Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
File: UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft (raw, json)
Hash identifier: LY3XsAOApt0ZaHAu/Z3lQBCOq7ZGHt/+qj7u5Sv1f3M=
Subject key identifier: 1B:AE:1A:DF:84:FC:CD:51:21:DE:1B:E8:71:45:99:16:CB:DB:BE:90
Authority key identifier: 50:3F:73:FE:FE:9D:BD:16:56:14:37:5A:18:A3:4C:DC:FB:4A:31:EE
Certificate issuer: /CN=503f73fefe9dbd165614375a18a34cdcfb4a31ee
Certificate serial: 0198733D2CBF5D633D2B55EC986024560662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UD9z_v6dvRZWFDdaGKNM3PtKMe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
Manifest number: 09D0
Signing time: Mon 04 Aug 2025 04:00:45 +0000
Manifest this update: Mon 04 Aug 2025 04:00:45 +0000
Manifest next update: Tue 05 Aug 2025 04:00:45 +0000
Files and hashes: 1: UD9z_v6dvRZWFDdaGKNM3PtKMe4.crl (hash: WmmUHB2E/X5M39TU68l1OKWRFVeJJkwo6cNsCSIywlo=)
2: rB2uaCwrLsHd8QP3gzLrvvAfPiA.roa (hash: rFl9lkx1744U+43ipMxs7m2ICQoiTAYXwAH+fMGwgoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UD9z_v6dvRZWFDdaGKNM3PtKMe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:2c:bf:5d:63:3d:2b:55:ec:98:60:24:56:06:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=503f73fefe9dbd165614375a18a34cdcfb4a31ee
Validity
Not Before: Aug 4 04:00:45 2025 GMT
Not After : Aug 5 04:00:45 2025 GMT
Subject: CN=1bae1adf84fccd5121de1be871459916cbdbbe90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:76:53:26:c8:60:79:cf:81:57:09:e6:e5:54:
9a:d7:91:6a:96:2e:f7:f3:40:86:3a:33:87:b4:4f:
c3:39:8e:4f:ca:43:12:24:d4:ce:00:b6:c8:54:32:
83:8f:f5:cc:7e:bd:21:0f:40:43:21:7b:f3:63:6a:
ba:82:5b:fa:f2:33:ef:05:2a:68:4b:92:13:95:92:
a2:83:8c:95:6c:39:71:f9:3b:c2:f0:f4:54:fd:f1:
21:8d:13:1e:3e:67:ea:86:8e:b7:1e:1c:76:61:8a:
41:6b:58:29:96:26:e1:b3:2a:bb:21:76:e2:33:50:
34:3a:6b:fb:71:05:29:6e:3a:d4:c9:23:89:4f:bf:
85:4e:2f:c0:13:4f:c4:ef:22:0e:e4:47:99:e7:94:
37:18:5c:13:c2:29:07:2e:e7:9c:e5:29:df:0a:62:
8d:5d:b5:f5:9d:9a:a6:b0:af:bd:e6:81:e3:42:2e:
43:90:5a:2e:37:44:8e:81:6c:b1:5f:e3:d7:8c:8e:
3d:7f:3f:15:62:b9:86:c1:cc:6a:ec:40:30:e2:a4:
4c:e2:f7:3c:4e:75:ad:af:f3:b1:b5:e5:49:f1:7d:
3c:f7:16:3b:f4:98:47:9c:bf:29:cf:29:35:2c:87:
05:41:1f:61:f3:d4:5b:89:6d:d9:65:7c:08:1c:19:
12:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AE:1A:DF:84:FC:CD:51:21:DE:1B:E8:71:45:99:16:CB:DB:BE:90
X509v3 Authority Key Identifier:
keyid:50:3F:73:FE:FE:9D:BD:16:56:14:37:5A:18:A3:4C:DC:FB:4A:31:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UD9z_v6dvRZWFDdaGKNM3PtKMe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:4d:e1:0e:01:85:2a:69:9b:98:29:e3:ab:37:fd:4e:a7:b3:
b2:4c:d3:09:0c:28:f4:8f:5d:b3:f2:aa:de:60:22:b1:6d:4c:
6f:ad:8a:e5:74:3f:9c:d4:b3:df:4b:60:bc:d1:4d:78:02:f6:
78:93:1b:3f:56:77:6c:f4:df:11:a5:fa:94:c4:e0:40:91:f4:
31:b2:58:4c:b1:cc:27:68:02:ec:43:db:72:25:16:2b:a4:d4:
f3:d5:db:a9:68:6a:f3:fe:63:c0:66:a6:69:b3:6b:c9:f5:67:
cd:75:f6:6f:b3:f2:8a:ee:ef:af:d7:16:04:ee:bd:e3:74:ad:
67:09:ba:05:d1:96:88:ae:bd:35:ba:d6:bf:20:69:1f:55:5a:
bf:11:75:2a:83:b6:ff:53:28:6d:a3:b4:b6:d4:0e:03:bb:25:
24:32:c6:c5:52:f8:c4:51:81:b5:4d:31:2c:88:16:f0:be:e3:
33:ac:d5:1a:e4:ac:08:c3:88:02:5d:62:9e:29:66:e2:75:1f:
a3:51:aa:4d:09:60:f7:5e:44:e0:78:42:06:27:4d:67:a4:b4:
47:57:9c:4d:3b:6a:1b:29:96:6f:19:a5:b1:90:77:55:0e:9a:
60:e6:d6:2e:99:ee:ef:96:7f:8e:98:f0:39:3d:3c:9a:08:ae:
9e:b3:81:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:31 2025 by rpki-client