Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
File: UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft (raw, json)
Hash identifier: VrzVb1IBJAT8Xl7Qt5lJJuqm4Xh1mGu8umE11waGetY=
Subject key identifier: 36:CB:D9:14:F7:CB:42:F7:E7:E9:6C:62:6C:B2:21:60:C6:6F:C3:27
Authority key identifier: 51:5F:61:A6:E0:8D:ED:6F:1F:F5:05:11:C6:20:89:69:6A:B5:64:A8
Certificate issuer: /CN=515f61a6e08ded6f1ff50511c62089696ab564a8
Certificate serial: 01974A436A1015C9239D600F92B03304380D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
Manifest number: 127A
Signing time: Sat 07 Jun 2025 12:00:20 +0000
Manifest this update: Sat 07 Jun 2025 12:00:20 +0000
Manifest next update: Sun 08 Jun 2025 12:00:20 +0000
Files and hashes: 1: CNzkiSB6aHtzY0O727sE464QSi8.roa (hash: jl53RICMTSEcHClA6hdGIYAm+qbxdQWju025NBkPLn8=)
2: UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl (hash: m+s5taJSdd5yNTAQegW86z1O1+doi9c9kx6Pkk3NStY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:6a:10:15:c9:23:9d:60:0f:92:b0:33:04:38:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=515f61a6e08ded6f1ff50511c62089696ab564a8
Validity
Not Before: Jun 7 12:00:20 2025 GMT
Not After : Jun 8 12:00:20 2025 GMT
Subject: CN=36cbd914f7cb42f7e7e96c626cb22160c66fc327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:67:c4:df:78:e7:a2:5a:24:15:fd:44:3a:38:
80:1b:29:6c:f3:93:41:67:7d:b1:c4:05:53:93:69:
e0:aa:6b:27:f2:42:db:a4:33:d8:c0:2f:20:2f:0c:
76:a2:30:31:cf:b2:03:20:2e:d1:e7:9a:b9:ec:01:
7b:79:94:50:34:6a:18:36:bb:e5:27:72:ba:f6:2d:
97:bc:08:f2:9e:52:02:3f:c1:ef:80:ad:26:33:ce:
33:53:18:c1:d9:bf:6d:67:25:27:b1:2a:c3:cd:b1:
55:38:a9:69:96:56:5b:a3:29:3f:37:8d:7e:1e:7b:
4b:49:c9:13:fd:e0:3b:e0:c1:40:47:f9:b6:76:e9:
f8:bf:c8:ea:9b:c3:50:77:7e:e8:b6:18:43:09:83:
c4:20:08:51:82:22:2d:13:dd:99:10:7b:ae:05:ca:
66:c2:98:37:de:9b:39:7b:79:5b:dd:bc:de:9c:a7:
9a:90:f3:7e:c3:26:5c:43:f6:5a:c0:26:a3:60:8f:
35:6f:2b:4f:78:29:8f:dd:0f:2b:85:ad:63:e6:fe:
c8:e9:1f:69:80:a4:f1:0d:35:ac:9e:3a:a2:57:b3:
e3:9b:c1:05:d4:ed:e8:fb:c3:d9:30:cd:30:b2:bb:
78:2d:20:69:a5:6a:51:f8:cb:bb:d5:5d:19:73:3c:
51:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CB:D9:14:F7:CB:42:F7:E7:E9:6C:62:6C:B2:21:60:C6:6F:C3:27
X509v3 Authority Key Identifier:
keyid:51:5F:61:A6:E0:8D:ED:6F:1F:F5:05:11:C6:20:89:69:6A:B5:64:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a8:73:08:95:1e:f4:c4:bb:ac:6a:d5:28:52:f6:89:b2:29:
38:5c:e6:44:22:dc:56:22:1f:65:71:31:26:ec:69:2a:c9:6c:
a0:77:93:a3:46:30:2f:e8:01:97:ee:e6:79:7c:33:24:49:46:
ae:16:80:92:09:68:be:a4:79:d0:03:81:4f:98:57:02:ef:e4:
84:5a:c9:31:a8:fa:f3:d7:74:fd:6c:41:eb:2e:da:89:e6:63:
ab:69:a2:7f:57:39:03:23:b5:e7:c1:64:91:c9:5d:38:8c:09:
c8:dd:b7:8e:c9:21:4e:00:30:52:dc:12:5a:84:f4:1b:83:b6:
b3:95:54:be:ca:72:ae:5b:fb:34:06:fb:d6:4b:8d:5f:56:9c:
33:84:3b:ed:43:d3:48:71:b4:b6:ef:7c:a0:7b:06:79:05:6d:
a1:2f:2b:75:10:d6:08:40:81:bf:50:b6:e0:ae:e9:2f:87:6d:
ad:02:bb:23:d3:48:3a:a8:34:e4:1b:83:21:77:69:8e:f2:93:
e5:bf:25:e5:13:d8:5b:9b:4f:86:a0:c8:c6:75:f7:e5:b7:73:
b9:96:6b:18:d4:97:6a:17:23:d9:bb:da:4d:a1:01:91:65:3a:
7c:fe:6a:1d:d8:fd:8f:ef:e7:ed:29:b2:b6:81:9d:b1:2e:7a:
30:76:78:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:34:53 2025 by rpki-client