
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft
File: uW476Z3sY7ErK4J3nfz142PTIcE.mft (raw, json)
Hash identifier: m8Eoi9tXTWW2A7dWvBRuwu3Qm7iRq4z/hXnna1swI1A=
Subject key identifier: 3E:8F:FC:23:F1:71:B2:40:A9:E3:FA:31:6A:86:96:CA:48:5E:78:8D
Authority key identifier: B9:6E:3B:E9:9D:EC:63:B1:2B:2B:82:77:9D:FC:F5:E3:63:D3:21:C1
Certificate issuer: /CN=b96e3be99dec63b12b2b82779dfcf5e363d321c1
Certificate serial: 0197700786E5F440993E323E2417737D49B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uW476Z3sY7ErK4J3nfz142PTIcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft
Manifest number: 03AD
Signing time: Sat 14 Jun 2025 20:00:30 +0000
Manifest this update: Sat 14 Jun 2025 20:00:30 +0000
Manifest next update: Sun 15 Jun 2025 20:00:30 +0000
Files and hashes: 1: uW476Z3sY7ErK4J3nfz142PTIcE.crl (hash: Xb3YmIsGMQo9IT4I6xjEaLPyEfHbvW/+Ep12KJPfq6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uW476Z3sY7ErK4J3nfz142PTIcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:86:e5:f4:40:99:3e:32:3e:24:17:73:7d:49:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b96e3be99dec63b12b2b82779dfcf5e363d321c1
Validity
Not Before: Jun 14 20:00:30 2025 GMT
Not After : Jun 15 20:00:30 2025 GMT
Subject: CN=3e8ffc23f171b240a9e3fa316a8696ca485e788d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5b:d9:81:35:55:3d:51:0d:db:68:c8:f6:56:
b0:b7:2d:4f:23:13:97:83:09:92:ba:1f:97:24:19:
b7:fa:3c:3b:5c:ff:06:f0:55:42:29:ae:9f:f9:95:
06:a5:61:96:d1:0a:50:df:f4:91:28:ba:ad:81:77:
ef:33:0b:d5:74:a9:2e:e2:87:51:e7:66:d3:82:24:
70:c8:0c:07:97:72:5f:2f:a0:c5:e6:8d:06:08:48:
c8:34:a0:77:85:76:a6:62:07:46:a2:96:9d:44:85:
d7:ce:75:d3:14:18:fd:3d:c7:c9:2c:c5:58:a1:3a:
b9:ef:dc:c6:6f:85:06:9b:81:96:70:3b:36:85:a2:
b7:a5:2c:33:0e:79:b5:73:47:b1:e2:ff:d7:07:21:
2e:1e:bd:16:57:1c:ff:6a:9a:63:cd:21:9c:f7:ab:
e0:88:d1:75:82:5e:78:f4:6d:54:9f:fa:67:10:ad:
7a:ed:da:3a:3f:99:78:92:4e:b9:77:81:f4:bc:ad:
b4:ff:93:ec:88:8f:90:c0:07:95:97:07:98:b3:47:
86:8f:0e:b2:d0:55:f7:e8:eb:3f:cd:58:3d:39:6b:
2a:42:a2:69:d8:e6:2c:bc:25:ed:5f:e1:a5:c9:12:
ec:79:18:74:09:76:3d:ac:d9:ee:b3:f5:00:d7:0e:
90:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8F:FC:23:F1:71:B2:40:A9:E3:FA:31:6A:86:96:CA:48:5E:78:8D
X509v3 Authority Key Identifier:
keyid:B9:6E:3B:E9:9D:EC:63:B1:2B:2B:82:77:9D:FC:F5:E3:63:D3:21:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uW476Z3sY7ErK4J3nfz142PTIcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:2d:63:ae:72:aa:d6:8e:ea:77:3a:97:33:1d:3e:3e:be:0f:
d4:20:f9:92:65:a1:76:26:54:f1:de:49:72:4e:9b:50:33:b4:
e8:bd:9c:e3:aa:37:bf:23:95:fd:1e:b1:41:5d:7e:1a:b7:6a:
7b:1c:74:d2:07:35:49:87:50:89:f9:d4:e1:45:97:94:58:af:
98:56:63:46:35:84:ce:19:34:60:4f:fa:87:8f:8e:4b:ec:ec:
1e:c7:5a:4e:f0:e0:c9:61:3e:29:cf:d9:5b:ad:6b:c5:9d:8d:
ec:1e:17:74:3d:21:a1:a6:61:f7:79:f2:4b:af:5d:f8:b1:0f:
83:4d:4c:4e:7a:4e:53:99:52:fa:c0:38:ae:4b:74:6b:bb:2d:
04:00:35:46:4b:df:83:e2:5c:a8:4c:4c:75:f1:f3:f9:45:10:
ff:d2:cb:5d:dc:35:0a:36:c5:05:01:ac:a0:62:25:6c:86:3a:
6b:bf:3d:05:76:59:9c:86:b2:89:f7:46:ef:b4:5e:7e:5b:71:
03:7a:ef:7d:e6:92:1c:cc:ee:df:8c:a5:43:8b:38:e2:56:2e:
a8:8c:b6:65:c2:eb:05:b8:07:9b:30:70:82:28:94:c8:41:4a:
c4:51:00:ea:5f:cc:c9:af:6f:e3:4e:17:93:03:45:15:ed:d5:
ec:2e:a3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:09:58 2025 by rpki-client