Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft
File: UB7eLUfXfhQKl78pidqCpYdzyMA.mft (raw, json)
Hash identifier: iTOZZWg8kCKgW5W82IiofYJRfyUPZUMwtdp6DLyULm0=
Subject key identifier: 00:AC:7D:9D:BA:8E:FD:E7:BD:F8:4A:F5:A1:6D:2D:43:66:1B:60:FE
Authority key identifier: 50:1E:DE:2D:47:D7:7E:14:0A:97:BF:29:89:DA:82:A5:87:73:C8:C0
Certificate issuer: /CN=501ede2d47d77e140a97bf2989da82a58773c8c0
Certificate serial: 0197B88F231FBC70FF17D36FFAC902E6FA85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UB7eLUfXfhQKl78pidqCpYdzyMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft
Manifest number: 0C9B
Signing time: Sat 28 Jun 2025 22:01:17 +0000
Manifest this update: Sat 28 Jun 2025 22:01:17 +0000
Manifest next update: Sun 29 Jun 2025 22:01:17 +0000
Files and hashes: 1: UB7eLUfXfhQKl78pidqCpYdzyMA.crl (hash: 25AXs5gEygS3Pbnn9VNzK7Xo0EMx5Rmq4leH4XJOLYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UB7eLUfXfhQKl78pidqCpYdzyMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:23:1f:bc:70:ff:17:d3:6f:fa:c9:02:e6:fa:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501ede2d47d77e140a97bf2989da82a58773c8c0
Validity
Not Before: Jun 28 22:01:17 2025 GMT
Not After : Jun 29 22:01:17 2025 GMT
Subject: CN=00ac7d9dba8efde7bdf84af5a16d2d43661b60fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:41:a6:58:27:11:72:1d:3f:65:1d:f7:47:08:
fa:3c:26:e7:bb:fc:18:b3:d7:77:4f:1c:cf:91:22:
6e:46:6c:ce:76:08:f5:cc:88:a9:01:f5:06:65:8e:
b5:58:fb:bd:47:8c:b2:cb:a7:45:42:f8:56:ae:c7:
32:e8:f6:c2:8a:31:76:e5:ca:8a:74:0d:7a:ba:73:
e7:3f:59:e1:66:30:45:e6:27:87:05:0e:fc:c9:cf:
2e:b6:86:1f:02:33:02:bd:bb:29:f3:06:ba:20:92:
f1:42:51:9e:1c:b7:24:c1:4b:25:ec:47:d4:d0:1f:
61:7f:67:b1:4e:a1:73:b4:06:3d:88:46:11:90:a8:
08:72:51:43:f7:94:be:2b:34:8d:69:f5:94:b9:bc:
56:ee:ea:b0:23:d8:39:b0:69:e5:c8:d7:d9:5a:34:
56:2b:aa:f5:2d:0d:09:7c:80:22:60:9b:ed:77:c0:
a7:b6:73:45:dc:28:49:c0:c6:00:26:4b:40:87:4c:
5f:5c:62:a8:ce:cd:a0:a1:38:9d:a2:78:87:ea:31:
e1:b2:8f:e6:15:ac:4e:07:90:2b:a6:a1:e7:8b:99:
ed:e2:57:e9:01:90:02:ad:ac:c5:10:d9:83:25:39:
ab:31:29:56:6a:aa:0c:c0:44:e4:37:7f:0c:5c:55:
bc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AC:7D:9D:BA:8E:FD:E7:BD:F8:4A:F5:A1:6D:2D:43:66:1B:60:FE
X509v3 Authority Key Identifier:
keyid:50:1E:DE:2D:47:D7:7E:14:0A:97:BF:29:89:DA:82:A5:87:73:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UB7eLUfXfhQKl78pidqCpYdzyMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:06:95:84:7e:87:ed:33:56:ae:e6:45:44:c8:53:6b:10:aa:
10:6e:21:14:67:fa:42:d4:3d:b0:3e:bf:f2:2f:1e:82:5a:6c:
57:69:31:66:0f:76:10:68:47:26:cf:5b:a3:f8:43:0d:6b:3f:
00:ec:41:cc:e3:5e:10:78:67:13:05:2e:53:98:2b:a3:b4:26:
91:a4:99:2a:f0:8a:02:da:99:e0:c6:b4:61:32:04:38:16:74:
8c:f7:6f:65:df:9b:3b:18:da:46:42:8f:1e:37:13:65:7a:dd:
11:cb:84:02:a1:71:00:4e:0e:86:83:83:01:5e:85:4b:44:13:
94:53:3f:57:be:65:08:2c:10:11:09:e5:b1:b6:bd:47:85:ef:
98:b7:72:cd:69:e9:90:66:40:d8:f3:a4:86:56:db:c6:de:7a:
2f:c3:cb:66:7d:50:0e:dd:8b:22:86:39:d9:2f:39:61:40:77:
f6:55:f2:55:35:19:82:d7:bd:3b:2a:c6:59:2d:0e:7f:40:10:
4a:13:3e:ae:91:69:68:90:9f:ca:e2:be:25:00:01:4b:19:76:
8f:fb:10:7d:e6:d3:6e:ee:2c:6f:3e:d1:4f:3a:15:0a:06:f8:
67:81:c2:2d:04:b5:19:73:52:d2:be:e6:90:92:a5:60:0b:f6:
ad:07:8e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:41 2025 by rpki-client