Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
File: uo1nmL3QsriAXUOzRV92c5uUbx0.mft (raw, json)
Hash identifier: 8V9W9e9bAePXXbHSDmU7GqqqIRdoJIKLjjBfPLRg6cw=
Subject key identifier: BB:16:0C:C5:3F:48:7E:1E:7F:53:2A:00:72:D2:84:FF:5F:56:8E:8D
Authority key identifier: BA:8D:67:98:BD:D0:B2:B8:80:5D:43:B3:45:5F:76:73:9B:94:6F:1D
Certificate issuer: /CN=ba8d6798bdd0b2b8805d43b3455f76739b946f1d
Certificate serial: 0197711A40C17CE4DF77AB1B486EA45718D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
Manifest number: 1520
Signing time: Sun 15 Jun 2025 01:00:35 +0000
Manifest this update: Sun 15 Jun 2025 01:00:35 +0000
Manifest next update: Mon 16 Jun 2025 01:00:35 +0000
Files and hashes: 1: uo1nmL3QsriAXUOzRV92c5uUbx0.crl (hash: lLoWWzvdM3i2NUcCeOh5w/hovoXC0Ee+kfSwrMyI3aA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:40:c1:7c:e4:df:77:ab:1b:48:6e:a4:57:18:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8d6798bdd0b2b8805d43b3455f76739b946f1d
Validity
Not Before: Jun 15 01:00:35 2025 GMT
Not After : Jun 16 01:00:35 2025 GMT
Subject: CN=bb160cc53f487e1e7f532a0072d284ff5f568e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:51:f8:59:3f:02:91:0c:98:11:67:0e:2f:f6:
14:91:5f:ed:49:e5:61:20:59:d1:ba:91:3b:d1:9c:
d9:80:f4:f9:0d:c2:f3:17:bb:78:49:d2:51:b3:80:
b1:09:ad:8c:c7:e2:15:d7:23:d4:12:80:21:69:64:
a0:99:eb:1f:f3:1b:3e:43:b7:1a:bc:f8:45:43:7b:
ec:2d:fa:20:86:b9:ad:a9:bd:4c:42:ba:32:c5:35:
41:e5:aa:b4:3f:c3:09:9a:94:d4:b0:7b:7e:35:4f:
4d:d7:29:b2:87:8f:c8:09:8c:6b:d9:8d:54:4d:58:
d9:72:96:c9:97:f8:66:2e:9f:8e:67:35:2c:f1:b6:
3d:ea:c9:a4:64:10:7b:6b:a5:b1:19:08:47:c3:4f:
7b:78:0e:2e:c8:2c:67:39:80:3f:59:62:97:ea:25:
8c:44:0e:c4:1d:d6:0f:0b:77:ed:76:97:cf:b2:ae:
62:d5:ba:b7:ae:a0:62:cb:54:f4:09:ee:72:d3:f3:
ad:cc:e0:24:d4:bb:c1:6b:01:05:ef:d8:1c:90:4d:
ef:02:94:db:2b:4a:d7:b5:08:e7:ca:fb:4a:64:f8:
2f:54:31:c8:29:e5:98:86:09:1f:9c:4e:a0:6b:8f:
18:05:04:72:92:12:12:8b:65:ae:73:08:53:d8:eb:
f6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:16:0C:C5:3F:48:7E:1E:7F:53:2A:00:72:D2:84:FF:5F:56:8E:8D
X509v3 Authority Key Identifier:
keyid:BA:8D:67:98:BD:D0:B2:B8:80:5D:43:B3:45:5F:76:73:9B:94:6F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ce:4d:41:61:d6:e5:19:76:66:91:1d:48:04:75:e6:0e:a1:
eb:91:51:a3:1f:c5:67:42:e4:5f:20:46:1f:fd:66:c0:dc:c5:
46:5e:fa:be:16:25:6f:67:5f:74:4a:6e:0a:12:fc:84:07:9f:
c6:d2:f7:65:72:71:56:7c:ff:e0:fe:53:1e:78:20:1e:d5:61:
8e:e8:ab:70:28:50:04:d8:c8:eb:76:8b:a9:9a:fd:d1:d4:e0:
1c:f9:82:78:92:ab:18:6a:85:b3:94:7b:5d:8e:dd:ca:56:23:
9d:50:f1:c2:42:e8:de:b2:b3:4f:f7:6c:5d:75:9e:10:4d:e3:
4e:63:a1:27:d5:3c:2f:78:49:3b:b7:50:e6:87:8f:a5:bb:58:
a8:c2:be:46:46:5a:1a:00:d7:0f:09:57:d6:5e:7f:dd:c2:58:
0a:53:99:dd:5c:87:64:38:4c:5f:af:59:e6:f7:24:03:6c:1c:
2f:c7:9a:8f:d7:a9:e9:c2:dc:1b:49:85:40:f8:9d:10:40:2b:
10:5f:3d:ea:14:48:9a:90:c4:59:00:98:b9:49:23:41:c0:2f:
9b:c9:50:59:c1:9d:d3:36:ee:1b:a4:80:4e:26:1b:d5:94:bd:
18:a7:f8:fc:79:de:15:8b:df:f3:4d:4f:d7:46:6d:16:fc:29:
a8:09:c1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:34:35 2025 by rpki-client