Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft
File: UoUm3npC8eCAkWhA7r85A4uJPRY.mft (raw, json)
Hash identifier: 23SOQWg+REO6T+jH8jitZIVAngL4bV7pzB4WjAB4Ykk=
Subject key identifier: 74:7D:F1:8C:A1:C0:DA:56:23:7D:A7:61:7A:18:BB:2F:36:22:6A:29
Authority key identifier: 52:85:26:DE:7A:42:F1:E0:80:91:68:40:EE:BF:39:03:8B:89:3D:16
Certificate issuer: /CN=528526de7a42f1e080916840eebf39038b893d16
Certificate serial: 01976960FCCBBF0E8FF5CB28E8D2A21B7C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoUm3npC8eCAkWhA7r85A4uJPRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft
Manifest number: 0912
Signing time: Fri 13 Jun 2025 13:00:53 +0000
Manifest this update: Fri 13 Jun 2025 13:00:53 +0000
Manifest next update: Sat 14 Jun 2025 13:00:53 +0000
Files and hashes: 1: UoUm3npC8eCAkWhA7r85A4uJPRY.crl (hash: trNjoMpzVDEWDUU8E9n5Ppi1RbLRJVZOqv5VbKNpsn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UoUm3npC8eCAkWhA7r85A4uJPRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:fc:cb:bf:0e:8f:f5:cb:28:e8:d2:a2:1b:7c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528526de7a42f1e080916840eebf39038b893d16
Validity
Not Before: Jun 13 13:00:53 2025 GMT
Not After : Jun 14 13:00:53 2025 GMT
Subject: CN=747df18ca1c0da56237da7617a18bb2f36226a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:57:86:64:28:7b:b0:55:5b:e3:80:58:6d:1e:
94:47:90:60:04:3b:ae:f8:b6:b4:b6:58:2d:8a:d9:
9f:25:4d:89:66:df:f3:35:e0:fe:45:cf:13:80:b9:
38:4b:60:09:91:97:15:bd:01:c4:50:00:84:a5:1b:
86:2a:1e:c3:ba:a2:cc:be:9b:1c:24:0f:29:56:1b:
2b:39:d1:aa:1b:da:87:68:a6:3f:06:93:2a:3c:b4:
25:2f:ef:46:01:60:26:ab:27:6d:fc:30:e0:55:56:
6d:84:40:ff:c6:a2:4d:2a:51:15:53:6d:15:c2:ac:
91:ed:a9:88:45:e4:e9:92:84:94:40:56:5e:c0:9e:
5d:8d:4b:27:2f:56:c1:54:2b:83:51:78:26:07:b0:
8c:1c:d1:a8:3a:c0:83:bb:21:01:f3:5f:b1:71:29:
0c:e7:d2:72:7a:92:e6:04:80:5f:db:1b:91:3e:e5:
85:d1:7c:46:65:ba:6e:21:fa:35:e5:f8:e2:aa:e2:
46:76:b2:05:dc:ac:a7:2d:90:8d:1f:d7:aa:32:7a:
42:1b:8a:1a:27:ff:f8:06:6e:0c:e0:ac:00:95:6e:
a1:0e:11:51:40:1c:88:01:29:6d:e0:b1:c5:9b:c9:
f6:48:d3:52:a8:2f:e8:a4:d3:dd:b2:3e:99:59:fe:
28:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7D:F1:8C:A1:C0:DA:56:23:7D:A7:61:7A:18:BB:2F:36:22:6A:29
X509v3 Authority Key Identifier:
keyid:52:85:26:DE:7A:42:F1:E0:80:91:68:40:EE:BF:39:03:8B:89:3D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoUm3npC8eCAkWhA7r85A4uJPRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:6d:88:ad:f9:33:4f:33:ee:44:1a:56:c2:dc:20:dd:32:79:
66:f3:63:10:a0:6f:46:a3:c1:26:27:69:eb:60:fe:09:d4:4a:
e3:1c:b0:25:d1:54:27:78:7d:10:6b:66:ea:c7:44:2d:b2:99:
85:8c:63:d9:4e:f9:11:48:7b:8d:8b:e0:40:c7:9a:da:e7:d4:
43:30:9d:6b:21:0b:f8:50:eb:b8:f4:4f:73:c3:a7:57:d2:7b:
33:90:5c:e5:7d:7d:79:5f:7c:fa:4e:09:ec:97:a6:c3:fd:be:
d4:74:9f:0b:e7:82:24:00:df:6e:8f:fd:95:ad:1c:68:03:91:
6b:47:35:9b:5f:d8:4f:83:9b:41:77:fe:99:1d:ce:85:da:3d:
09:b8:e1:c5:07:4f:a5:54:b3:63:3d:72:5b:ce:37:64:39:cf:
30:3a:b0:d0:1e:11:8b:60:41:cf:0e:2d:84:a4:a1:ab:de:ed:
87:d5:49:54:c8:88:40:5b:76:28:42:bb:3a:e6:55:7b:bd:42:
d1:76:da:1c:82:98:20:f8:ce:0b:de:e9:88:bf:d0:59:dc:34:
02:6a:b8:f2:f6:4d:a5:66:fc:db:38:f8:d9:d3:a8:d8:3e:e7:
63:60:94:67:db:34:c1:27:7c:14:93:b9:ec:df:62:8d:81:2d:
0e:3b:46:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:25:52 2025 by rpki-client