Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/281cc2-959e-4192-bdde-8c70bc847bc5/1/udCVzONbOja-8QjvdipiGvRmJiE.mft
File: udCVzONbOja-8QjvdipiGvRmJiE.mft (raw, json)
Hash identifier: YjEnO9+H/TJW2ZjRI7lvMelDtAbYy3cgnCD5cLKnUIY=
Subject key identifier: 17:E3:DB:C8:79:69:3F:6C:D6:A1:11:04:B3:57:0E:D0:C8:D4:11:A4
Authority key identifier: B9:D0:95:CC:E3:5B:3A:36:BE:F1:08:EF:76:2A:62:1A:F4:66:26:21
Certificate issuer: /CN=b9d095cce35b3a36bef108ef762a621af4662621
Certificate serial: 019778660C385F747D6201B226F3E42263F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/udCVzONbOja-8QjvdipiGvRmJiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/281cc2-959e-4192-bdde-8c70bc847bc5/1/udCVzONbOja-8QjvdipiGvRmJiE.mft
Manifest number: 02E9
Signing time: Mon 16 Jun 2025 11:00:43 +0000
Manifest this update: Mon 16 Jun 2025 11:00:43 +0000
Manifest next update: Tue 17 Jun 2025 11:00:43 +0000
Files and hashes: 1: udCVzONbOja-8QjvdipiGvRmJiE.crl (hash: segtNYI4rpjCPsGed0/NUX0hzHWk0F+uEi5/QYwox5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/281cc2-959e-4192-bdde-8c70bc847bc5/1/udCVzONbOja-8QjvdipiGvRmJiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/281cc2-959e-4192-bdde-8c70bc847bc5/1/udCVzONbOja-8QjvdipiGvRmJiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/udCVzONbOja-8QjvdipiGvRmJiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:66:0c:38:5f:74:7d:62:01:b2:26:f3:e4:22:63:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9d095cce35b3a36bef108ef762a621af4662621
Validity
Not Before: Jun 16 11:00:43 2025 GMT
Not After : Jun 17 11:00:43 2025 GMT
Subject: CN=17e3dbc879693f6cd6a11104b3570ed0c8d411a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:81:79:2b:b5:81:c7:00:50:5b:aa:c9:0d:af:
01:f6:3e:0e:d2:99:15:37:14:b7:bf:42:3d:55:2b:
8e:d5:7d:4c:95:0b:ff:3d:5c:d6:cc:43:49:44:41:
ed:c5:bb:8f:12:ce:c6:44:51:42:5c:75:c9:be:81:
a8:b6:24:06:19:38:23:35:94:4b:c9:22:00:97:57:
e8:0c:7a:37:27:98:3f:7b:6b:1b:9e:26:ea:b8:2b:
36:58:f1:dc:91:e9:b5:d6:9f:5a:7d:8f:85:2b:5d:
88:d2:dd:a5:cd:78:36:30:73:6d:fb:b8:27:9c:fe:
3f:c1:90:cb:df:7f:07:97:24:6a:88:17:c3:a5:67:
52:c2:d6:f5:34:5e:8c:77:7c:2e:01:64:a0:19:bd:
9b:a1:f3:c7:4b:74:eb:dd:ab:f5:05:c6:17:88:95:
4d:c4:96:d7:77:f3:ba:cb:bb:99:bd:91:33:3b:0f:
65:6a:6b:99:f9:e8:5f:6a:73:a6:38:88:b5:b6:3f:
ee:d1:41:c5:b7:50:c7:79:a5:fa:8a:ee:d4:d2:88:
53:2d:39:b6:fb:35:0e:a9:10:3e:0b:cf:a9:45:27:
ae:0f:37:3b:91:b6:62:f7:38:ac:e0:07:ac:0c:ea:
78:fc:c6:81:10:51:26:b6:68:8f:ea:ff:42:0b:70:
2c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E3:DB:C8:79:69:3F:6C:D6:A1:11:04:B3:57:0E:D0:C8:D4:11:A4
X509v3 Authority Key Identifier:
keyid:B9:D0:95:CC:E3:5B:3A:36:BE:F1:08:EF:76:2A:62:1A:F4:66:26:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/udCVzONbOja-8QjvdipiGvRmJiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/281cc2-959e-4192-bdde-8c70bc847bc5/1/udCVzONbOja-8QjvdipiGvRmJiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/281cc2-959e-4192-bdde-8c70bc847bc5/1/udCVzONbOja-8QjvdipiGvRmJiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:9a:9a:a2:34:ee:ff:8f:23:7e:ce:3b:fe:22:77:bb:c6:4e:
07:81:37:a0:a7:48:5a:f7:45:f9:f1:26:22:da:63:31:0d:e5:
93:5f:e0:0d:96:a5:ba:d1:fc:95:57:a6:67:cf:23:60:72:d5:
5a:54:a7:bb:c8:9c:5e:16:c2:03:6b:d0:fe:c2:2d:78:f0:e0:
6d:f0:79:3e:83:f7:44:54:73:21:04:af:5a:8f:b4:62:4d:9f:
47:b9:ca:47:5b:a0:8b:ea:4e:28:ab:4c:c8:58:8e:3b:c8:1e:
60:90:7e:ae:a4:7b:94:e8:26:3b:06:96:4f:fc:b2:c0:b3:8c:
35:b5:98:ce:26:63:a8:3d:7c:84:6a:41:5f:fc:0a:38:ba:12:
ad:99:d8:52:d1:83:f9:83:3c:6e:41:48:29:75:4a:ec:25:8e:
69:c1:82:f3:ad:a6:50:8b:c0:43:c3:a2:a2:e5:ea:ce:cd:50:
f2:7e:7c:85:ba:b3:87:10:d0:32:20:dd:07:e2:7a:6b:1a:99:
4a:10:08:fb:32:26:9b:26:05:ba:43:2c:67:80:e6:fd:c8:4e:
f0:1a:0b:b3:ec:26:26:4e:f1:3e:12:09:a3:52:f7:84:f8:2f:
ce:33:c3:eb:56:36:dd:6a:9d:93:da:fa:ce:6a:aa:b2:ea:88:
0c:a3:dd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:37:36 2025 by rpki-client