Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
File: unuTQCuSGNf2ErT5YmJwpxrmvi0.mft (raw, json)
Hash identifier: 7VwyYUFBUpJ3p56+amorgUm+n/xn4BFLmtNR+2nhJNo=
Subject key identifier: F4:7D:17:71:DE:0B:6C:E0:BE:37:5E:F1:53:DE:16:CE:0E:B6:86:8C
Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
Certificate issuer: /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Certificate serial: 01977308D8BD9A4A3D321829CA3214D2936E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
Manifest number: 159B
Signing time: Sun 15 Jun 2025 10:00:48 +0000
Manifest this update: Sun 15 Jun 2025 10:00:48 +0000
Manifest next update: Mon 16 Jun 2025 10:00:48 +0000
Files and hashes: 1: unuTQCuSGNf2ErT5YmJwpxrmvi0.crl (hash: NRvS3+yHUL3u6FqMxSMDj7tkCJBjqf7C5KoNdDQdVss=)
2: vU-75r0gInbOCnxxQxxUry9G0nQ.roa (hash: AiFvk2ANcPHqNEPfHYWxiUIKCo2C9zQXm47cQDdAzO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:08:d8:bd:9a:4a:3d:32:18:29:ca:32:14:d2:93:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Validity
Not Before: Jun 15 10:00:48 2025 GMT
Not After : Jun 16 10:00:48 2025 GMT
Subject: CN=f47d1771de0b6ce0be375ef153de16ce0eb6868c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4f:2a:be:0b:11:fe:0b:d8:09:27:2d:df:7b:
13:98:72:27:cc:76:14:0d:89:68:38:7a:3b:1a:5c:
ab:3a:a8:9f:d1:59:45:53:d4:a6:4a:b3:90:98:af:
84:c3:3c:b8:55:c6:aa:56:89:ac:af:9e:37:07:c1:
62:c2:8d:cc:e0:c8:93:9e:63:af:e7:75:7b:cf:88:
0a:fa:4d:b0:c5:11:91:ca:1d:24:f6:e6:f8:c5:76:
88:79:6e:c6:c9:fe:9e:cf:88:7e:98:4b:5f:4b:91:
92:ea:9e:6b:44:a8:b9:26:da:23:bc:bf:05:07:f7:
41:1e:cf:6b:5e:fc:f6:f9:71:b5:71:1d:3f:b8:84:
47:b8:a6:85:e7:af:57:a4:a6:72:42:a7:59:88:de:
b0:80:89:bd:20:d4:14:be:15:e1:74:58:59:3c:30:
03:b8:f3:57:4d:c7:ab:8e:db:5a:c5:2b:84:7e:99:
f3:50:df:30:9d:4a:14:23:db:50:40:37:32:94:8b:
12:a7:e5:86:80:13:23:30:58:b0:d1:23:fd:5a:19:
1b:5a:52:0b:23:6e:5f:84:ca:ea:33:47:1a:f5:5a:
5d:e8:36:72:97:1d:73:f7:da:29:44:45:6e:4d:fa:
3e:0b:f7:ad:f5:a4:f9:92:8d:f6:74:25:6b:1e:64:
fb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7D:17:71:DE:0B:6C:E0:BE:37:5E:F1:53:DE:16:CE:0E:B6:86:8C
X509v3 Authority Key Identifier:
keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e2:4d:d3:5d:eb:c3:8e:08:c3:6e:bc:6d:31:39:74:4c:a9:
b9:3b:7b:d0:a2:79:b6:3d:69:09:9f:8a:6b:8d:d6:22:26:88:
a7:e7:2f:62:40:fa:a9:64:5c:4e:de:4a:7b:46:2a:68:5e:33:
aa:bc:b7:8a:bb:24:b6:45:f7:72:1d:18:0b:34:7c:5b:26:f8:
d4:84:95:3f:e9:5d:7d:ee:05:2c:57:8d:c2:87:98:65:1d:1e:
d6:dc:fc:b3:b5:da:81:30:b2:0a:e6:a3:7b:1c:a8:3b:6c:32:
a4:a0:a7:d5:e2:3c:3b:1b:c3:2a:ce:84:21:d8:2d:81:e4:3a:
23:9f:de:00:83:dc:c5:da:bd:47:e1:aa:db:46:ad:ad:20:78:
c4:d6:09:c9:5c:c2:de:79:a2:74:7f:fe:35:81:c1:c2:6f:75:
1b:da:77:dc:35:0d:31:26:63:64:16:0c:8f:92:26:94:e8:57:
84:7f:16:c5:c1:b8:4d:72:98:4f:50:38:6a:39:9d:1d:12:51:
37:96:5d:49:8c:41:ab:54:c0:ce:99:e9:4c:88:c7:d6:b6:f0:
7c:6a:f7:51:17:3a:55:19:a2:e4:69:3c:93:79:b1:18:fb:2a:
5a:97:6d:5d:7e:58:55:91:9c:21:da:43:a6:54:a8:60:73:21:
d4:e0:00:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:54:36 2025 by rpki-client