Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
File: r1UJ13Yi0who8jYTxagW5ySEAWU.mft (raw, json)
Hash identifier: gXTt6uIoKtoQr2ufwJtfApZpT/jd/rEzKtIxmev0i+E=
Subject key identifier: 04:80:D1:4F:BB:47:68:30:E8:32:A9:9F:C4:F7:D8:FD:B4:1D:58:CD
Authority key identifier: AF:55:09:D7:76:22:D3:08:68:F2:36:13:C5:A8:16:E7:24:84:01:65
Certificate issuer: /CN=af5509d77622d30868f23613c5a816e724840165
Certificate serial: 0197C04923FD82DFEC84F10154CCAC8CF3C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
Manifest number: 066E
Signing time: Mon 30 Jun 2025 10:01:48 +0000
Manifest this update: Mon 30 Jun 2025 10:01:48 +0000
Manifest next update: Tue 01 Jul 2025 10:01:48 +0000
Files and hashes: 1: r1UJ13Yi0who8jYTxagW5ySEAWU.crl (hash: CBeHtbqJMx7Ky3M3YOtwfdHnX5m1PHS+5Xyk45jXVLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 10:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:49:23:fd:82:df:ec:84:f1:01:54:cc:ac:8c:f3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5509d77622d30868f23613c5a816e724840165
Validity
Not Before: Jun 30 10:01:48 2025 GMT
Not After : Jul 1 10:01:48 2025 GMT
Subject: CN=0480d14fbb476830e832a99fc4f7d8fdb41d58cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:82:29:4e:9e:83:4a:28:ea:f7:79:9b:cc:90:
24:e2:ce:9f:9f:23:e6:82:1e:8d:f6:0f:72:c6:13:
ef:18:d8:32:9f:53:31:77:63:d3:56:00:d2:39:a9:
4e:43:4b:8f:44:e1:ba:36:c9:fb:25:e1:5b:88:95:
0f:3e:9b:2e:5e:32:36:d0:0a:2d:42:6d:73:66:38:
5a:b9:4c:79:d0:22:d3:eb:c4:fd:e4:00:fb:7a:e9:
e5:c1:b3:35:e0:a8:4a:c3:ac:7c:7e:13:09:5e:8b:
83:9a:e5:40:47:1c:56:19:1b:26:05:d7:62:4c:3c:
a3:47:f0:76:42:30:82:18:26:b3:6b:8b:cd:2d:88:
42:10:bd:cf:50:23:05:ca:fa:5c:f4:c0:3c:48:da:
df:ce:3c:46:58:6e:b5:f3:70:b5:64:a0:ce:dd:93:
fa:42:b7:7d:a5:30:d2:f1:e3:79:60:cc:d6:3a:8c:
4d:8a:bf:fe:fd:7e:d7:97:c0:db:e9:da:ef:36:a6:
40:a3:72:1b:5e:2b:89:20:98:c8:dc:03:a4:20:bf:
4b:66:db:30:df:de:33:68:9a:22:e6:eb:e8:76:5c:
7d:a6:04:0a:4f:01:36:16:6b:36:83:de:41:64:62:
7c:fd:b7:fa:c1:9c:00:58:c8:91:40:e3:e4:e3:23:
a8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:80:D1:4F:BB:47:68:30:E8:32:A9:9F:C4:F7:D8:FD:B4:1D:58:CD
X509v3 Authority Key Identifier:
keyid:AF:55:09:D7:76:22:D3:08:68:F2:36:13:C5:A8:16:E7:24:84:01:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:3f:4e:39:f7:f7:fb:a5:42:60:6f:21:15:09:c3:48:79:b9:
d9:9f:2c:6f:83:34:ff:7e:76:09:61:00:e3:be:2d:bf:51:6f:
80:3c:1a:77:80:47:1a:79:14:2e:75:30:61:cb:45:26:ae:12:
55:1d:4b:32:f0:b0:87:1d:94:74:34:b7:d1:cf:8e:90:c1:5e:
0f:8c:79:48:2f:07:12:ac:93:cf:ad:7e:03:60:01:42:45:6a:
65:70:b0:77:4a:69:cb:ac:6e:9d:81:97:d5:55:d0:9a:a4:90:
c6:8d:95:44:c3:f9:da:f6:ca:e8:23:f0:3b:b0:d8:5c:a9:04:
cc:4b:f7:9a:19:ac:8e:05:e8:f1:11:47:fe:9f:c6:dc:6d:73:
27:7e:63:41:cb:94:a4:0f:dc:d1:94:77:fd:29:76:d6:88:f9:
a4:4d:90:4e:6a:4b:40:f0:61:9f:3e:cd:6f:5f:88:5b:21:8c:
ab:fd:29:a8:39:4a:28:5a:c4:5a:e0:da:3c:b4:a5:83:9f:2c:
0c:c6:bf:7d:15:03:f7:98:43:e0:85:01:7b:9b:ec:26:79:af:
09:1e:61:e2:da:da:62:ba:da:4e:a3:7c:20:6c:04:7c:8a:31:
31:ad:c9:ee:7b:09:23:63:ab:aa:59:7a:64:99:9b:24:93:73:
fb:bb:ff:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:27:56 2025 by rpki-client