Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
File: uFnbfywuOzq9i_QV8M4f_zNDKew.mft (raw, json)
Hash identifier: N67JruELEzDiHcocyFvMj01yzpEI44qOs8EGMQdj+TU=
Subject key identifier: CC:34:05:85:15:D6:45:40:50:50:24:C4:DA:EE:8E:76:95:69:C9:D8
Authority key identifier: B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC
Certificate issuer: /CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec
Certificate serial: 0197B6D77415210B6CBA94F55ADB3F8ECA7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
Manifest number: 0D10
Signing time: Sat 28 Jun 2025 14:01:02 +0000
Manifest this update: Sat 28 Jun 2025 14:01:02 +0000
Manifest next update: Sun 29 Jun 2025 14:01:02 +0000
Files and hashes: 1: KrWaj3PmGUr__R-XWPo-LvjSSzE.roa (hash: D32/8FWqAF1z0NVQywtDopSVNiH+dneRDeaovNlaE+U=)
2: uFnbfywuOzq9i_QV8M4f_zNDKew.crl (hash: DPifG5pNhB6lIDfZG93DTDvDcOxGvmPO54HWwYP1dIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:74:15:21:0b:6c:ba:94:f5:5a:db:3f:8e:ca:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec
Validity
Not Before: Jun 28 14:01:02 2025 GMT
Not After : Jun 29 14:01:02 2025 GMT
Subject: CN=cc34058515d64540505024c4daee8e769569c9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:76:2a:1a:2b:05:32:87:8d:3d:c1:3a:c9:
e1:6a:8c:55:52:a2:d3:fd:8e:0c:a7:a2:18:b2:20:
0b:f3:a3:e7:d8:d4:e6:b9:d2:e3:43:b2:93:7f:48:
d8:88:b0:1c:f2:57:e4:30:c2:df:37:14:9d:46:6e:
45:27:f0:fc:37:33:2b:d9:0e:1a:fd:9a:b7:3b:12:
8f:b1:a0:90:d4:4b:3a:57:f1:19:9a:c4:7a:cd:0b:
a5:f5:0f:3b:60:d7:84:03:47:40:a3:0f:9b:c4:8b:
06:39:94:45:a0:61:df:8d:cf:1f:60:e1:70:7c:35:
c4:ec:b0:cc:79:73:30:f3:0d:eb:3c:23:1e:ea:c2:
f2:3f:5e:c2:4d:76:58:31:f0:bd:59:bb:4b:f0:b9:
f0:10:fe:37:fb:d4:84:84:c7:57:c9:10:0b:15:c4:
23:e9:29:f3:b6:e2:2d:3d:e5:b2:f6:81:11:76:8d:
3c:01:6e:b7:49:09:32:6a:56:6f:ff:15:c5:74:cf:
01:6b:7c:53:c8:a8:7f:89:bc:1c:af:98:a0:c5:ff:
73:b2:b4:1d:a7:87:e4:6f:78:5d:15:85:7a:c7:52:
33:73:1f:c8:9e:c8:bb:a4:89:0c:c8:c2:d7:22:18:
32:90:0d:d8:2c:1f:1a:15:b2:63:e3:97:b9:de:06:
2e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:34:05:85:15:D6:45:40:50:50:24:C4:DA:EE:8E:76:95:69:C9:D8
X509v3 Authority Key Identifier:
keyid:B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:50:e4:ec:34:c3:ac:6a:25:8d:b1:7d:4f:60:8e:ba:df:29:
a4:84:04:25:ed:4a:8e:13:2b:24:1d:12:5c:8a:6d:da:f4:7e:
6d:87:65:3b:14:8d:7b:0c:0b:d2:39:78:6d:d6:1b:d7:7e:67:
ce:09:d8:68:2d:a8:0d:74:e3:ad:cf:c5:e7:99:9a:5a:b4:50:
bb:44:c6:0f:4b:52:06:5c:3e:23:2b:79:a7:9a:17:18:79:ed:
cb:65:fd:51:6b:f3:d3:f6:59:01:98:23:b5:a0:e9:63:fd:9d:
2a:e7:a8:66:bb:7c:bc:b9:35:15:82:9f:e0:c1:f3:dc:92:bb:
13:ad:df:93:d0:6e:d4:3b:d0:ad:ec:89:6f:9b:9d:f9:3a:64:
3f:bc:77:1a:8b:92:57:3a:13:f2:d1:96:cd:5f:b2:8b:2e:d2:
46:22:da:da:d1:ac:61:29:0e:7a:34:ca:44:d2:36:6e:74:88:
f6:5c:30:93:00:c8:e0:6e:f2:78:fe:8a:49:aa:03:7c:1d:8a:
35:8d:43:66:99:ca:dd:93:bd:db:6c:67:7f:ba:e0:29:ab:bc:
e7:73:f9:63:79:bc:d8:a8:dd:24:5b:ed:61:72:63:4b:fe:01:
c3:ec:62:2b:2e:7d:2c:e8:ae:52:5b:89:82:7a:2a:d7:77:34:
5b:e6:0d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:27 2025 by rpki-client