Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
File: 9UPqUocUidhqqcpcoMKXyIq4KrY.mft (raw, json)
Hash identifier: lgMYT/ChDdBVKRDhy6Rz8SvFkFx+JrFc3F1hkv4DGFA=
Subject key identifier: 1B:D4:B6:B0:D2:DD:35:C7:05:1E:5C:C6:D9:F8:86:F0:58:FD:B4:9F
Authority key identifier: F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
Certificate issuer: /CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Certificate serial: 019748FA74B5C3DB4151ADA8E1071933B14E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 06:01:02 +0000
Manifest this update: Sat 07 Jun 2025 06:01:02 +0000
Manifest next update: Sun 08 Jun 2025 06:01:02 +0000
Files and hashes: 1: 9UPqUocUidhqqcpcoMKXyIq4KrY.crl (hash: wkU4QPjT4Bep+EIJwcH7wHGR7VOzVpP0wvm6zBS+LWQ=)
2: FNrF4gJ9GeSqn1QNR00c9Q4ygYg.roa (hash: 2ncm1gP0ao8l2RvVLkDskRllvyDwCE2AZXVvFGp+UKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:74:b5:c3:db:41:51:ad:a8:e1:07:19:33:b1:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Validity
Not Before: Jun 7 06:01:02 2025 GMT
Not After : Jun 8 06:01:02 2025 GMT
Subject: CN=1bd4b6b0d2dd35c7051e5cc6d9f886f058fdb49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f4:da:bf:c4:33:75:90:04:1b:f2:b6:47:f6:
87:f4:52:44:94:61:59:26:85:26:d9:af:ce:6f:74:
63:6d:75:4b:cb:34:a9:aa:08:b7:8f:34:b4:f1:cf:
d2:27:b8:9b:80:42:0b:30:03:80:83:d3:e4:c6:4a:
aa:12:c6:9a:60:ac:e2:82:fc:4a:1c:64:f9:b9:44:
53:10:f6:ed:e6:d3:6e:bd:71:57:d1:c0:73:c6:20:
9a:b1:d3:a3:ec:d7:06:60:c5:8f:0b:1e:b1:8d:76:
8e:af:de:0a:54:f3:05:98:03:42:5e:63:ce:02:ab:
35:7a:1e:5f:83:ad:52:93:e0:4e:b8:82:9f:7a:d3:
8f:f0:73:42:e0:90:d7:1c:82:85:53:22:75:e0:4a:
30:0b:22:57:e5:59:a4:82:d7:20:15:2d:8d:e5:05:
51:95:ff:aa:b8:f0:00:f5:98:ed:76:ef:df:89:d1:
fb:1e:16:5d:7d:8d:ec:4b:94:84:e7:31:40:f5:84:
1d:0c:aa:e8:49:d0:97:0e:3e:90:a2:0e:b1:ec:6d:
69:d2:9a:d7:07:e5:4c:57:35:bb:51:88:f2:8b:7b:
23:84:cc:c5:37:a9:18:02:25:b9:a2:fa:e6:c4:67:
7a:77:72:a5:bb:21:fd:5a:8b:78:82:df:e5:c9:bf:
71:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D4:B6:B0:D2:DD:35:C7:05:1E:5C:C6:D9:F8:86:F0:58:FD:B4:9F
X509v3 Authority Key Identifier:
keyid:F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:57:dc:50:23:7c:b6:7b:b0:18:23:b3:4c:14:71:6e:a7:14:
20:58:eb:27:a1:c0:0c:33:de:43:88:b5:b9:7a:8e:83:15:0f:
9c:47:73:8d:c8:00:28:fb:3c:cb:46:9d:80:37:db:50:78:13:
0d:e0:76:b3:ec:99:0a:fd:4c:88:13:99:0c:b8:be:0c:7d:84:
d2:62:bb:55:fe:63:b1:b7:81:dc:60:95:06:b0:ac:09:f2:48:
b0:4a:69:81:8b:b8:97:4e:f6:85:57:42:aa:6a:9e:19:25:58:
11:85:71:40:06:81:40:99:fb:92:18:26:f4:d4:ca:64:7c:23:
6e:05:1e:f7:e4:42:35:19:68:72:ca:fb:82:d5:8e:d1:f6:04:
2b:3c:9e:b9:a6:c9:e2:ea:4f:da:70:59:ac:5d:65:50:86:ca:
7d:95:73:e6:34:27:65:a9:11:8c:bf:18:82:e4:fc:ed:de:9b:
06:c9:e9:e2:a2:32:48:e9:cc:a0:c3:f5:fb:1b:46:e7:bd:f8:
e0:10:00:19:bc:c9:aa:7f:f0:45:2b:fb:fa:ad:e5:d3:b1:48:
5e:ea:cd:4e:dc:8b:11:93:e8:c1:5a:88:9b:eb:22:3d:46:18:
8f:30:36:75:72:22:27:ab:a9:34:a4:55:5c:33:fb:31:6e:5d:
cc:b2:61:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:25 2025 by rpki-client