Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.mft
File: UIJpb7xB2QYWimDOCUlJAiz2Keg.mft (raw, json)
Hash identifier: 9OJoPPNO+ivg0Ldhw909IWp1pwkhq8XbNPQP58qYuuA=
Subject key identifier: 4D:23:AA:51:3B:33:70:69:06:2A:B1:53:96:3A:1A:C5:6A:20:56:E9
Authority key identifier: 50:82:69:6F:BC:41:D9:06:16:8A:60:CE:09:49:49:02:2C:F6:29:E8
Certificate issuer: /CN=5082696fbc41d906168a60ce094949022cf629e8
Certificate serial: 01976CCFC3E0C3C81A8A861182C314959418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UIJpb7xB2QYWimDOCUlJAiz2Keg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.mft
Manifest number: 0316
Signing time: Sat 14 Jun 2025 05:00:44 +0000
Manifest this update: Sat 14 Jun 2025 05:00:44 +0000
Manifest next update: Sun 15 Jun 2025 05:00:44 +0000
Files and hashes: 1: UIJpb7xB2QYWimDOCUlJAiz2Keg.crl (hash: y7DHbvuHxL3uB3V+qjMqGkX7QkcWsGILGJTpItEoOjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UIJpb7xB2QYWimDOCUlJAiz2Keg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:c3:e0:c3:c8:1a:8a:86:11:82:c3:14:95:94:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5082696fbc41d906168a60ce094949022cf629e8
Validity
Not Before: Jun 14 05:00:44 2025 GMT
Not After : Jun 15 05:00:44 2025 GMT
Subject: CN=4d23aa513b337069062ab153963a1ac56a2056e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2f:e3:8f:a8:61:29:22:8f:47:91:81:27:36:
89:dd:68:12:f1:09:a3:b3:74:fe:c7:61:38:b3:99:
8f:24:22:4f:99:a4:9b:b5:fe:26:0e:ec:82:76:2f:
3d:c2:78:54:56:c3:12:dd:0a:0e:03:05:75:23:a3:
3b:30:98:f8:af:e3:17:8b:84:3c:29:e7:0a:ec:bd:
1d:6d:55:bf:2e:19:64:98:83:c8:0b:96:75:81:b6:
de:07:9b:c0:4f:43:4d:d8:12:e8:e3:1a:42:f9:33:
18:f5:4a:56:d9:0f:fa:92:34:a6:ce:81:6d:3a:7f:
27:3e:41:7e:e2:8a:b4:9c:44:7a:52:df:05:d3:37:
00:1a:2f:f7:43:03:54:61:62:c5:41:a8:99:c6:ff:
70:c6:81:4f:32:3c:bb:e1:7d:c1:c0:86:17:83:c9:
26:05:73:f9:df:db:12:ea:d8:d0:1d:24:d7:34:c3:
b4:62:fb:b3:ad:22:e1:24:cd:f2:a8:df:29:bd:33:
df:b1:42:8e:8f:44:e6:e9:ab:83:b0:40:dd:c5:c4:
54:4e:71:a1:26:4b:0c:73:ac:9a:a2:56:f3:0b:60:
0f:6a:72:9c:59:7e:d5:86:f7:be:cb:26:2b:14:08:
11:54:94:72:4d:33:bd:db:a9:b2:ae:cb:01:29:61:
9f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:23:AA:51:3B:33:70:69:06:2A:B1:53:96:3A:1A:C5:6A:20:56:E9
X509v3 Authority Key Identifier:
keyid:50:82:69:6F:BC:41:D9:06:16:8A:60:CE:09:49:49:02:2C:F6:29:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UIJpb7xB2QYWimDOCUlJAiz2Keg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d3:2d:39:79:6f:3b:7f:6b:39:32:29:20:62:b2:86:40:68:
f2:30:cc:27:d8:ea:89:7f:8a:38:08:53:60:7a:24:f8:24:d1:
2b:22:ed:53:fb:8e:00:d1:27:3b:ba:58:1f:60:db:45:79:01:
18:e5:e3:99:38:9c:78:03:df:96:45:20:87:cf:f6:4d:0c:d4:
03:32:89:1c:e1:b4:0c:43:50:26:27:27:0b:70:2d:56:7a:8c:
d7:17:de:a9:ce:03:97:49:93:44:f9:2b:bc:0e:96:dc:7d:68:
f6:40:cf:e5:0d:2c:8d:48:e7:59:7d:42:24:c2:9e:3b:d4:9f:
8e:d1:cd:34:78:f7:3f:88:3b:8e:7f:8a:a7:84:ef:31:eb:fe:
a7:83:3b:66:61:56:23:2b:ed:e3:c6:3e:a0:9e:d1:de:3d:f9:
9e:5a:ac:28:dd:2f:e9:cc:53:ba:60:72:f6:15:d5:5c:5a:72:
be:57:2c:8c:ee:15:ec:5f:04:f8:f4:bb:6f:bc:85:db:d0:25:
aa:0b:9d:87:46:c1:ab:98:a6:43:31:1c:2f:d8:56:dd:7e:51:
8f:ad:3a:3e:c8:e9:b4:17:da:26:74:38:60:f0:5d:e6:45:28:
94:5f:f6:a7:e0:ef:1f:98:46:50:de:43:57:5d:15:e6:7e:76:
9f:4d:14:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:10:53 2025 by rpki-client