Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
File: 9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft (raw, json)
Hash identifier: 1351fTWlsl/lnxKoEKSGCvfd0fzFSONGcbEwZgdIDik=
Subject key identifier: 1F:95:B8:82:60:26:34:CF:5C:B8:41:63:40:36:E8:1D:18:1F:B9:11
Authority key identifier: F5:45:0C:63:76:65:5E:EC:1D:D2:DA:4B:D2:1D:5F:10:4A:96:D9:04
Certificate issuer: /CN=f5450c6376655eec1dd2da4bd21d5f104a96d904
Certificate serial: 01976A738EFB49CCA4AE76BA970EE2151AA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
Manifest number: 154A
Signing time: Fri 13 Jun 2025 18:00:47 +0000
Manifest this update: Fri 13 Jun 2025 18:00:47 +0000
Manifest next update: Sat 14 Jun 2025 18:00:47 +0000
Files and hashes: 1: 9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl (hash: 9fqHqzPq/5H/kxjVKACVBuLp90hBb9f73AbQelRSkVo=)
2: As_EZ-RvP3qi1sws1jil8dnna6k.roa (hash: OtrJo+OCLnikRPWLn5xnNsduIJXUQk6NGSjartknylA=)
3: MSgwMQBVeKrb-aSmClVXWXeIrYA.roa (hash: QNReZgAEU8FQp9RxZ7cqr3S4KzJDn6XR61dqK9DUir4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:73:8e:fb:49:cc:a4:ae:76:ba:97:0e:e2:15:1a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5450c6376655eec1dd2da4bd21d5f104a96d904
Validity
Not Before: Jun 13 18:00:47 2025 GMT
Not After : Jun 14 18:00:47 2025 GMT
Subject: CN=1f95b882602634cf5cb841634036e81d181fb911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:32:8d:01:05:86:53:90:60:80:72:d8:1f:3e:
5e:b4:99:b9:e3:85:86:de:90:08:5c:05:e7:92:32:
12:f2:a8:2e:04:a8:46:e0:9e:c7:0c:c9:8c:64:34:
a9:d7:cf:d4:c0:04:e1:fd:55:2d:66:8e:0a:59:c3:
3c:3b:37:a4:3a:86:3b:6a:43:7b:02:3c:35:05:42:
5a:37:d2:ae:09:bf:0d:28:75:c9:44:2c:c2:80:c1:
6c:09:fd:96:fa:fa:de:e7:a6:4f:95:f9:f1:10:e3:
b1:4d:d0:cd:57:7f:a4:e1:2f:55:8d:22:4e:7e:76:
3c:fd:80:b4:0d:29:99:61:ce:43:79:41:ca:25:f8:
8a:10:73:47:98:24:b8:90:6b:e5:de:1a:3c:6c:24:
91:05:ee:d8:88:8f:af:85:d1:18:8e:bb:6d:70:f7:
62:61:b4:d6:61:f7:e0:44:0a:1e:cf:2f:57:6f:26:
ef:6c:77:2b:9a:b2:50:35:c8:32:4d:64:7f:a1:02:
49:55:e7:32:80:78:f6:5d:07:aa:57:a8:cf:8e:79:
1f:34:ed:30:a9:7f:92:51:02:5a:a4:35:d0:a5:f9:
32:5a:b5:77:50:57:04:5a:02:2b:87:d5:57:ee:9d:
2f:5c:c7:5f:d8:64:0c:b9:40:5d:6e:06:0d:61:f9:
87:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:95:B8:82:60:26:34:CF:5C:B8:41:63:40:36:E8:1D:18:1F:B9:11
X509v3 Authority Key Identifier:
keyid:F5:45:0C:63:76:65:5E:EC:1D:D2:DA:4B:D2:1D:5F:10:4A:96:D9:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:63:b8:6d:53:e4:55:09:c5:a4:4a:3d:67:c5:cf:fb:a4:66:
ed:21:a7:1f:31:17:7f:07:7d:ad:37:17:2e:ca:cb:f6:12:84:
d7:38:3f:9f:56:10:4a:3c:40:55:8c:6f:72:ef:d8:39:76:15:
c3:4a:dc:bb:d3:c1:86:0e:fa:28:bb:68:fb:ff:8e:0a:fb:c6:
40:c4:3f:4c:40:7e:a4:f1:60:f4:e6:24:7c:f4:df:c2:e4:7b:
10:24:67:cb:52:c6:ac:1e:5f:b3:f1:d7:33:6f:ea:87:ca:06:
9e:bf:55:50:45:fe:9b:56:52:6d:c2:a7:9c:7c:0d:30:9b:78:
b1:07:17:8c:06:91:14:27:48:c3:37:1c:89:ba:75:7c:ad:66:
64:59:a7:46:c0:d3:a9:09:5b:e1:07:23:c7:50:a5:2e:31:e4:
f8:ef:4c:f6:bb:17:58:7d:47:51:54:ea:c0:96:87:2c:48:23:
3d:9b:5a:6f:33:57:dc:c0:e4:fb:89:2a:4c:1c:42:bc:a1:c3:
68:ad:5f:27:1e:3f:50:25:0d:fb:5c:56:70:f0:62:17:ce:6e:
47:fa:be:d3:57:77:a9:05:d3:4e:80:b2:be:d3:67:90:d6:33:
b0:3a:46:8a:8a:f5:67:0a:87:86:4b:80:76:18:1b:c7:18:10:
dd:a1:2c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:56:21 2025 by rpki-client