Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.mft
File: Unzgu6rDVu3srWci8qhvjgZJCY4.mft (raw, json)
Hash identifier: l0ERQrvX2EF587S2HwFhNxYb2gllHm95AjmpHw0jJhY=
Subject key identifier: 12:C2:1B:92:71:C4:D5:A7:A4:8F:34:48:B9:A7:37:EF:42:9A:67:E3
Authority key identifier: 52:7C:E0:BB:AA:C3:56:ED:EC:AD:67:22:F2:A8:6F:8E:06:49:09:8E
Certificate issuer: /CN=527ce0bbaac356edecad6722f2a86f8e0649098e
Certificate serial: 0197759BE5C1BE69DE35867C48E0D0AE320C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Unzgu6rDVu3srWci8qhvjgZJCY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.mft
Manifest number: 1523
Signing time: Sun 15 Jun 2025 22:00:40 +0000
Manifest this update: Sun 15 Jun 2025 22:00:40 +0000
Manifest next update: Mon 16 Jun 2025 22:00:40 +0000
Files and hashes: 1: Unzgu6rDVu3srWci8qhvjgZJCY4.crl (hash: iyyKx4+Z5+7ulgu8QWVximffpUKonhZ/bKlygiDVjPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Unzgu6rDVu3srWci8qhvjgZJCY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:9b:e5:c1:be:69:de:35:86:7c:48:e0:d0:ae:32:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=527ce0bbaac356edecad6722f2a86f8e0649098e
Validity
Not Before: Jun 15 22:00:40 2025 GMT
Not After : Jun 16 22:00:40 2025 GMT
Subject: CN=12c21b9271c4d5a7a48f3448b9a737ef429a67e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:03:fb:fc:0d:f1:50:19:e0:40:39:29:13:d9:
24:42:1e:c2:4f:04:c3:56:98:e7:fa:55:60:69:24:
4c:0b:8d:d2:62:2a:4e:e2:b7:7c:3a:65:be:23:c2:
a9:7b:ba:6d:c6:de:ee:aa:ec:f2:7e:36:0b:15:2b:
65:45:ca:a9:ff:1e:20:e8:85:02:a0:2e:cb:fa:14:
db:fe:e1:ec:1c:de:8e:73:4e:89:fa:4a:da:a1:3b:
1e:19:b2:b9:ad:87:a1:28:09:e0:1d:2d:2c:f2:42:
78:34:6b:8e:43:7f:44:98:b7:34:2a:8d:ce:5e:53:
b8:70:fd:41:1f:ab:ca:1f:fb:c7:f3:d9:98:3b:59:
40:49:69:d7:b9:89:df:36:9c:2f:cb:7c:94:9b:ce:
ff:50:12:3c:16:46:28:e8:af:2c:27:89:3c:a3:b6:
06:43:69:3c:69:34:42:1f:ab:3c:21:44:16:29:6f:
95:66:d1:d5:8b:e0:a2:50:18:4e:ab:96:2f:d3:19:
f8:2d:d0:99:0d:2b:71:f5:54:5a:89:ad:60:7f:7a:
7c:9d:b6:43:42:70:49:cc:65:cc:5f:c2:b1:65:79:
63:3d:7e:e0:c1:b5:fa:23:ec:a8:f3:ff:13:37:24:
2a:80:5a:87:7b:4b:cb:5f:b3:59:64:d2:c8:13:b2:
59:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C2:1B:92:71:C4:D5:A7:A4:8F:34:48:B9:A7:37:EF:42:9A:67:E3
X509v3 Authority Key Identifier:
keyid:52:7C:E0:BB:AA:C3:56:ED:EC:AD:67:22:F2:A8:6F:8E:06:49:09:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Unzgu6rDVu3srWci8qhvjgZJCY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:9a:0c:a3:cc:62:6c:9c:c1:71:ea:57:d1:ba:e4:15:9a:0c:
ca:47:47:fe:62:1d:98:ee:d7:45:5d:18:3c:0d:08:1c:9b:57:
e1:b2:36:9a:82:28:27:3d:90:b4:43:1b:ed:36:7e:ad:6b:db:
84:00:07:2c:0b:46:b8:9b:c2:23:15:8a:6c:f3:04:4c:2a:49:
40:fe:be:ed:3b:5f:f4:b9:47:7f:2c:db:eb:35:a3:e5:14:c2:
f6:f6:ea:85:25:dc:c9:cb:1d:3f:cc:10:45:e4:ec:da:2b:79:
6b:63:da:5a:83:00:d9:17:67:99:18:31:46:87:30:0a:b6:5f:
e7:42:46:25:c3:7b:79:ca:dc:16:d5:25:cf:cd:65:d7:41:cf:
97:79:58:3c:20:2b:d8:f8:02:aa:8d:14:94:5c:04:76:6a:11:
88:63:71:b5:4a:89:e6:04:1e:7f:99:93:74:c7:3f:aa:3b:f1:
c5:88:0f:49:51:d9:bd:6a:7f:32:98:7a:d1:6a:db:6d:32:37:
63:c6:5f:d1:cf:bb:9b:e0:58:a7:ca:aa:3c:70:66:67:04:0e:
a3:b6:c6:40:db:81:ee:1c:03:a5:8a:4e:1b:04:ac:ac:91:6f:
96:28:31:4d:b8:6f:eb:09:11:6a:35:cb:c4:4f:ea:4f:e6:27:
00:9a:1b:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd1m+XBvmneNYZ8SODQrjIMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyN2NlMGJiYWFjMzU2ZWRlY2FkNjcyMmYyYTg2ZjhlMDY0
OTA5OGUwHhcNMjUwNjE1MjIwMDQwWhcNMjUwNjE2MjIwMDQwWjAzMTEwLwYDVQQD
EygxMmMyMWI5MjcxYzRkNWE3YTQ4ZjM0NDhiOWE3MzdlZjQyOWE2N2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQP7/A3xUBngQDkpE9kkQh7CTwTD
Vpjn+lVgaSRMC43SYipO4rd8OmW+I8Kpe7ptxt7uquzyfjYLFStlRcqp/x4g6IUC
oC7L+hTb/uHsHN6Oc06J+kraoTseGbK5rYehKAngHS0s8kJ4NGuOQ39EmLc0Ko3O
XlO4cP1BH6vKH/vH89mYO1lASWnXuYnfNpwvy3yUm87/UBI8FkYo6K8sJ4k8o7YG
Q2k8aTRCH6s8IUQWKW+VZtHVi+CiUBhOq5Yv0xn4LdCZDStx9VRaia1gf3p8nbZD
QnBJzGXMX8KxZXljPX7gwbX6I+yo8/8TNyQqgFqHe0vLX7NZZNLIE7JZtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLCG5JxxNWnpI80SLmnN+9CmmfjMB8GA1UdIwQY
MBaAFFJ84Luqw1bt7K1nIvKob44GSQmOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW56Z3U2ckRWdTNzcldjaThxaHZqZ1pKQ1k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy85MWRhOGYtY2IwOC00OWMwLTgzMDkt
OGEyYjdmOTU2OTI0LzEvVW56Z3U2ckRWdTNzcldjaThxaHZqZ1pKQ1k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy85MWRhOGYtY2IwOC00OWMwLTgzMDktOGEyYjdmOTU2OTI0
LzEvVW56Z3U2ckRWdTNzcldjaThxaHZqZ1pKQ1k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA5oMo8xi
bJzBcepX0brkFZoMykdH/mIdmO7XRV0YPA0IHJtX4bI2moIoJz2QtEMb7TZ+rWvb
hAAHLAtGuJvCIxWKbPMETCpJQP6+7Ttf9LlHfyzb6zWj5RTC9vbqhSXcycsdP8wQ
ReTs2it5a2PaWoMA2RdnmRgxRocwCrZf50JGJcN7ecrcFtUlz81l10HPl3lYPCAr
2PgCqo0UlFwEdmoRiGNxtUqJ5gQef5mTdMc/qjvxxYgPSVHZvWp/Mph60WrbbTI3
Y8Zf0c+7m+BYp8qqPHBmZwQOo7bGQNuB7hwDpYpOGwSsrJFvligxTbhv6wkRajXL
xE/qT+YnAJobWg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:32:03 2025 by rpki-client