Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft
File: U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft (raw, json)
Hash identifier: Bp8D27Scrobs3YPTaa4xt3hr+2WSHeT1kVE7tkLgAW0=
Subject key identifier: D2:43:05:7D:18:59:AF:0E:77:ED:75:EC:9E:2D:8E:F5:12:2F:6B:2C
Authority key identifier: 53:BF:98:D5:35:22:AA:95:70:81:FD:EC:28:B1:72:08:43:94:F1:12
Certificate issuer: /CN=53bf98d53522aa957081fdec28b172084394f112
Certificate serial: 01977AC33A54B71455D9BF9DEA13C727C22E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft
Manifest number: 0DAA
Signing time: Mon 16 Jun 2025 22:01:44 +0000
Manifest this update: Mon 16 Jun 2025 22:01:44 +0000
Manifest next update: Tue 17 Jun 2025 22:01:44 +0000
Files and hashes: 1: U7-Y1TUiqpVwgf3sKLFyCEOU8RI.crl (hash: RtXIxZlKXZhCqvcH5m82nVo9RcgrPU4sDUlKIaGJijM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:c3:3a:54:b7:14:55:d9:bf:9d:ea:13:c7:27:c2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bf98d53522aa957081fdec28b172084394f112
Validity
Not Before: Jun 16 22:01:44 2025 GMT
Not After : Jun 17 22:01:44 2025 GMT
Subject: CN=d243057d1859af0e77ed75ec9e2d8ef5122f6b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bd:38:0d:c3:dc:10:40:8e:7b:c5:b6:59:6f:
d5:f5:74:92:f1:56:66:f9:06:ea:b7:8f:d8:16:32:
b6:8e:43:8a:30:78:07:09:22:20:ef:c8:1d:e1:b6:
62:46:2b:08:61:35:43:4d:b7:9b:7d:07:96:04:c6:
be:45:01:58:1f:d7:24:14:03:aa:d0:28:98:b2:4d:
9a:5d:af:db:cf:b9:88:85:2f:b3:2a:4f:fa:d1:c5:
09:ce:7c:ef:63:90:eb:fa:dd:86:be:6e:e7:cf:aa:
7c:f4:36:a3:08:9e:50:32:92:da:57:39:9d:fa:6e:
a4:04:b2:54:b6:dd:98:91:7f:60:f5:97:05:51:4f:
99:5f:18:6b:45:e0:2f:7f:dc:17:14:d2:9e:4c:f3:
26:65:0f:e1:d5:cb:35:32:fb:a9:29:0d:61:60:39:
e6:91:c2:4a:e0:42:57:21:51:a3:7a:13:e8:d1:5a:
0a:31:7b:1d:d8:01:41:b3:30:40:eb:f1:e5:01:8f:
78:76:a4:32:e7:7f:97:2c:ca:4a:55:70:d2:a3:19:
a6:53:3b:36:55:83:5c:1f:cb:75:72:b9:1b:cd:4c:
5f:6f:24:18:2c:4c:28:45:8f:15:6b:ec:1d:d7:32:
5d:af:e1:e2:88:35:08:82:a8:4b:81:27:73:87:be:
61:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:43:05:7D:18:59:AF:0E:77:ED:75:EC:9E:2D:8E:F5:12:2F:6B:2C
X509v3 Authority Key Identifier:
keyid:53:BF:98:D5:35:22:AA:95:70:81:FD:EC:28:B1:72:08:43:94:F1:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ee:71:f4:55:5a:10:24:9d:f3:f3:1a:93:88:25:04:6f:aa:
52:48:96:2e:ca:f5:99:ff:b5:cf:a5:76:e5:0b:a4:af:a7:28:
c3:56:c5:af:08:47:ab:21:b3:8b:f1:b6:e4:7e:67:d7:57:5f:
48:43:42:39:1f:bd:d2:09:e6:1d:c5:9d:06:26:8c:b3:2d:c5:
62:5c:8f:3c:97:7e:cb:b4:b7:9b:03:86:8e:f8:9e:a7:7e:d0:
22:24:41:47:f6:5f:49:4d:ed:65:49:c0:4c:88:3e:e0:ed:d6:
70:88:07:69:d2:46:96:14:42:8a:37:bb:db:77:9d:06:e1:3c:
02:b8:9d:a0:50:2d:e7:7d:4b:4b:6d:3d:31:70:38:b7:db:cc:
01:88:5f:29:7d:20:6c:aa:23:33:0d:30:9f:b4:d2:fd:91:e5:
5b:bc:cf:cf:16:52:e2:e1:4f:c0:b0:83:a5:2f:33:11:f0:20:
d9:d0:e9:48:39:5c:3d:cb:88:16:50:74:60:4a:34:16:9b:1e:
d0:ed:68:a4:8d:70:00:98:ff:c1:58:0c:71:e4:c5:cd:94:14:
cb:69:25:5d:88:88:f1:6f:87:05:63:4f:72:5c:16:1f:97:21:
ea:a6:80:f1:6f:db:44:12:79:9e:5e:c9:a6:23:f3:5b:c1:ce:
b9:6c:2b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:41:29 2025 by rpki-client