Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
File: UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft (raw, json)
Hash identifier: 5ZvhFOMqKlJRCRan4inVGuJoV7Zl0ikosoXagaWSKN0=
Subject key identifier: DC:98:1D:24:14:41:DB:11:08:06:32:A2:97:5C:D9:FC:FD:BA:50:11
Authority key identifier: 50:9F:39:1F:29:D9:20:78:BA:6E:2C:76:FA:A2:F8:AE:94:73:43:E6
Certificate issuer: /CN=509f391f29d92078ba6e2c76faa2f8ae947343e6
Certificate serial: 0197C9F08B758C681B078686CA5BF7DB040E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
Manifest number: 15BE
Signing time: Wed 02 Jul 2025 07:01:14 +0000
Manifest this update: Wed 02 Jul 2025 07:01:14 +0000
Manifest next update: Thu 03 Jul 2025 07:01:14 +0000
Files and hashes: 1: UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl (hash: NgufKRVYZLYCEEBeZQ6uE6u8d1q/yvMg12U2dYrfcSU=)
2: VIK5LfegEju3TUqgukYni1TBj7k.roa (hash: FcCMQfjXZEhJ1ZtbvXFYBrE4X/DK9/KBh+K8ZP9nlZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f0:8b:75:8c:68:1b:07:86:86:ca:5b:f7:db:04:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509f391f29d92078ba6e2c76faa2f8ae947343e6
Validity
Not Before: Jul 2 07:01:14 2025 GMT
Not After : Jul 3 07:01:14 2025 GMT
Subject: CN=dc981d241441db11080632a2975cd9fcfdba5011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:11:7c:60:ad:23:44:79:2e:1f:85:02:36:48:
7b:d9:9a:c9:2d:88:d4:5c:9b:19:03:7b:01:84:c2:
96:8e:c3:07:81:5a:70:09:3a:39:6d:13:cb:af:6c:
81:87:71:7c:15:50:5d:79:28:60:b1:3d:80:74:3e:
ab:0e:74:d5:b7:73:22:67:39:19:40:35:ba:7f:d6:
a5:41:87:ae:6b:a9:2e:61:5d:2f:ab:26:29:37:30:
4a:80:c0:6a:69:01:ef:73:5c:8e:e8:a5:d5:12:4b:
92:e2:9c:42:bd:c9:2b:b3:8f:af:81:8e:1c:3a:79:
ab:5b:6d:3f:0b:5b:07:d2:25:77:ba:6d:b9:f7:18:
7b:1a:e2:db:ff:98:69:1a:0e:8f:d5:79:ef:71:cf:
74:27:bf:da:7d:34:cc:25:1f:f1:b0:73:27:79:e4:
90:86:c3:50:af:f8:6a:5a:92:ca:7e:22:c6:ef:71:
11:8a:ba:a5:f5:e0:a0:d1:0d:fa:4e:54:b3:3c:33:
05:85:af:49:2d:74:42:f1:fe:81:48:df:b5:b9:cd:
a9:78:c0:69:96:21:80:ca:c1:95:3d:7e:a3:f4:73:
d0:32:db:2a:2d:58:f0:11:67:97:49:f4:5c:ee:4d:
b5:2d:58:d2:7e:ba:a6:56:87:dc:91:a7:12:7b:b2:
e0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:98:1D:24:14:41:DB:11:08:06:32:A2:97:5C:D9:FC:FD:BA:50:11
X509v3 Authority Key Identifier:
keyid:50:9F:39:1F:29:D9:20:78:BA:6E:2C:76:FA:A2:F8:AE:94:73:43:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:48:dd:fa:e8:0b:2b:7b:11:66:af:cc:13:fd:be:33:d1:f2:
74:2c:bb:51:8e:0e:f9:6d:6c:cd:43:6c:dc:c7:4b:04:bd:e6:
a0:f0:db:98:65:30:fb:ad:45:dd:29:ca:d0:bf:64:61:86:a1:
57:08:93:ed:5a:f2:ac:6b:2f:bc:f0:be:e1:4b:39:88:53:08:
fe:d3:18:ec:94:d3:f8:4a:c8:6e:5f:4f:b8:09:ed:05:67:21:
a6:40:f7:0f:03:d4:82:d3:9d:e7:5b:dc:85:0f:57:2b:9b:e4:
77:9d:90:ac:51:bf:23:79:89:52:2d:a2:ab:f5:a8:f9:b8:35:
54:fd:9d:0b:7e:27:fc:df:e7:02:41:ab:b2:7e:9d:63:ba:f9:
0e:36:1f:94:c7:4c:60:8d:55:a5:86:38:bd:a4:ed:1c:66:cf:
e5:10:be:7c:72:e3:fa:f8:d4:b7:16:d0:00:85:ce:e7:6b:d3:
fe:34:58:a4:2e:60:2a:89:3a:b0:04:93:9f:f8:3c:7e:ea:a7:
14:07:a9:98:49:09:50:d3:86:c5:ae:c2:37:4b:fb:89:11:7b:
bd:5a:93:97:b9:21:c7:3f:b0:d3:ca:df:f0:d9:cd:06:d8:84:
8c:52:9a:42:15:ad:b8:9c:c7:32:84:0c:73:cb:55:d8:b2:f9:
d5:be:d4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 12:06:11 2025 by rpki-client