Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
File: un1KwTROw43OmXaNeKEU6_fxfYU.mft (raw, json)
Hash identifier: t95JBn6j37TXDdQWM9vz/BMUbHrVSJxodLO4BC3e170=
Subject key identifier: 92:34:91:7C:3D:0D:1C:F3:DF:24:D8:4A:F0:04:15:CA:88:EA:C7:59
Authority key identifier: BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
Certificate issuer: /CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Certificate serial: 0197507CEE4E3A7995101DAAA41C842436DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
Manifest number: 0C39
Signing time: Sun 08 Jun 2025 17:00:54 +0000
Manifest this update: Sun 08 Jun 2025 17:00:54 +0000
Manifest next update: Mon 09 Jun 2025 17:00:54 +0000
Files and hashes: 1: eJvxqWQVuJlIAcOu0zuhq-FEIwc.roa (hash: T9Btt+1WHrBsFsD5c6tC5d0RHMAv0qfav0ae3k59Hwg=)
2: un1KwTROw43OmXaNeKEU6_fxfYU.crl (hash: r88HS61o75Jgm4gIqSKoq51sanLjOIf1o7HzdCO7VkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:7c:ee:4e:3a:79:95:10:1d:aa:a4:1c:84:24:36:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Validity
Not Before: Jun 8 17:00:54 2025 GMT
Not After : Jun 9 17:00:54 2025 GMT
Subject: CN=9234917c3d0d1cf3df24d84af00415ca88eac759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ec:60:5c:c7:d6:72:35:de:23:41:77:2b:bc:
65:71:6d:04:c7:38:dd:81:aa:3e:bd:24:76:97:bd:
ec:9e:34:8d:c1:15:ef:e1:37:84:36:af:24:da:cc:
eb:10:53:7a:b4:89:5b:21:aa:c2:df:e2:89:ff:42:
d8:1a:8f:47:b9:b1:91:11:60:75:34:49:4c:bc:76:
a1:06:9a:88:60:23:a2:2b:41:2d:95:f0:56:82:fa:
ae:34:29:be:50:a3:30:4c:19:ee:11:fa:cc:33:6d:
b1:35:57:6a:93:12:6f:04:5d:d2:79:e4:03:a5:69:
fc:31:d2:b7:95:83:f7:ff:79:77:bf:a5:e3:c5:a5:
8c:f8:70:68:b3:75:ae:b8:21:68:2f:2f:65:64:6b:
69:94:91:f4:b1:88:77:e6:3f:95:28:93:13:16:d6:
0f:a2:71:25:73:6d:dd:7d:9b:e1:b0:60:9d:97:72:
c4:e8:81:c3:46:08:a5:98:e4:a7:8d:5b:44:13:f4:
ec:6f:51:fc:55:33:07:02:d2:e4:9b:3e:bb:78:00:
c8:68:a3:01:73:9f:0e:91:42:b9:e3:89:69:f7:c4:
84:a9:d7:d6:b3:d6:2f:9f:be:0f:e9:53:e3:71:ab:
8d:70:93:ff:33:b1:f5:9d:3e:8d:e9:ac:1d:3d:70:
87:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:34:91:7C:3D:0D:1C:F3:DF:24:D8:4A:F0:04:15:CA:88:EA:C7:59
X509v3 Authority Key Identifier:
keyid:BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:37:ed:4a:6f:79:bc:f3:fc:da:ee:7f:f5:52:8d:1b:91:0d:
49:d1:e1:0e:07:4b:b7:61:94:5d:78:91:37:79:0b:c0:ce:e1:
56:b5:8a:eb:be:1c:d8:43:d1:b0:80:90:ae:01:31:cc:8b:c1:
b2:61:71:38:26:db:60:3a:d1:dd:35:90:ad:1f:6f:02:d2:25:
c6:28:b7:da:53:57:13:8f:90:18:06:2c:d8:7d:e0:1f:ab:de:
61:4b:a4:1f:bf:a1:71:3c:01:70:6b:e4:2a:52:94:d1:fd:48:
33:3b:6e:0f:6f:5e:b3:df:1c:a2:05:15:cb:82:53:7f:d2:a7:
e7:a3:f6:a2:24:35:48:b6:21:e7:76:3d:eb:d9:ee:2f:8c:9d:
75:53:a9:07:0a:a2:fb:6d:7b:5a:cc:05:8e:6f:c6:f0:9b:8a:
4b:a4:5b:44:38:6d:af:af:d2:3b:ab:65:61:49:2f:72:2f:c7:
88:90:fc:2f:51:7c:35:7a:b9:62:1c:fe:e1:7f:9f:bf:31:6e:
6a:f8:b0:83:92:9f:c5:87:80:2f:72:92:9c:8f:aa:9e:0f:fb:
34:ac:61:9d:c6:84:03:1e:1b:ea:18:ac:9a:85:18:8e:1b:8f:
c7:6c:f0:7d:97:e3:0b:bc:51:f7:81:32:bc:f0:de:27:cc:4a:
2b:0f:9b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:19:36 2025 by rpki-client