Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft
File: UnB4bxfEG9AWJvctsjnyCLUYm7A.mft (raw, json)
Hash identifier: b5E0qk4BKlkLYXpwVd5I5zzswBTA+V47fbpAflnyFtw=
Subject key identifier: 7F:6F:CC:BF:A6:FB:F5:A0:92:1D:76:43:19:B9:BD:03:D8:30:6B:24
Authority key identifier: 52:70:78:6F:17:C4:1B:D0:16:26:F7:2D:B2:39:F2:08:B5:18:9B:B0
Certificate issuer: /CN=5270786f17c41bd01626f72db239f208b5189bb0
Certificate serial: 0197B5C4DD995A7B2C7E5F57AEFC44F8F6A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnB4bxfEG9AWJvctsjnyCLUYm7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 09:01:07 +0000
Manifest this update: Sat 28 Jun 2025 09:01:07 +0000
Manifest next update: Sun 29 Jun 2025 09:01:07 +0000
Files and hashes: 1: DmHJvnXYNCZG6CwLW6LsQtmujI4.roa (hash: x67qTlyXrzA3beyYfkqEGco6s6alggLnNjlSZnKsSr0=)
2: UnB4bxfEG9AWJvctsjnyCLUYm7A.crl (hash: h02qzk+mDuinM6UCETQwcad0JK0CH8+fE9/SvjRoxc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/UnB4bxfEG9AWJvctsjnyCLUYm7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:dd:99:5a:7b:2c:7e:5f:57:ae:fc:44:f8:f6:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5270786f17c41bd01626f72db239f208b5189bb0
Validity
Not Before: Jun 28 09:01:07 2025 GMT
Not After : Jun 29 09:01:07 2025 GMT
Subject: CN=7f6fccbfa6fbf5a0921d764319b9bd03d8306b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:99:73:70:22:cf:28:02:91:08:87:5f:2f:9f:
56:b5:42:97:13:f7:ae:01:f6:af:df:05:e8:65:9f:
44:b0:c2:cb:98:7e:00:6d:13:7e:81:18:e3:17:53:
c2:bf:d9:d6:d4:6e:22:56:ac:46:fe:00:88:e2:fa:
b2:d9:4b:a7:ca:1b:59:59:f2:26:07:52:93:c9:bd:
6e:1f:f4:3a:6d:71:fc:84:ff:89:ac:2f:ab:49:f5:
24:0a:a6:a6:8d:ba:74:7d:21:66:50:83:00:c2:a5:
fe:bb:5e:26:8c:37:2f:36:5f:cf:0d:76:28:f3:db:
94:a7:44:89:21:c9:58:06:97:33:57:16:93:70:56:
ad:6c:63:eb:9f:e1:9e:64:33:aa:dd:16:8e:15:9b:
d3:e7:9a:3c:db:06:de:1f:e7:53:ef:1d:5b:03:61:
e6:b6:26:51:b0:82:3d:5d:3a:17:1d:ed:1d:20:24:
a8:92:58:4c:c0:54:e5:98:e8:2b:c9:28:be:16:98:
9d:7d:af:e2:d6:8f:7a:ad:96:77:f9:bf:1b:85:43:
24:dd:5d:77:97:aa:25:54:ba:96:da:25:db:c5:c6:
73:23:a2:ef:96:09:14:f6:f9:8b:69:d5:22:6f:b0:
36:f6:d4:ee:e6:f9:09:99:da:0a:57:27:10:03:f1:
b3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6F:CC:BF:A6:FB:F5:A0:92:1D:76:43:19:B9:BD:03:D8:30:6B:24
X509v3 Authority Key Identifier:
keyid:52:70:78:6F:17:C4:1B:D0:16:26:F7:2D:B2:39:F2:08:B5:18:9B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnB4bxfEG9AWJvctsjnyCLUYm7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:1b:39:fd:15:06:60:38:a4:97:94:be:62:28:d7:98:bd:73:
4b:eb:fa:7d:7e:0b:c8:3e:21:2b:8d:c9:f0:3b:f8:7f:b0:89:
00:cb:86:97:29:ce:8e:21:aa:89:90:8d:56:cb:7b:20:84:fc:
25:42:31:6d:fa:d3:d8:17:32:1e:9e:54:35:3f:12:ee:59:29:
3a:fc:bb:06:44:44:31:14:9e:fd:fd:b5:27:c3:53:f3:8d:5c:
5c:5d:be:b8:fb:a1:71:75:9b:f2:46:14:a5:64:8f:73:1b:ff:
16:90:f7:b9:9b:c4:3e:36:88:97:d1:93:d1:ef:a9:c0:c7:e5:
22:1e:9c:aa:4a:ec:6b:5c:3c:8b:12:58:a6:47:bf:d4:4c:73:
59:95:e5:ef:4c:03:48:3a:46:28:38:f4:d3:eb:ae:69:75:fa:
cc:f1:1c:e0:42:26:78:95:20:1e:50:32:96:51:b7:52:3b:34:
f0:34:39:63:05:99:e2:56:f4:da:9a:0c:77:d2:d3:0e:70:d9:
8f:5e:83:9d:4b:ac:c1:70:9f:64:8e:4f:70:c8:7f:20:45:45:
43:70:e3:aa:78:1e:0b:1a:29:1e:cf:41:64:59:ec:b1:fa:aa:
6b:4b:7d:d5:5d:de:be:b6:b9:37:7a:8a:b7:5f:4e:f3:bc:53:
52:5d:74:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:45:19 2025 by rpki-client