
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft
File: ur8nIaXXgzW3uX22OuxDXJyji8c.mft (raw, json)
Hash identifier: UpV0hrgHjHVuBayFLrPkiG7zN3iHB1dTBFN9P1Gxj0Y=
Subject key identifier: EE:AB:7D:AD:C7:6E:50:FC:A2:D2:AC:FE:7F:49:E6:D6:90:B1:33:8A
Authority key identifier: BA:BF:27:21:A5:D7:83:35:B7:B9:7D:B6:3A:EC:43:5C:9C:A3:8B:C7
Certificate issuer: /CN=babf2721a5d78335b7b97db63aec435c9ca38bc7
Certificate serial: 0197C237C6620527C4E437086080FEB7F86C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ur8nIaXXgzW3uX22OuxDXJyji8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft
Manifest number: 07B5
Signing time: Mon 30 Jun 2025 19:02:04 +0000
Manifest this update: Mon 30 Jun 2025 19:02:04 +0000
Manifest next update: Tue 01 Jul 2025 19:02:04 +0000
Files and hashes: 1: ur8nIaXXgzW3uX22OuxDXJyji8c.crl (hash: F1HmbfHzT5tc80Sax6pBdkHTt+wg3rFMi5jKQHSJ/mU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ur8nIaXXgzW3uX22OuxDXJyji8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:37:c6:62:05:27:c4:e4:37:08:60:80:fe:b7:f8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=babf2721a5d78335b7b97db63aec435c9ca38bc7
Validity
Not Before: Jun 30 19:02:04 2025 GMT
Not After : Jul 1 19:02:04 2025 GMT
Subject: CN=eeab7dadc76e50fca2d2acfe7f49e6d690b1338a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:93:ca:6d:f4:fa:1f:52:47:14:83:a8:4b:28:
2b:67:b7:87:a8:e9:e5:a7:68:4f:5b:72:24:c0:7d:
77:07:c4:17:e8:50:fe:ec:72:ae:5b:b6:89:fe:98:
c7:ca:f5:89:a4:9c:99:2d:fb:21:83:b9:fc:ba:a5:
d3:6e:a7:0a:af:95:2f:01:3d:45:64:0c:7a:dd:8f:
a8:61:e2:52:8c:7c:f2:b7:8d:51:8a:d5:4b:65:a7:
22:f6:ac:ac:28:1c:b2:49:66:f7:1b:b0:de:90:ed:
34:a3:f0:da:53:7e:e4:94:8f:23:e6:4e:ec:60:bf:
85:a8:92:fd:eb:68:7d:5e:6b:42:98:33:ce:03:d8:
a6:76:59:8b:f3:8c:76:8c:4e:d7:a1:b9:7c:fb:f2:
6d:1d:7d:bf:88:53:c4:e5:b7:b8:9e:be:cc:25:46:
5f:fc:db:7c:5e:59:8b:b1:9f:be:99:58:58:3c:57:
1a:14:24:dc:3b:59:7f:64:95:54:17:80:d1:19:20:
b7:cf:ba:81:45:fc:a4:fe:b2:06:15:1a:14:11:ad:
de:6b:05:72:13:94:9c:6a:2e:c9:89:e1:f6:86:ff:
e9:d2:6b:da:f8:1d:6e:61:49:3b:58:1e:a3:c7:a7:
95:75:71:ff:dd:b3:5c:9e:cd:cf:1f:6f:f2:a2:bf:
d0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AB:7D:AD:C7:6E:50:FC:A2:D2:AC:FE:7F:49:E6:D6:90:B1:33:8A
X509v3 Authority Key Identifier:
keyid:BA:BF:27:21:A5:D7:83:35:B7:B9:7D:B6:3A:EC:43:5C:9C:A3:8B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ur8nIaXXgzW3uX22OuxDXJyji8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d7:9e:91:1e:1d:3f:2e:ec:74:25:63:93:6b:a9:85:f4:05:
1f:65:df:4a:3a:27:7d:a6:ef:8c:3f:aa:42:13:f4:7f:96:16:
91:f4:4b:09:b7:81:d4:5d:c1:cc:f0:08:59:bc:02:39:ff:b4:
37:b6:d6:5c:7a:25:23:86:89:27:5f:1c:b4:f7:45:29:ce:62:
fa:d0:d5:3a:ec:d0:d6:47:2c:f0:92:e1:24:f9:f5:70:05:5f:
33:18:a8:2d:72:b0:ee:ab:78:a5:ab:a8:0f:ad:35:91:2a:f8:
4f:5e:22:ea:39:1c:b2:04:a0:ae:d7:51:05:a7:d0:15:fb:c4:
89:68:f1:75:40:4e:e1:0a:ef:a2:e0:a2:93:48:ba:aa:13:9e:
6b:08:7c:df:7e:47:9d:0c:ed:c6:06:a5:fc:42:b3:52:f3:d8:
3e:ed:3f:05:4e:bc:8d:7d:ae:d9:ac:8e:0b:42:f6:0c:85:a0:
9c:b4:08:45:6d:72:90:65:8b:e9:83:9d:3c:c6:78:c6:df:41:
a1:8a:77:9b:ad:0d:88:05:8d:07:b9:3a:5a:0f:cb:4e:9d:c0:
c5:c6:29:65:bb:6b:3c:2b:98:b9:8c:70:2d:f4:84:a9:ec:e5:
ae:12:4f:86:46:f1:c8:8a:f4:d8:3a:4c:48:35:6c:18:ac:ce:
b7:c5:97:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:57:13 2025 by rpki-client