Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft
File: UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft (raw, json)
Hash identifier: pH2IuQ9KfjhoTX1cjcvJib1UTSAC+5lkVC0OY6qSJ9g=
Subject key identifier: 66:45:40:6C:45:EC:63:F4:D4:FF:95:E5:0F:2C:96:B2:F2:63:F2:EC
Authority key identifier: 52:70:2C:DE:E0:43:09:4A:C2:F3:31:70:12:5F:94:F7:03:4D:A8:F0
Certificate issuer: /CN=52702cdee043094ac2f33170125f94f7034da8f0
Certificate serial: 0197B6D7C225299C9FB8B507262D33898C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnAs3uBDCUrC8zFwEl-U9wNNqPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft
Manifest number: 0F50
Signing time: Sat 28 Jun 2025 14:01:22 +0000
Manifest this update: Sat 28 Jun 2025 14:01:22 +0000
Manifest next update: Sun 29 Jun 2025 14:01:22 +0000
Files and hashes: 1: UnAs3uBDCUrC8zFwEl-U9wNNqPA.crl (hash: XRILtE00Y2BIZMKr81uO2S1MkoNDX9nsH01cYlDobvg=)
2: eZTqCsy1o9f-eq_FZSRPL4-aBD8.roa (hash: cQOdS5lB0S1LA9krJg3sdASUyUTn/NkoA0OQ3se0FuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UnAs3uBDCUrC8zFwEl-U9wNNqPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:c2:25:29:9c:9f:b8:b5:07:26:2d:33:89:8c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52702cdee043094ac2f33170125f94f7034da8f0
Validity
Not Before: Jun 28 14:01:22 2025 GMT
Not After : Jun 29 14:01:22 2025 GMT
Subject: CN=6645406c45ec63f4d4ff95e50f2c96b2f263f2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:32:47:c4:6b:82:83:0c:10:78:c0:d4:0f:a3:
ad:e4:c2:01:2c:f5:b1:ca:be:eb:b8:ae:78:29:6b:
26:67:ae:94:4c:26:ff:b6:49:af:86:53:88:69:4f:
76:57:9a:85:29:16:59:d3:5d:4d:aa:06:1b:09:02:
28:aa:b0:0a:61:83:97:7c:18:67:7c:78:b2:ec:2e:
eb:11:02:3c:a2:5c:ec:7a:c3:86:42:b7:bc:a4:6f:
db:56:ca:35:e5:07:b9:ef:11:29:34:7d:87:05:9d:
90:f0:79:78:0e:27:2e:5b:9b:6f:96:0e:79:ce:40:
03:03:98:63:a4:e6:28:67:54:ef:97:b3:6c:fa:f4:
db:e6:23:08:2d:bc:0c:11:64:5c:1e:4f:58:85:7f:
66:6c:66:fb:a4:09:df:c3:30:e0:50:f1:c5:18:82:
71:4f:9b:0c:eb:11:53:d8:2b:85:d1:65:3f:5c:50:
7d:11:fb:f4:e3:70:13:9c:8c:dc:44:a7:97:01:d6:
77:8e:87:68:9c:ac:88:f4:16:2f:2a:f1:05:3e:d6:
f5:78:a0:e8:ab:12:fa:dd:04:f1:9c:34:38:fb:0b:
8a:79:4e:46:f5:1a:37:e5:c9:bf:da:f3:16:b3:27:
99:1a:2f:77:32:16:d7:eb:c5:81:b1:7a:65:0f:1a:
f1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:45:40:6C:45:EC:63:F4:D4:FF:95:E5:0F:2C:96:B2:F2:63:F2:EC
X509v3 Authority Key Identifier:
keyid:52:70:2C:DE:E0:43:09:4A:C2:F3:31:70:12:5F:94:F7:03:4D:A8:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnAs3uBDCUrC8zFwEl-U9wNNqPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:64:a3:40:b3:8e:33:f1:ff:55:dd:fa:2b:ee:70:32:17:ce:
a0:ab:2c:e3:5e:70:37:7b:c8:64:f7:1d:36:e3:b6:d5:26:b7:
54:c2:98:e2:bc:a1:24:8f:10:2b:6e:9c:20:32:67:1f:19:6a:
33:15:8a:91:33:c1:34:9c:31:2d:07:a8:b5:03:b4:ab:49:de:
da:58:ef:3d:af:e8:01:98:6e:a9:b8:08:f9:c1:ed:5e:8b:db:
e8:01:f4:10:cc:4f:1b:bf:34:ad:11:af:fc:73:19:4d:7f:e0:
1c:b3:bc:ca:3c:14:b0:28:8a:79:7a:7b:a2:f6:e2:0d:f1:26:
80:fa:a5:b5:87:00:d2:a8:2c:10:0a:2c:b7:7a:f7:07:4b:79:
f1:67:79:00:d4:fd:dc:4d:0b:47:8a:64:d8:44:f8:1f:a3:53:
78:66:98:6b:8a:a0:54:e3:63:3e:98:b8:a2:1b:f6:55:63:da:
f3:be:da:0a:a9:e6:48:cf:7f:d3:eb:9d:5e:a4:fb:68:69:65:
ba:bf:59:4f:80:67:99:8e:f9:1d:60:f0:a8:1f:91:35:94:ad:
ef:ea:56:22:f0:d7:ea:7b:8a:8c:1f:67:31:7b:e5:6f:52:f6:
32:21:b3:f3:a4:94:99:91:6f:d2:e4:72:22:b5:4c:ba:92:8b:
fa:8f:3e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:20 2025 by rpki-client