Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
File: uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft (raw, json)
Hash identifier: RBiGCee/mDjuM5yrjvuxwN4O1OSRkBNnSoamVi1siXM=
Subject key identifier: E5:A1:8D:6D:61:51:CF:59:72:DC:4A:9B:D7:B6:A9:93:66:8C:4E:E7
Authority key identifier: B9:14:53:15:B4:4C:B6:5D:2A:79:1A:0A:E5:82:36:64:D0:C4:44:5E
Certificate issuer: /CN=b9145315b44cb65d2a791a0ae5823664d0c4445e
Certificate serial: 0197B6A240842FCB90A968EF779F91551098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
Manifest number: 15AF
Signing time: Sat 28 Jun 2025 13:02:55 +0000
Manifest this update: Sat 28 Jun 2025 13:02:55 +0000
Manifest next update: Sun 29 Jun 2025 13:02:55 +0000
Files and hashes: 1: uRRTFbRMtl0qeRoK5YI2ZNDERF4.crl (hash: DZnB91Be9ts6Hwbad9LBydRC4HbmthZaOqr24lMm+wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:40:84:2f:cb:90:a9:68:ef:77:9f:91:55:10:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9145315b44cb65d2a791a0ae5823664d0c4445e
Validity
Not Before: Jun 28 13:02:55 2025 GMT
Not After : Jun 29 13:02:55 2025 GMT
Subject: CN=e5a18d6d6151cf5972dc4a9bd7b6a993668c4ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2e:cf:97:70:e0:8b:1e:bc:e5:49:ee:d9:f6:
72:83:e4:af:41:98:ab:ee:30:0c:a9:87:60:e3:10:
97:54:98:65:6e:cb:16:7a:27:34:5a:15:bc:0a:85:
30:69:a5:70:d6:28:af:6d:ed:af:77:59:bd:6c:9c:
83:f8:12:51:5f:3d:37:38:fc:2d:fa:1f:60:85:fc:
97:0e:5f:68:49:e8:49:16:34:83:92:e0:94:9b:5f:
91:44:c6:e8:90:aa:49:d2:f3:08:5b:68:18:6d:0d:
75:ae:57:64:9b:4e:cf:08:71:f8:57:68:a2:90:40:
df:3e:08:35:45:4d:24:cf:e8:3d:1c:1c:3e:ee:50:
f5:fe:a2:23:09:f4:d5:1d:39:fb:d7:44:12:a5:0c:
ea:c9:f6:1c:57:ff:4a:45:1d:a8:6a:a1:74:5e:38:
17:4b:5a:04:ee:dd:75:43:1a:b3:bc:01:7a:11:4f:
6a:2b:f9:cf:7e:7d:36:e0:a4:e2:b5:37:55:7d:5a:
80:3d:1c:5d:2b:01:40:21:f3:e3:03:8b:1c:ab:fc:
78:ef:f1:2f:4f:6d:7b:90:a5:5c:47:86:8d:2e:e8:
56:c8:91:30:98:56:31:f5:e8:ba:16:6c:f0:5f:80:
0b:f6:06:75:0a:10:51:f8:74:5f:ed:71:e2:dc:c7:
b9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A1:8D:6D:61:51:CF:59:72:DC:4A:9B:D7:B6:A9:93:66:8C:4E:E7
X509v3 Authority Key Identifier:
keyid:B9:14:53:15:B4:4C:B6:5D:2A:79:1A:0A:E5:82:36:64:D0:C4:44:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b1:b7:13:c0:5a:65:83:ba:e0:cc:64:df:fc:a5:d7:be:c7:
e3:ca:f6:cb:5f:2c:fa:0a:b9:b0:1a:b0:e4:2f:ee:e2:a5:c8:
3a:c5:1e:eb:b2:8a:fe:a7:4e:e5:d4:79:5b:99:08:47:5c:b0:
2a:34:6a:7a:ae:83:3b:01:0f:0f:22:4b:d8:b8:fa:32:5d:b7:
7f:6b:84:ad:85:0b:51:04:c2:bd:f6:f4:ad:6b:11:5d:9e:4c:
0b:8a:e0:48:21:d8:d3:22:71:6c:00:93:fd:14:f4:bc:15:fe:
38:87:7a:3a:62:97:33:a0:67:06:8a:2b:b4:ff:67:b9:3a:6d:
76:e6:e4:07:4f:7f:58:1a:d5:3b:cd:bf:59:e8:0e:e8:13:be:
fc:55:ec:f3:96:7b:52:1e:79:57:86:5c:52:ff:fb:6b:b8:86:
17:1e:27:ba:47:0e:2f:25:a8:9d:fb:05:41:f8:db:e1:7d:b4:
87:d0:77:a2:f1:78:1b:5b:9a:63:c0:11:1a:a2:81:67:12:09:
33:c7:64:1b:03:54:ab:68:f5:04:f4:91:23:df:2f:75:35:ba:
50:aa:6b:cd:79:c6:9b:4f:fe:80:ad:99:e8:55:4c:4b:bd:85:
dc:ef:48:2c:1d:2e:26:e1:0a:a0:1f:c7:32:e7:0a:24:22:4c:
26:2e:86:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:21:19 2025 by rpki-client