Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
File: u7kUAX20Xp91443ePwNXzitx2Cc.mft (raw, json)
Hash identifier: rh6gzm/RIqQvPc2TixARXojBES0T3gpMZ4qPPZZIjzo=
Subject key identifier: 2A:ED:39:63:22:AB:69:7B:92:61:69:D7:F0:06:BC:C8:C5:90:88:61
Authority key identifier: BB:B9:14:01:7D:B4:5E:9F:75:E3:8D:DE:3F:03:57:CE:2B:71:D8:27
Certificate issuer: /CN=bbb914017db45e9f75e38dde3f0357ce2b71d827
Certificate serial: 01976F2BBB2BA487451817DE07D02309B40A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
Manifest number: 063A
Signing time: Sat 14 Jun 2025 16:00:26 +0000
Manifest this update: Sat 14 Jun 2025 16:00:26 +0000
Manifest next update: Sun 15 Jun 2025 16:00:26 +0000
Files and hashes: 1: u7kUAX20Xp91443ePwNXzitx2Cc.crl (hash: GDlsOumcoQRerEE8GRFcgBPZ5em6O9w9Op4DwYf/ig8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:bb:2b:a4:87:45:18:17:de:07:d0:23:09:b4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbb914017db45e9f75e38dde3f0357ce2b71d827
Validity
Not Before: Jun 14 16:00:26 2025 GMT
Not After : Jun 15 16:00:26 2025 GMT
Subject: CN=2aed396322ab697b926169d7f006bcc8c5908861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f2:c1:33:9d:e8:b3:ba:f7:f2:27:f1:f0:47:
10:f5:71:cd:84:dd:4b:e4:43:a7:d8:c8:30:cd:64:
42:b4:df:29:1e:ad:46:ed:d1:26:6c:52:41:2b:db:
a2:c1:e6:43:7f:a8:8c:d7:f3:17:d3:74:84:b2:b0:
92:5c:f7:31:25:60:c3:13:87:4a:e1:a6:1c:b8:13:
27:f4:3a:23:ca:41:42:1b:b5:6f:45:1c:34:98:f9:
03:02:79:bb:e6:3e:8f:b7:28:26:93:79:a1:e6:2e:
4d:de:a2:84:b7:49:51:2d:08:f0:2b:b5:25:20:54:
f4:84:f6:a4:c6:0d:d8:20:74:32:79:ce:52:f1:82:
06:4c:b2:03:a6:d0:36:cb:c0:00:85:54:90:84:be:
40:4d:34:80:7a:0a:da:c7:d4:fe:8a:39:ec:b4:f1:
a9:34:28:64:1e:2a:5e:61:69:fd:25:3c:70:27:1c:
f7:ba:a0:81:77:ec:b7:79:41:7a:c3:d1:5f:16:ac:
91:d5:10:01:cb:e7:c2:25:37:d1:a1:56:c1:a2:be:
ea:ee:6d:62:33:e5:00:3d:df:22:fb:cf:06:1a:ef:
42:91:54:01:22:38:3c:ae:fc:19:8c:b9:a2:c2:0c:
1b:99:bc:65:64:42:32:84:1d:05:22:08:57:74:3e:
34:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:ED:39:63:22:AB:69:7B:92:61:69:D7:F0:06:BC:C8:C5:90:88:61
X509v3 Authority Key Identifier:
keyid:BB:B9:14:01:7D:B4:5E:9F:75:E3:8D:DE:3F:03:57:CE:2B:71:D8:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:66:0f:fe:1a:b6:f7:b8:20:0e:95:54:48:14:5e:23:4d:9e:
ed:34:b0:ff:0c:19:a2:c7:9a:ef:46:1d:a1:2f:de:de:e6:8f:
79:93:af:14:7e:64:72:a5:39:06:fc:ce:b0:f4:38:47:2a:2e:
0f:b2:b5:eb:2c:19:62:b0:62:e5:88:6c:cf:51:71:6c:a4:a2:
ef:53:d8:e8:5a:56:78:66:f9:93:a8:11:bd:b9:40:01:dc:33:
42:0e:27:24:e6:a7:e0:70:0d:d4:19:fa:c6:65:a0:4a:9d:70:
56:87:33:1e:75:d4:6e:e5:8b:de:23:31:6d:39:41:11:f7:b2:
05:2e:3a:5a:4a:a8:83:2a:0d:9e:77:f0:39:5a:87:5f:e1:d8:
a9:c1:03:58:71:1f:4f:8e:e0:51:6c:70:84:e3:01:c6:bc:8f:
19:65:0a:21:72:15:91:6c:c1:5e:dd:5f:c6:e6:1b:07:48:7c:
a2:e3:ed:b9:19:ba:d1:9c:02:fd:22:11:6c:f2:f1:e8:3b:43:
46:bd:74:1f:bf:4f:49:a2:e9:67:6c:b4:da:ec:33:bd:23:00:
c3:36:71:5a:7a:93:7a:7c:80:86:82:cf:e6:00:27:23:2b:3b:
51:b9:5d:a6:27:c9:d6:0c:9f:6c:b5:74:a5:57:60:4d:4b:da:
93:37:6a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:48:29 2025 by rpki-client