Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e6ccc7-d1e5-4f07-8dab-506a4934cad5/1/UNlf0yarPwj3bczGVrs-Hia03Fc.mft
File: UNlf0yarPwj3bczGVrs-Hia03Fc.mft (raw, json)
Hash identifier: 6Iu4xy4xL66+l4YzLwN4MEtHxeilDLNMbKsNvyOpQrE=
Subject key identifier: CC:F7:42:2D:3F:21:80:6E:DD:9D:1D:7A:F1:12:97:AD:D6:FE:7D:7B
Authority key identifier: 50:D9:5F:D3:26:AB:3F:08:F7:6D:CC:C6:56:BB:3E:1E:26:B4:DC:57
Certificate issuer: /CN=50d95fd326ab3f08f76dccc656bb3e1e26b4dc57
Certificate serial: 01977377282E90A20EB56B40D2DA69B67267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNlf0yarPwj3bczGVrs-Hia03Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e6ccc7-d1e5-4f07-8dab-506a4934cad5/1/UNlf0yarPwj3bczGVrs-Hia03Fc.mft
Manifest number: 0139
Signing time: Sun 15 Jun 2025 12:01:18 +0000
Manifest this update: Sun 15 Jun 2025 12:01:18 +0000
Manifest next update: Mon 16 Jun 2025 12:01:18 +0000
Files and hashes: 1: UNlf0yarPwj3bczGVrs-Hia03Fc.crl (hash: P3xQMdkDoKf5wqPij8mFAnL4UobIkt2LL8AbdPPlroM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e6ccc7-d1e5-4f07-8dab-506a4934cad5/1/UNlf0yarPwj3bczGVrs-Hia03Fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e6ccc7-d1e5-4f07-8dab-506a4934cad5/1/UNlf0yarPwj3bczGVrs-Hia03Fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNlf0yarPwj3bczGVrs-Hia03Fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:77:28:2e:90:a2:0e:b5:6b:40:d2:da:69:b6:72:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d95fd326ab3f08f76dccc656bb3e1e26b4dc57
Validity
Not Before: Jun 15 12:01:18 2025 GMT
Not After : Jun 16 12:01:18 2025 GMT
Subject: CN=ccf7422d3f21806edd9d1d7af11297add6fe7d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:92:e9:38:84:2c:d6:e7:1c:bd:fc:db:bf:a5:
09:0d:33:9b:f6:eb:b2:9f:20:31:08:27:3f:26:ce:
5b:1b:86:e2:bf:58:fa:da:4d:b7:05:9b:78:05:c0:
92:7d:1e:72:b1:d3:d6:38:b0:56:09:f8:a6:f7:99:
e8:86:a5:da:8e:4f:15:6e:9f:47:0c:58:6b:23:bf:
24:0e:79:36:81:85:86:31:98:4e:e4:f9:7c:17:53:
cc:86:df:4e:d6:58:65:b6:cc:e8:78:80:8f:23:39:
07:90:33:15:e9:87:9d:b0:39:0c:2d:91:11:c3:50:
af:17:32:97:eb:40:2f:46:8d:ae:78:6c:5e:40:b1:
85:94:10:59:04:ec:17:da:9b:48:d9:50:35:27:b1:
c7:c2:31:28:ff:40:99:88:a8:de:a0:d7:be:64:29:
3a:4a:93:6d:42:2a:f9:9d:73:cb:70:bb:c6:e0:0a:
92:92:68:5a:d6:35:f2:9f:a8:0f:1b:30:7e:c1:5d:
f7:f1:03:b5:ed:39:cc:92:fa:e3:94:95:08:a9:f7:
4b:90:74:81:d7:d7:02:bc:70:e2:eb:90:77:e3:bc:
c0:ab:1e:6e:38:fc:eb:25:3c:c4:81:2e:df:a3:74:
07:42:03:81:f9:ea:7a:c3:3d:fc:9e:00:59:44:ce:
88:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F7:42:2D:3F:21:80:6E:DD:9D:1D:7A:F1:12:97:AD:D6:FE:7D:7B
X509v3 Authority Key Identifier:
keyid:50:D9:5F:D3:26:AB:3F:08:F7:6D:CC:C6:56:BB:3E:1E:26:B4:DC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNlf0yarPwj3bczGVrs-Hia03Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e6ccc7-d1e5-4f07-8dab-506a4934cad5/1/UNlf0yarPwj3bczGVrs-Hia03Fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e6ccc7-d1e5-4f07-8dab-506a4934cad5/1/UNlf0yarPwj3bczGVrs-Hia03Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:42:84:ae:3c:93:99:52:cd:a2:0d:e7:61:ae:e8:76:84:67:
19:45:b4:01:b1:a8:de:25:fd:c5:5c:84:c7:4d:20:5e:48:bc:
17:7b:8d:08:ac:e1:a9:bb:d5:e1:18:05:c4:14:a2:ba:17:a9:
ac:2e:07:70:9e:6e:90:93:e8:b3:48:6d:b7:b2:c6:b4:bd:dd:
fa:fc:be:28:e9:ff:32:91:df:16:d3:4f:73:4b:15:64:5b:d8:
2c:9b:b0:43:e3:c6:2a:4c:0b:a8:50:12:e0:7f:d5:7a:aa:07:
f1:05:d4:74:d1:51:a6:a2:39:f0:d7:b0:e7:97:35:d4:16:1b:
de:9a:a6:28:91:12:5c:93:43:a0:b8:75:a6:2c:0a:4c:ab:75:
30:49:84:5d:54:93:32:03:34:4e:a2:46:34:00:72:93:79:de:
6e:5a:ff:ea:80:34:6f:5b:16:a9:82:a4:c9:62:4a:7b:59:da:
9d:aa:5c:5f:08:0b:58:7c:74:75:c5:cb:56:9d:7e:84:c0:ee:
31:54:8a:6c:31:4c:c6:37:e8:96:f1:62:fa:0e:0a:c3:68:b5:
05:2a:2f:20:50:7a:a7:cd:2f:15:30:c4:56:f8:38:f8:9d:e1:
41:ed:62:54:da:ca:98:54:95:90:3e:bc:63:6a:55:69:56:6d:
af:23:30:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:37:38 2025 by rpki-client