Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.mft
File: urOPSeByR4vlU-z_NjXz3Zd1gQE.mft (raw, json)
Hash identifier: 7dVi+sVDUYevMbHeyqmM/TEvKoYrPMOy126PupD4XiE=
Subject key identifier: FE:EB:48:E8:AD:D2:A5:D1:1B:52:24:73:73:5B:7E:94:41:E1:56:F7
Authority key identifier: BA:B3:8F:49:E0:72:47:8B:E5:53:EC:FF:36:35:F3:DD:97:75:81:01
Certificate issuer: /CN=bab38f49e072478be553ecff3635f3dd97758101
Certificate serial: 01974B56DA2AE0A8A2E37B8DDBB54E59CE62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urOPSeByR4vlU-z_NjXz3Zd1gQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.mft
Manifest number: 0F6C
Signing time: Sat 07 Jun 2025 17:01:12 +0000
Manifest this update: Sat 07 Jun 2025 17:01:12 +0000
Manifest next update: Sun 08 Jun 2025 17:01:12 +0000
Files and hashes: 1: urOPSeByR4vlU-z_NjXz3Zd1gQE.crl (hash: M8RM/KcCfhAETjHxhR1W5uvcNW8jE/jizG789qsJJJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/urOPSeByR4vlU-z_NjXz3Zd1gQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:da:2a:e0:a8:a2:e3:7b:8d:db:b5:4e:59:ce:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab38f49e072478be553ecff3635f3dd97758101
Validity
Not Before: Jun 7 17:01:12 2025 GMT
Not After : Jun 8 17:01:12 2025 GMT
Subject: CN=feeb48e8add2a5d11b522473735b7e9441e156f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7c:9e:04:80:3a:c2:5f:9e:96:1d:40:8d:87:
8d:ea:72:93:2d:3a:14:1b:18:1b:86:d8:73:fc:99:
ad:fa:be:2d:83:74:c1:6e:9f:0d:80:3d:2e:36:15:
9f:32:fe:1a:54:7e:6e:73:13:13:58:37:95:49:f0:
dd:84:a7:47:8f:b7:2d:53:97:ba:e1:92:0e:48:61:
17:26:04:ff:43:a6:69:6c:77:35:e5:ec:73:ae:83:
ef:f0:fe:d2:4b:ba:c7:56:ed:85:15:ea:65:dd:b5:
12:0a:c0:4b:8d:de:09:e9:65:6a:8e:c4:f5:3d:94:
90:62:0c:cf:c9:b8:e8:ec:bc:13:bf:67:3a:52:0f:
7b:b6:95:49:b0:de:2f:78:75:e5:1a:9e:c4:b9:7d:
e1:c6:39:c0:bb:e5:ea:a2:43:3c:80:89:ec:ca:5d:
27:e2:94:88:a4:7e:2d:4e:19:49:fb:96:0c:3c:4d:
88:40:6e:2f:35:c3:83:13:9e:f4:5c:22:50:34:e5:
fc:06:8b:32:47:6d:9f:3d:ab:71:98:53:c2:16:19:
51:c4:44:ca:f5:49:f1:7d:ff:1c:fc:b8:f9:a7:43:
69:2e:ed:d6:49:fa:6e:c3:88:41:6b:80:66:97:c1:
a3:66:2b:ba:07:4d:0f:53:9d:fd:dd:e0:f9:38:68:
19:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EB:48:E8:AD:D2:A5:D1:1B:52:24:73:73:5B:7E:94:41:E1:56:F7
X509v3 Authority Key Identifier:
keyid:BA:B3:8F:49:E0:72:47:8B:E5:53:EC:FF:36:35:F3:DD:97:75:81:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urOPSeByR4vlU-z_NjXz3Zd1gQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d2:86:1c:26:d7:7d:b9:e0:38:75:60:4f:97:98:00:dc:cf:
51:fa:6b:36:f6:3a:00:7e:0f:43:90:93:77:5b:b5:bf:d6:a9:
be:a2:b6:f0:f9:ef:66:95:ce:98:29:1c:92:13:1b:0c:d5:cb:
87:2d:ff:1c:fc:13:3f:20:04:51:05:77:4d:7f:7a:1d:21:d4:
b9:c4:52:ea:22:9c:c0:26:1a:18:7f:dc:0f:b5:f8:f1:11:86:
11:21:9d:c6:00:a4:39:84:e2:ab:e6:da:8c:cd:0a:04:3c:78:
0e:b3:6c:fa:79:44:cf:14:59:55:ae:6f:ee:0b:ae:23:c5:a8:
1d:81:4b:52:d6:1d:f8:ca:a8:b9:f3:86:e0:d0:17:bf:d0:91:
8c:0b:a7:b4:fe:37:2f:3d:b9:b1:14:36:ab:aa:e7:1a:32:0b:
ad:e4:0c:7c:e4:94:be:c8:e1:b8:e8:35:42:1d:04:e2:13:3c:
a3:7f:d8:d4:e0:19:c5:89:cb:3a:44:59:0d:99:b5:23:b3:59:
be:a0:b9:5a:c6:cc:7d:16:98:e8:7f:11:42:1b:c6:fe:c9:89:
b0:20:a9:35:e7:36:04:08:a5:42:bb:6c:d6:f7:51:08:cf:cd:
2b:9d:5f:ef:19:8a:86:bc:2c:00:57:80:34:c5:f8:82:93:80:
ec:b8:c0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:29:46 2025 by rpki-client