Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
File: 0_ULT8CViQuDHAPZliXA7lQZ01o.mft (raw, json)
Hash identifier: KPQSveFMOOjyekrXNpiomyYiM3+i4OWySiTyF6HpPJo=
Subject key identifier: 80:7A:7F:C0:9C:A6:B3:58:CB:60:FE:8C:E5:03:F1:C7:9C:4E:C6:B7
Authority key identifier: D3:F5:0B:4F:C0:95:89:0B:83:1C:03:D9:96:25:C0:EE:54:19:D3:5A
Certificate issuer: /CN=d3f50b4fc095890b831c03d99625c0ee5419d35a
Certificate serial: 019771F5F8C7F9E92B4C2068FBC2B699609E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
Manifest number: 1443
Signing time: Sun 15 Jun 2025 05:00:34 +0000
Manifest this update: Sun 15 Jun 2025 05:00:34 +0000
Manifest next update: Mon 16 Jun 2025 05:00:34 +0000
Files and hashes: 1: 0_ULT8CViQuDHAPZliXA7lQZ01o.crl (hash: +6q2TfzUDgEO/c7VnbKsERe5wxOrbAQaRX4Vg4f/gyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f5:f8:c7:f9:e9:2b:4c:20:68:fb:c2:b6:99:60:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3f50b4fc095890b831c03d99625c0ee5419d35a
Validity
Not Before: Jun 15 05:00:34 2025 GMT
Not After : Jun 16 05:00:34 2025 GMT
Subject: CN=807a7fc09ca6b358cb60fe8ce503f1c79c4ec6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1c:22:1e:94:62:43:e0:66:c6:a5:49:63:b3:
13:3e:ad:d2:ad:31:86:b5:65:4c:d6:96:3c:9a:8d:
f6:56:52:34:60:85:22:35:c1:da:1b:6b:07:b8:1d:
d6:8e:c9:ff:0f:5a:3f:15:ec:ba:75:08:76:f8:5e:
b1:7a:6e:e4:b8:cb:bd:24:d9:86:e5:cc:fa:0c:13:
04:92:ad:97:d4:52:60:ab:7b:63:9b:47:da:91:cc:
5f:8e:50:b5:0a:6c:fe:27:60:28:2f:a7:6e:39:99:
9a:d3:df:9f:65:0f:84:ff:04:47:23:fd:bc:b4:f4:
10:a9:4f:06:f9:c7:af:5b:7b:38:6b:e4:58:a7:48:
7b:18:90:14:c2:9e:87:74:97:40:96:2d:0e:97:81:
17:3e:3d:4a:70:dd:fb:3d:37:95:eb:a0:34:d9:80:
3c:82:3b:00:71:a4:11:15:c7:84:16:f4:14:c3:b9:
49:ac:d4:fd:6f:a0:1b:85:80:5e:4e:c6:3c:4c:9a:
3e:00:32:95:e3:44:46:0b:3b:95:97:fa:91:02:46:
10:c5:0b:58:24:ee:b7:45:c4:a8:2a:21:80:56:7e:
92:83:a4:bd:a0:06:f8:0e:4a:fe:86:2f:83:d5:7b:
af:3a:0d:1c:63:68:4e:12:b5:4a:e3:ca:8f:e3:8d:
c9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7A:7F:C0:9C:A6:B3:58:CB:60:FE:8C:E5:03:F1:C7:9C:4E:C6:B7
X509v3 Authority Key Identifier:
keyid:D3:F5:0B:4F:C0:95:89:0B:83:1C:03:D9:96:25:C0:EE:54:19:D3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b0:54:8f:40:96:bd:73:80:35:1c:59:5b:5f:bf:2c:a8:73:
14:52:0d:20:d6:13:07:e8:bb:bb:58:3f:f3:fe:d9:3d:97:3d:
c4:31:bd:e0:ea:dc:fc:82:e7:a8:42:1f:f7:1a:1e:f7:98:ae:
35:38:40:a7:b3:7c:0e:e8:49:0e:fc:e1:a4:13:67:1a:d2:a7:
29:aa:1b:15:6f:85:ad:10:8b:6b:cd:10:1a:39:da:a5:44:8f:
da:7a:f4:08:f6:91:69:95:aa:15:2d:4d:a2:c5:ce:bb:37:3a:
ed:63:63:4a:bf:46:72:c2:94:ef:85:9e:2a:6e:9c:d1:c7:15:
1c:81:44:8d:9e:a4:94:77:69:1e:72:3f:74:7a:8a:34:04:2e:
1c:ea:99:14:a0:41:db:1b:28:eb:92:40:0c:fe:c6:87:37:5f:
3e:4b:eb:6c:70:55:20:7c:43:bd:9a:5f:ff:28:b4:af:c4:f5:
6c:45:a2:c6:70:83:5c:c3:07:86:cd:3b:17:79:73:e1:30:a4:
23:5e:08:13:bf:da:4f:c2:b8:fd:07:b3:a6:c0:f4:e7:14:3c:
89:0d:83:3e:7a:a8:77:54:26:4c:70:63:5c:2e:bc:9a:07:d1:
6f:33:0a:17:41:08:3a:99:f4:37:61:d2:b2:57:b6:52:2f:18:
9b:fc:6e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:01:02 2025 by rpki-client