Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
File: UnksdxTtV0Vtc1XkoEubqL7VfkI.mft (raw, json)
Hash identifier: LUvwiM5nsI7yQYkPpgIon+cJvb9NaRq692TBxpBS71c=
Subject key identifier: DD:7B:5D:3E:2F:DE:F7:00:1F:F8:95:A3:BE:45:B6:73:82:3B:5C:C7
Authority key identifier: 52:79:2C:77:14:ED:57:45:6D:73:55:E4:A0:4B:9B:A8:BE:D5:7E:42
Certificate issuer: /CN=52792c7714ed57456d7355e4a04b9ba8bed57e42
Certificate serial: 01974CD7891B450B81FE444A0D536AC28132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
Manifest number: 062C
Signing time: Sun 08 Jun 2025 00:01:23 +0000
Manifest this update: Sun 08 Jun 2025 00:01:23 +0000
Manifest next update: Mon 09 Jun 2025 00:01:23 +0000
Files and hashes: 1: UnksdxTtV0Vtc1XkoEubqL7VfkI.crl (hash: W5uTRZRh6sXy64TulhKdpKm+XqYWCS727j8KUDSMeV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:89:1b:45:0b:81:fe:44:4a:0d:53:6a:c2:81:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52792c7714ed57456d7355e4a04b9ba8bed57e42
Validity
Not Before: Jun 8 00:01:23 2025 GMT
Not After : Jun 9 00:01:23 2025 GMT
Subject: CN=dd7b5d3e2fdef7001ff895a3be45b673823b5cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:03:10:a3:54:6c:60:1a:82:c6:83:cf:97:02:
5c:76:e7:5e:6c:09:23:06:46:94:d3:f4:88:a3:16:
20:70:13:31:3a:6b:ee:9a:ec:8f:80:42:07:80:ff:
e0:95:0f:0d:6a:83:dc:ae:84:79:f8:84:2b:ce:16:
c7:48:6d:22:31:c0:76:0b:ba:76:b1:2d:b3:00:de:
ce:d5:ea:af:5e:f2:31:c8:a8:ef:2e:3c:c9:2b:8c:
9e:86:e9:31:65:22:d0:b6:6b:30:38:22:61:55:8d:
82:97:fc:ef:2c:ab:41:2e:70:30:53:46:30:89:d5:
4e:a3:7e:71:3f:98:98:47:d8:71:83:6e:46:9d:2f:
0d:04:2e:88:be:67:d3:d4:04:a4:09:47:d6:e8:80:
3a:cc:48:c5:5b:1c:c3:ef:2c:37:2b:d8:ee:71:cd:
47:20:bc:c5:f7:d1:69:97:14:41:75:df:1b:26:3b:
6c:bf:4b:f8:2d:55:08:d3:b7:b3:dc:96:3a:c8:93:
c3:f8:07:0a:dd:77:cd:04:9c:4d:31:e4:0e:0d:2d:
b1:c4:49:c7:af:77:98:8c:b2:c6:02:c9:1c:03:77:
5f:60:58:d4:59:e2:78:44:a6:c7:c8:23:36:74:d9:
ce:bd:cb:98:a4:c4:09:4b:69:fc:fa:36:c3:6f:99:
48:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7B:5D:3E:2F:DE:F7:00:1F:F8:95:A3:BE:45:B6:73:82:3B:5C:C7
X509v3 Authority Key Identifier:
keyid:52:79:2C:77:14:ED:57:45:6D:73:55:E4:A0:4B:9B:A8:BE:D5:7E:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:8f:d1:0c:cb:d5:fa:8b:ba:e9:8e:3d:e7:05:7f:0c:70:d6:
4c:ff:f4:6c:c7:ad:9e:20:e0:0e:8d:92:87:90:83:47:5c:6e:
15:a9:8b:7a:ad:1f:7b:d1:55:10:fd:c4:82:64:0c:82:3c:d0:
c4:19:a3:fd:4e:f9:43:00:2a:6d:fb:3b:6d:76:ec:9c:57:62:
d0:1c:db:5c:10:89:fd:f3:95:7d:ce:a3:59:29:a1:0b:ca:b9:
33:63:5f:a5:e6:16:85:85:7d:04:98:04:8b:01:e0:b7:48:79:
5f:d6:06:0f:a8:02:ef:b9:ee:52:78:0c:07:fe:47:c2:2f:81:
3b:37:be:85:43:dd:69:ff:2d:db:e6:df:fe:31:46:a8:5b:cb:
56:d7:91:d5:38:80:06:02:cb:cf:e3:69:a2:52:e3:5e:97:ba:
1b:77:5f:f9:dd:92:c7:c9:17:14:bc:21:56:59:bc:2d:99:d7:
70:c7:ac:1e:dc:51:94:6f:df:05:77:1d:41:cc:d0:59:96:c8:
e8:9b:ab:ac:cb:94:82:be:84:6e:2c:0b:12:1b:7b:ce:0d:a3:
1c:b4:17:d6:59:4f:b6:75:98:1f:17:8c:7e:ad:4a:e0:42:20:
da:f2:81:57:30:c1:a6:fc:5d:f2:12:84:c5:53:d8:13:3b:55:
62:a9:98:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:40:17 2025 by rpki-client