Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
File: kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft (raw, json)
Hash identifier: IDFz/rxei6UAtQYLTMN31xrljBlh7R3/gi7z3RuZ9IQ=
Subject key identifier: 67:A7:34:C2:68:A4:9C:70:F5:3D:AE:93:28:13:99:B7:00:C6:D0:FF
Authority key identifier: 91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63
Certificate issuer: /CN=9143c5f48c77a79c985f5e5362e082ad54e23063
Certificate serial: 0197B6A06A2FAF117DE191F751F7F0F38461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
Manifest number: 0C9A
Signing time: Sat 28 Jun 2025 13:00:55 +0000
Manifest this update: Sat 28 Jun 2025 13:00:55 +0000
Manifest next update: Sun 29 Jun 2025 13:00:55 +0000
Files and hashes: 1: kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl (hash: lVHNDP780zx8ftqoKeuNq+amltzG3kBvNFDC0TYYVrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:6a:2f:af:11:7d:e1:91:f7:51:f7:f0:f3:84:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9143c5f48c77a79c985f5e5362e082ad54e23063
Validity
Not Before: Jun 28 13:00:55 2025 GMT
Not After : Jun 29 13:00:55 2025 GMT
Subject: CN=67a734c268a49c70f53dae93281399b700c6d0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1a:07:f9:bb:97:ef:4f:07:25:66:5e:51:b0:
21:3f:20:90:3e:9a:ac:fc:ce:cf:47:5d:4a:cb:42:
b8:e2:0b:c0:a2:db:ca:bf:0a:1a:30:c0:f5:c7:c8:
6b:5b:f7:25:83:c3:97:f4:7e:9b:8d:08:61:16:de:
fd:64:67:fb:d6:9b:1e:09:05:6b:4d:a1:3a:3a:9f:
dd:66:02:8a:42:8e:c7:26:9a:2d:21:e7:ee:d1:2d:
98:d1:56:a2:85:aa:ed:f8:60:45:96:55:90:2e:40:
a8:64:4b:01:ee:2c:aa:bc:9f:5e:bb:ab:2b:63:dc:
4e:5a:cd:fe:b8:fb:29:04:9d:35:75:6d:e7:f3:97:
74:1d:17:aa:c1:44:64:60:49:f0:18:01:db:00:e2:
d5:a8:30:a6:5a:f0:4c:3e:db:76:9c:99:c1:b5:f7:
b8:fc:9f:9a:6e:43:52:44:90:e0:75:f6:8e:ff:26:
74:2d:ea:93:77:0a:69:bb:46:9e:ae:f8:fd:6f:66:
fb:2d:46:cd:4b:a9:9e:59:21:e5:6f:56:89:96:0a:
2c:1c:f4:dc:0d:4c:3e:dd:88:2e:9e:99:e7:e7:82:
e9:a0:93:80:48:0e:f1:30:22:41:e6:e8:c5:2c:51:
52:e9:9b:f0:2c:75:cc:b1:55:87:77:47:b4:08:98:
9c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A7:34:C2:68:A4:9C:70:F5:3D:AE:93:28:13:99:B7:00:C6:D0:FF
X509v3 Authority Key Identifier:
keyid:91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:69:e1:e5:52:ff:db:2c:6e:7f:0a:54:08:e5:3f:cc:f1:ba:
76:e5:34:9e:09:9c:25:69:b3:0f:3d:10:a9:68:4a:17:07:d7:
fc:6d:7f:10:35:4a:13:07:82:f3:9c:da:f1:e4:36:b3:52:54:
9e:56:46:97:0e:b3:11:dd:16:ff:82:c5:00:16:df:b9:93:0a:
a1:dd:11:75:78:c4:dc:15:a1:c4:81:33:63:c7:17:86:1b:4c:
58:98:56:4c:f8:71:9e:d0:45:39:e9:50:26:74:9b:25:37:c7:
bd:63:2f:37:b3:61:2b:5d:42:ac:5d:60:49:fd:42:a1:35:42:
90:63:dc:fe:f2:15:c6:42:a8:e5:4f:b1:20:d3:28:cb:d0:53:
06:aa:ad:e8:75:d4:42:9d:bd:96:35:75:00:31:5c:c7:15:35:
c8:1a:1d:fa:ee:84:59:61:1d:96:82:eb:12:9c:1c:0c:dd:02:
18:20:91:68:47:75:39:ec:5f:23:5a:c4:96:9f:f2:f8:a8:4f:
3a:f3:c4:98:f2:d7:e6:56:bc:67:35:d6:36:72:f8:d0:b0:a2:
52:e0:85:4d:1b:81:30:ff:ef:3d:2a:54:15:9e:fb:b1:d9:20:
8d:6c:a7:10:69:d3:bf:f5:56:11:27:0a:57:0b:19:9a:de:c6:
2d:d6:ef:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:22 2025 by rpki-client