Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
File: 2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft (raw, json)
Hash identifier: yVnFPIgqUGzjizUhUAVuhwoU1ranKzf/t2w02Vl2c+U=
Subject key identifier: C0:20:49:F0:19:BC:2C:38:3D:99:C9:5F:66:3A:C4:89:6F:03:E6:E6
Authority key identifier: D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9
Certificate issuer: /CN=d94284b94325f5060f8a0e87c1be2827788f18f9
Certificate serial: 01976BF48E25E227D2666A6CA4FEBDF0FAF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
Manifest number: 12D1
Signing time: Sat 14 Jun 2025 01:01:18 +0000
Manifest this update: Sat 14 Jun 2025 01:01:18 +0000
Manifest next update: Sun 15 Jun 2025 01:01:18 +0000
Files and hashes: 1: 2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl (hash: /BXQj3kzF4o4hojW6QyMM4kLJHrwsxAul0PlCohvAek=)
2: ysJps6pTqYBp8hRsJvvn2nSnB6Y.roa (hash: xFEzrUJlVVBWEtFecNObcV0TMloS/XizxOFPtUYtswE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:8e:25:e2:27:d2:66:6a:6c:a4:fe:bd:f0:fa:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94284b94325f5060f8a0e87c1be2827788f18f9
Validity
Not Before: Jun 14 01:01:18 2025 GMT
Not After : Jun 15 01:01:18 2025 GMT
Subject: CN=c02049f019bc2c383d99c95f663ac4896f03e6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:24:2f:29:69:d1:a7:de:9a:e6:c0:e2:95:86:
0f:a1:1c:18:72:6c:18:75:2f:3a:c3:59:8d:e5:cf:
80:e8:50:21:e8:b0:69:08:8a:1e:5d:2b:2f:17:b1:
c1:6c:87:c6:4c:93:b5:75:55:84:9d:1a:84:b6:66:
79:f5:c6:8b:d7:89:89:83:71:e3:8e:01:32:a0:fc:
67:58:28:f7:e9:97:6d:0a:91:b2:12:6c:c0:fb:6c:
84:25:2d:08:6d:a5:19:5c:04:90:04:b6:35:67:61:
39:72:5c:3c:58:d7:e1:e5:a1:45:9a:d9:0e:0d:5f:
6a:1c:c7:66:f1:ba:8a:db:1d:77:41:0a:d6:25:9a:
59:4e:fe:90:8b:34:b8:99:5d:32:b3:12:52:7b:11:
4a:cb:30:80:8e:d6:61:dc:3f:e3:b6:45:0b:9c:61:
c7:0c:5e:da:aa:75:57:4b:df:62:eb:d6:9c:ad:65:
ba:23:f0:97:75:90:f4:28:15:24:4f:22:37:c3:47:
8f:1c:9c:88:13:ea:6a:31:44:e8:35:57:85:93:e0:
e1:64:55:2d:9f:73:f8:e4:44:47:2a:0a:d9:15:bf:
9b:b5:a0:21:d0:6a:ff:f2:0a:31:c4:2c:0f:84:d1:
79:ac:21:ee:63:5a:b5:8a:27:48:e0:91:ab:b9:d2:
8d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:20:49:F0:19:BC:2C:38:3D:99:C9:5F:66:3A:C4:89:6F:03:E6:E6
X509v3 Authority Key Identifier:
keyid:D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:04:59:7b:28:53:6a:92:80:ec:74:64:f8:c6:5d:96:8c:f4:
39:f7:00:cc:a1:04:14:72:90:e7:92:d1:04:75:7d:41:c5:51:
71:7d:80:db:18:ad:fe:45:bf:96:82:9b:f3:bd:41:f9:48:ed:
30:f2:1a:ed:22:4a:2a:4d:b3:e6:48:f1:28:60:86:3c:b0:78:
62:51:40:15:64:93:eb:52:1d:98:2f:4b:49:50:ce:91:a3:6a:
cd:a1:ef:db:4b:56:9b:bc:67:f5:26:41:0d:9f:7f:0f:99:04:
af:a1:fc:5d:57:4e:eb:1c:80:b0:05:b2:f9:c0:33:ed:cc:c7:
6b:5b:bc:33:8f:d2:ec:e5:db:63:69:69:66:5e:ff:99:5f:84:
cf:b7:0d:10:29:64:11:5b:f1:2a:50:eb:2f:23:be:ff:ac:71:
da:70:fe:e7:90:73:38:44:bd:e4:8a:38:47:bd:d1:10:e4:e4:
1b:31:3b:d1:9d:b6:95:1a:06:b6:79:d6:f2:34:1d:ae:78:e7:
1a:91:d1:4d:39:af:59:04:0d:12:82:79:16:aa:3b:b4:fa:da:
21:39:15:78:99:53:4c:cf:88:ae:e8:27:ed:98:60:67:fd:e3:
4d:d1:e7:98:b6:10:ca:ae:31:40:61:10:f6:42:26:b6:29:15:
b9:ce:43:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:47:48 2025 by rpki-client