Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
File: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft (raw, json)
Hash identifier: AfaGyTHdW9kHqJBIMRFP6tNBHkMINiv7h3BisxIfX7g=
Subject key identifier: 36:44:42:2A:71:9D:3B:BE:D5:A1:C0:90:23:29:61:A5:AA:6C:5C:CD
Authority key identifier: F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
Certificate issuer: /CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Certificate serial: 01988CFDA75FEEC1ED4BBD80E79EF3F9FC81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
Manifest number: 0BEC
Signing time: Sat 09 Aug 2025 04:01:30 +0000
Manifest this update: Sat 09 Aug 2025 04:01:30 +0000
Manifest next update: Sun 10 Aug 2025 04:01:30 +0000
Files and hashes: 1: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl (hash: vZBK0LCnM+EslcaKRAanvuhsfRUzXkIzqoCDowTyDzg=)
2: HnZ1VjQW735MMUi4UDqiepCAdeM.roa (hash: 31a3rYl8qptlSMbknXPbZIkMQ7iUM4ri0d4GzZPfheM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:a7:5f:ee:c1:ed:4b:bd:80:e7:9e:f3:f9:fc:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Validity
Not Before: Aug 9 04:01:30 2025 GMT
Not After : Aug 10 04:01:30 2025 GMT
Subject: CN=3644422a719d3bbed5a1c090232961a5aa6c5ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d7:3d:a8:6d:a5:24:0f:f9:64:e6:59:d1:1f:
05:16:5b:37:21:56:1d:3f:9b:e0:91:27:fe:12:91:
7d:7d:8c:78:aa:de:9a:78:8e:4c:3a:ce:02:cf:51:
11:1b:8b:d5:f6:31:c9:18:42:6e:24:2a:80:c3:a4:
4e:4d:16:41:f1:dc:52:2c:81:1c:b2:ef:f9:cd:1c:
bd:81:34:70:01:d1:f7:3a:53:1d:12:2f:b3:92:9a:
64:4c:84:69:d8:94:44:f2:91:c2:69:e7:29:7a:42:
4c:22:91:3e:7d:77:1e:d2:9e:77:c6:4a:c6:45:84:
d8:44:48:ee:c7:19:f6:7a:14:3d:f6:e1:fd:bb:1c:
f8:7f:e8:54:8d:c5:5a:f5:eb:5e:80:92:a1:34:9f:
d9:df:c0:17:cf:e2:51:a5:bd:7d:93:fc:03:a9:c3:
b3:4b:18:f2:77:b9:bf:0b:84:87:5e:10:87:bf:0d:
fd:b9:89:cd:29:7e:50:1f:3f:17:1f:2b:c4:3e:9e:
71:ed:4e:0a:e7:5b:49:08:fb:36:4d:fe:5e:34:c2:
0e:f6:61:2b:75:fd:71:86:37:4b:da:30:6f:b8:dd:
a7:44:d8:9d:c4:54:bb:45:a2:ba:b0:d9:95:19:de:
df:af:68:91:06:3d:ed:3b:64:5a:5d:17:07:d0:57:
4c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:44:42:2A:71:9D:3B:BE:D5:A1:C0:90:23:29:61:A5:AA:6C:5C:CD
X509v3 Authority Key Identifier:
keyid:F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b4:c4:b6:71:3a:fa:26:f9:8e:6f:b7:20:2f:c6:20:17:8e:
bf:cc:75:37:88:54:7c:83:81:84:e0:17:46:af:84:36:e6:36:
b2:73:29:28:7f:5d:0c:1e:ae:06:93:da:8c:96:ec:aa:90:ca:
51:5c:49:52:97:75:47:3c:ad:36:7b:b2:88:7b:ab:cb:83:f6:
d0:74:cf:6e:3a:08:67:94:53:d9:d7:df:be:d7:5a:a1:6b:46:
1f:05:1c:c2:93:58:80:a7:9f:20:ad:fa:c1:14:3d:33:1e:5e:
b3:84:07:75:d6:fa:f8:3a:bd:c4:56:ea:82:c8:ed:c5:2b:da:
00:46:1b:b2:78:52:b8:b7:e9:88:34:bf:ab:23:c2:ac:fc:9c:
7e:c8:6b:65:3d:f8:e3:8c:4b:bc:9e:67:58:15:bb:39:2f:b9:
87:f8:85:bc:c2:25:b3:d3:a0:e7:6c:95:0a:fe:7c:d6:b8:c8:
2f:b5:56:6b:b6:06:e0:79:4d:69:56:50:47:c8:2e:b3:dd:c4:
55:3f:a3:2e:be:e4:da:1c:01:c6:39:9a:41:e3:c6:51:31:28:
d6:c4:20:0a:45:b9:49:a5:a7:c3:31:5d:4c:d2:b7:e2:70:c6:
63:6e:8f:28:6f:1e:13:f1:5b:9a:4b:79:97:05:17:b0:9c:c2:
cb:5f:ec:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:31:39 2025 by rpki-client