:eb:9d:e8:c8:3f:8f:8b:
d7:a7:d5:fd:0d:0f:15:88:01:ab:4f:f0:de:0a:f8:
06:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9F:C2:A4:52:DA:D9:70:6C:2B:08:51:01:80:32:E4:36:67:C0:EF
X509v3 Authority Key Identifier:
keyid:AF:55:09:D7:76:22:D3:08:68:F2:36:13:C5:A8:16:E7:24:84:01:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:49:64:71:58:4e:aa:dc:90:45:15:13:ff:96:7d:6d:4b:59:
cf:e9:05:ef:ce:57:77:83:f5:87:79:f2:6c:b0:7c:dd:ce:0b:
93:b2:1f:08:63:b7:b6:62:c5:69:ed:0d:e9:1f:1f:63:19:e4:
d0:3c:34:83:e2:27:d9:73:ba:55:4d:30:b5:85:34:5b:61:22:
75:e3:1f:18:e0:d1:64:b5:a5:95:b2:49:f2:fa:1b:14:b1:ae:
27:12:2f:16:ea:38:20:79:8c:61:23:2d:df:96:51:ec:fe:a4:
68:1d:cc:0d:dd:59:d5:65:21:15:de:8a:47:1a:7f:bd:96:7b:
fa:3f:81:13:d4:42:78:8b:5d:27:99:6b:f4:1f:a3:6e:26:27:
47:d9:91:89:f6:e1:45:fe:83:41:df:e6:ab:3f:77:29:a1:d5:
ad:84:39:a4:54:9f:48:18:95:bf:99:4a:f2:69:72:61:ea:d8:
c5:0a:18:40:92:aa:a9:e1:82:64:1e:3c:ba:cb:29:43:c0:7c:
3a:cf:88:e9:32:d2:99:65:85:fb:d7:40:e9:3c:97:91:38:35:
a2:b3:8f:a1:2d:4a:a4:32:a8:66:6e:32:0d:94:5f:e3:e8:f2:
c6:1b:8e:1e:35:48:9e:46:1c:26:95:d9:d2:12:1c:fb:f6:64:
32:b0:36:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:37:08 2025 by rpki-client