
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
File: uRFN_za5SLVsIR0l85h1HTW5PMI.mft (raw, json)
Hash identifier: S9P8F3mFIMhEUCOoBujXveY92i0gec+EKliPHHFEOy4=
Subject key identifier: B7:5E:C9:0D:C7:6C:54:E1:B5:8B:74:22:01:A7:48:EE:41:99:54:0B
Authority key identifier: B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
Certificate issuer: /CN=b9114dff36b948b56c211d25f398751d35b93cc2
Certificate serial: 01974D44E99DF25AA62E61F9D188E5F2EE4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
Manifest number: 0D89
Signing time: Sun 08 Jun 2025 02:00:51 +0000
Manifest this update: Sun 08 Jun 2025 02:00:51 +0000
Manifest next update: Mon 09 Jun 2025 02:00:51 +0000
Files and hashes: 1: 1-_Px5n1Sga5Zt8S-x1iB09Td3qo.roa (hash: 23ZQeG0ng9+MyZlvY3tVFGHtF3ECWQ2rfUxxtpg8t4c=)
2: NYoZjbIugQuxKbQ3AOfllIqIvGI.roa (hash: MP3bZZbgC6I+guroq7hjxBmjZFMjOlVQchFUz6yhGNE=)
3: u36ax0xpTJgFKndS5YsGMSqnq7s.roa (hash: uik0LuaE13Pf2kO3ppprzpbjfY2DRZ0GXchvvKMGvNo=)
4: uRFN_za5SLVsIR0l85h1HTW5PMI.crl (hash: Jc36nZLjLk8d3Rogn+RR2QwGP9o4HBfVPdhv8e8jyOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:e9:9d:f2:5a:a6:2e:61:f9:d1:88:e5:f2:ee:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9114dff36b948b56c211d25f398751d35b93cc2
Validity
Not Before: Jun 8 02:00:51 2025 GMT
Not After : Jun 9 02:00:51 2025 GMT
Subject: CN=b75ec90dc76c54e1b58b742201a748ee4199540b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ac:07:4e:89:e3:03:fe:44:c6:a0:a0:6a:ee:
35:ea:bb:27:8e:04:f2:f6:a7:19:1b:a2:bc:4e:94:
b1:98:cd:8c:c2:1f:74:52:1c:b0:37:0a:33:14:90:
e9:e2:d6:44:95:28:18:b8:50:f6:91:7d:3f:7e:3e:
26:85:79:0f:5b:cc:c2:ca:57:08:9c:40:ef:38:f6:
90:ea:4a:d9:20:29:8c:ae:ab:52:52:5e:1a:ec:e1:
1a:22:e0:55:8a:7a:c1:e4:5c:a7:40:4d:1f:ec:b5:
82:42:07:0a:74:13:c5:e8:c2:a8:06:51:15:30:0c:
00:10:6f:9b:81:ef:79:a8:f4:a6:0d:11:21:6e:08:
91:a2:90:f7:41:b7:6b:61:d6:20:8e:c9:79:f0:27:
a7:34:87:43:82:24:2f:e3:03:1e:11:f2:71:eb:6b:
85:92:e0:26:0b:af:5d:9a:18:a7:bc:66:32:1a:ba:
2d:51:b5:94:f7:51:09:7b:8f:e2:13:86:32:68:bb:
c3:d2:f6:11:89:05:6a:9a:c0:77:a9:1e:a9:cc:2c:
e1:ef:aa:b2:35:35:2e:ef:6a:91:b8:f3:0a:12:13:
11:1b:26:95:c5:8d:93:c7:19:88:5a:08:23:16:54:
f8:e9:59:01:3d:bb:a6:1e:59:c5:b6:29:19:be:64:
ba:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5E:C9:0D:C7:6C:54:E1:B5:8B:74:22:01:A7:48:EE:41:99:54:0B
X509v3 Authority Key Identifier:
keyid:B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:fe:f7:f1:b3:db:fa:61:c7:4e:4c:61:79:8f:9c:09:49:1b:
21:57:ed:7d:84:d8:3f:7a:63:a7:76:ad:55:8b:bd:c4:10:ba:
86:5c:f6:41:ff:6d:ea:eb:db:77:75:46:fd:1f:f2:be:a3:37:
da:45:d3:e2:26:43:81:78:5c:ee:e5:95:76:09:67:ff:86:92:
ac:82:ed:87:f8:e6:97:59:76:45:75:e8:47:c9:50:16:4f:d9:
84:f4:16:99:2b:74:7a:b3:62:2f:3a:55:44:b3:26:8a:08:12:
3b:5f:98:5b:62:c6:63:38:c6:bf:75:31:3b:c4:4a:8b:f8:7c:
47:05:e8:e2:3d:85:0e:15:e1:c5:be:a4:86:cc:66:b7:01:fb:
03:76:a3:d7:e0:77:93:34:7d:5e:c4:56:5d:40:47:e4:32:a1:
8c:35:f2:72:20:e2:41:e1:b6:28:19:19:7a:fb:5d:f1:df:44:
c5:82:15:b3:91:09:a6:00:e4:61:a7:e6:bf:ee:e7:d0:81:f6:
f4:f1:49:f4:dd:cb:2c:55:34:bd:f0:3c:6e:8c:44:ef:2c:f9:
25:51:81:b4:ee:29:cd:96:95:4c:fe:9c:dd:ce:53:ad:a5:8c:
9c:f7:15:82:47:ed:de:81:89:6b:83:35:1b:b7:6a:e1:eb:43:
bd:1c:a2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:53:35 2025 by rpki-client