Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
File: UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft (raw, json)
Hash identifier: hekaU5Qg/9EZwsyUbrqNcjgXWxSyo3aaVNzLKXYXH0s=
Subject key identifier: 75:C6:4F:DF:5E:C4:45:46:5C:F8:FC:50:1E:9B:7A:6C:5D:84:18:9A
Authority key identifier: 50:3F:73:FE:FE:9D:BD:16:56:14:37:5A:18:A3:4C:DC:FB:4A:31:EE
Certificate issuer: /CN=503f73fefe9dbd165614375a18a34cdcfb4a31ee
Certificate serial: 019772648DCFA081D1F7FF039B4C32DCE745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UD9z_v6dvRZWFDdaGKNM3PtKMe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
Manifest number: 094B
Signing time: Sun 15 Jun 2025 07:01:21 +0000
Manifest this update: Sun 15 Jun 2025 07:01:21 +0000
Manifest next update: Mon 16 Jun 2025 07:01:21 +0000
Files and hashes: 1: UD9z_v6dvRZWFDdaGKNM3PtKMe4.crl (hash: sqpFPlilAf95xTwoseuR1A/1rX6YwOGcH8HIbymP4jU=)
2: rB2uaCwrLsHd8QP3gzLrvvAfPiA.roa (hash: rFl9lkx1744U+43ipMxs7m2ICQoiTAYXwAH+fMGwgoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UD9z_v6dvRZWFDdaGKNM3PtKMe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:64:8d:cf:a0:81:d1:f7:ff:03:9b:4c:32:dc:e7:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=503f73fefe9dbd165614375a18a34cdcfb4a31ee
Validity
Not Before: Jun 15 07:01:21 2025 GMT
Not After : Jun 16 07:01:21 2025 GMT
Subject: CN=75c64fdf5ec445465cf8fc501e9b7a6c5d84189a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:34:f2:fa:71:8b:5c:02:f8:d4:ce:21:5e:51:
61:dc:61:9b:3e:30:0b:7f:9f:3f:12:a4:a2:d4:5a:
d3:c6:ed:ad:f6:0a:95:98:39:e7:d8:10:28:48:80:
3f:56:2f:4c:26:43:29:dd:9b:28:00:66:ac:ac:9a:
7c:45:42:44:13:6f:d3:eb:e9:f8:9e:68:8c:61:d7:
a9:ef:f7:f7:30:27:47:89:3c:48:1d:60:6c:6c:97:
5b:77:bf:82:b3:70:d7:da:6b:a6:ed:9c:5f:c5:53:
c0:c9:ca:ac:97:93:ab:75:24:aa:7a:4e:bb:c9:84:
21:1e:55:0e:96:37:8c:2c:43:f1:2f:9f:96:51:fd:
1b:dd:4c:15:8a:ab:fd:1a:06:92:27:2c:89:88:ed:
d8:f1:c5:a9:70:37:7d:fc:88:2e:c5:88:35:e7:9a:
49:a0:cf:04:b0:3f:3e:a6:b7:99:ae:7f:56:14:fa:
e7:69:87:00:cf:b8:27:cb:f5:ab:e8:24:85:7a:d3:
94:a1:a9:84:e0:ae:0e:ff:f0:0b:9f:d7:12:a6:71:
92:58:24:b2:53:b4:b1:3f:1b:92:c5:b0:4e:9c:df:
31:be:44:57:db:ad:3e:0f:1c:12:77:c8:ef:d9:2a:
2f:b4:b5:bd:e3:76:e1:5e:28:99:b1:c7:ae:c5:0f:
25:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C6:4F:DF:5E:C4:45:46:5C:F8:FC:50:1E:9B:7A:6C:5D:84:18:9A
X509v3 Authority Key Identifier:
keyid:50:3F:73:FE:FE:9D:BD:16:56:14:37:5A:18:A3:4C:DC:FB:4A:31:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UD9z_v6dvRZWFDdaGKNM3PtKMe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:4e:a0:fa:df:b7:4c:9c:a6:9c:0f:fd:2f:16:c5:4e:75:56:
ce:78:d2:ea:da:7a:31:01:78:70:af:31:51:b7:ab:53:ed:2f:
05:08:a9:66:69:19:97:52:22:d6:2d:0d:ad:e8:d8:d0:ec:1e:
00:0d:95:81:55:c8:26:45:5d:ab:39:eb:55:40:89:66:61:93:
11:3e:7f:d9:e7:10:a8:19:5f:d7:bc:df:82:cb:1e:53:70:10:
5d:b5:af:a3:72:11:e8:eb:11:ce:fe:b0:2c:4c:56:c0:13:7f:
2f:fd:af:ea:f5:d2:6c:8e:b8:fd:c4:57:20:17:c7:f7:6e:89:
55:b6:56:0c:85:9b:dc:40:6b:61:0a:9e:b1:e9:cd:91:00:89:
bc:61:f2:ae:fd:80:f9:c5:35:ad:14:09:fa:fc:d1:d7:47:53:
4a:5b:b1:6f:45:f4:ec:b6:97:53:23:d1:53:14:23:4d:70:f7:
b0:0e:75:29:2f:55:d2:29:ed:9a:05:1b:44:31:ef:8f:a2:0f:
64:09:33:e6:17:ca:1c:f5:68:64:4e:88:0d:ec:bc:c2:18:a1:
31:1c:f8:ea:e4:91:93:24:62:35:e7:a4:6e:6b:9c:ef:4f:e2:
c5:b4:ed:be:be:76:d2:dc:11:14:31:72:00:7a:ff:df:67:fe:
63:45:87:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:31:17 2025 by rpki-client