Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
File: UOaW5uJbSSu34HyzKbtDVLERpoE.mft (raw, json)
Hash identifier: mOzFdttjjKVYzfCb57UZE+QJ5QLqdcZGfRvU97Y07UY=
Subject key identifier: EC:05:83:98:83:3D:C1:A4:B3:94:6F:7D:B0:D2:A6:09:B8:F7:C9:EA
Authority key identifier: 50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
Certificate issuer: /CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Certificate serial: 019769CE549C0F46767F9965B6259B54579E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
Manifest number: 086D
Signing time: Fri 13 Jun 2025 15:00:19 +0000
Manifest this update: Fri 13 Jun 2025 15:00:19 +0000
Manifest next update: Sat 14 Jun 2025 15:00:19 +0000
Files and hashes: 1: UOaW5uJbSSu34HyzKbtDVLERpoE.crl (hash: /We6XZgqovZ5OcGMVyLgXgWpxzZNb0432POEBI1qDPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:54:9c:0f:46:76:7f:99:65:b6:25:9b:54:57:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Validity
Not Before: Jun 13 15:00:19 2025 GMT
Not After : Jun 14 15:00:19 2025 GMT
Subject: CN=ec058398833dc1a4b3946f7db0d2a609b8f7c9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fe:5b:92:9b:37:7a:dc:f0:86:6a:4e:f5:39:
20:0e:cf:c7:de:ec:5a:93:e6:73:dd:60:b6:14:0e:
2b:06:e5:de:dc:5f:7d:f5:32:cf:e5:70:b9:05:92:
d4:60:43:75:6a:0a:eb:46:d0:02:77:db:0d:9f:83:
81:5d:c6:62:f5:6b:f3:58:44:30:16:2a:7c:01:51:
bc:df:4c:24:8a:99:0b:40:37:2b:b5:f8:01:45:fe:
37:5f:3d:89:71:41:9b:45:02:6e:36:bc:6b:9c:74:
06:51:ea:90:a5:3d:c4:78:44:8b:22:34:64:c1:28:
99:f6:a7:9a:39:03:f5:a2:80:38:14:13:8b:c2:a7:
86:ba:25:04:2c:70:e9:77:dc:93:78:00:37:0b:8e:
78:cc:04:3f:83:c4:14:2d:d2:cb:fb:cd:79:8d:fb:
66:5f:a1:12:c6:40:fa:b8:6c:66:78:96:af:68:ba:
cc:0c:96:e0:fa:a6:3c:1c:4f:ee:b8:4a:af:23:1e:
de:6e:5c:f6:78:ff:4d:7d:e4:90:7b:86:9e:e6:2c:
1b:1e:2d:53:32:2b:bf:75:b6:52:c2:43:6e:b0:e6:
88:63:7c:52:2f:a6:4a:a2:e7:e1:74:1b:ba:70:e6:
94:d2:a0:c0:55:4f:f2:51:83:8b:db:e5:f4:74:09:
d4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:05:83:98:83:3D:C1:A4:B3:94:6F:7D:B0:D2:A6:09:B8:F7:C9:EA
X509v3 Authority Key Identifier:
keyid:50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7e:4f:fd:ff:b0:72:57:9b:b5:46:c0:4b:fc:22:cc:6d:a3:
04:30:f2:18:b6:14:82:fc:a9:4c:78:91:8d:1e:95:5a:7f:49:
70:5a:b7:f2:b5:a1:e1:b1:6a:39:59:c8:c5:59:22:d3:bb:59:
a9:00:3b:a3:79:d4:e9:f7:d5:70:e1:2a:63:c6:92:e1:bb:59:
43:a6:a2:95:a7:74:8d:fa:50:f8:44:de:00:3b:c6:bd:1d:c2:
e1:09:18:73:26:af:d1:f0:9e:66:f3:3d:52:a4:b5:7a:29:1f:
09:e4:23:86:05:e1:60:c3:8d:37:e1:a7:8f:d1:ae:ea:46:4a:
54:03:71:44:32:fe:cc:76:f5:93:87:d7:95:a6:15:bc:a5:2e:
0a:80:6a:e2:e9:eb:9e:5b:85:23:7f:46:5a:eb:ba:59:a3:9d:
28:bc:09:b0:cc:8c:23:fa:99:fd:27:40:13:d6:3e:9b:d6:3d:
1a:46:50:3c:da:66:c8:d3:df:c6:54:48:ad:65:7f:78:3a:57:
a9:89:20:da:9b:b9:0f:9e:d6:0c:16:02:15:25:f9:c6:27:aa:
46:f9:0f:4a:db:c9:3c:79:89:57:07:ad:af:00:6d:d7:33:17:
bc:2c:e7:b7:09:be:f1:e6:b5:63:e2:98:15:1b:59:ad:1f:6b:
55:c8:e9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:00 2025 by rpki-client