Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
File: UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft (raw, json)
Hash identifier: NQfIDkh1KXMGvYbv+rTWSyUJtV8pCbjKzqVWPFj25KM=
Subject key identifier: 4B:5F:D9:09:30:04:68:8F:B9:41:48:26:4C:BC:8C:5C:8C:3B:C2:D0
Authority key identifier: 51:5F:61:A6:E0:8D:ED:6F:1F:F5:05:11:C6:20:89:69:6A:B5:64:A8
Certificate issuer: /CN=515f61a6e08ded6f1ff50511c62089696ab564a8
Certificate serial: 0197B6A076AD05AF0BAF597C03E949F57849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
Manifest number: 12B2
Signing time: Sat 28 Jun 2025 13:00:58 +0000
Manifest this update: Sat 28 Jun 2025 13:00:58 +0000
Manifest next update: Sun 29 Jun 2025 13:00:58 +0000
Files and hashes: 1: CNzkiSB6aHtzY0O727sE464QSi8.roa (hash: jl53RICMTSEcHClA6hdGIYAm+qbxdQWju025NBkPLn8=)
2: UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl (hash: Qd7JQpbET/0al48BmsXvpUTDeiqLwUFztarasvvjDWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:76:ad:05:af:0b:af:59:7c:03:e9:49:f5:78:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=515f61a6e08ded6f1ff50511c62089696ab564a8
Validity
Not Before: Jun 28 13:00:58 2025 GMT
Not After : Jun 29 13:00:58 2025 GMT
Subject: CN=4b5fd9093004688fb94148264cbc8c5c8c3bc2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2e:9e:62:33:34:78:61:2b:e0:8b:47:14:da:
17:88:d8:55:fb:79:15:c1:f8:cd:ff:73:d4:17:27:
fb:fd:f5:39:4a:c1:66:93:27:2b:17:85:fe:75:15:
3f:2a:66:40:0c:c9:f7:d2:a3:97:40:56:38:7a:88:
70:5a:dd:53:76:ff:e7:de:ac:25:37:5c:7e:e9:7e:
58:ea:38:88:65:17:af:ff:00:fc:06:1c:b9:19:03:
a0:89:3a:93:c2:fd:6e:6c:92:7b:4a:94:7a:7b:37:
59:23:b8:f7:f2:7f:b7:21:1a:a6:1f:42:73:13:d2:
53:49:ff:52:51:e8:d3:5c:d9:f2:b4:38:63:0b:8b:
93:7e:95:66:f7:b0:34:bb:de:02:47:57:71:30:9f:
8f:f0:c5:1e:cd:04:ba:87:70:b8:cf:85:48:4e:d8:
c8:d6:28:f8:ff:b9:50:dd:fd:bc:48:91:9b:20:37:
55:50:8c:43:c2:60:37:39:87:e9:54:6f:d2:bf:cd:
f5:c1:cf:b4:a0:7d:d0:34:88:20:90:48:3d:7b:bd:
16:e4:63:6c:3e:d4:9b:1a:45:fe:82:18:c7:09:3b:
1b:6e:48:a6:35:f5:30:60:0e:50:b7:04:b6:f6:bf:
d9:a2:d0:d6:1f:e7:bc:2d:4f:1c:78:d6:16:d1:92:
5f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5F:D9:09:30:04:68:8F:B9:41:48:26:4C:BC:8C:5C:8C:3B:C2:D0
X509v3 Authority Key Identifier:
keyid:51:5F:61:A6:E0:8D:ED:6F:1F:F5:05:11:C6:20:89:69:6A:B5:64:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:46:f9:28:e9:ab:11:68:75:9b:a7:02:52:c5:3f:00:31:cf:
91:dd:3f:6d:2a:9a:be:59:d7:46:a2:aa:a1:ae:dc:2c:de:48:
12:1d:ed:61:31:3c:d4:fd:43:d4:c3:be:ac:51:cc:74:c8:4a:
26:06:e0:76:c1:f3:57:3e:85:d3:88:70:7c:66:eb:4a:33:c8:
6c:34:2b:69:4d:c9:19:98:c1:5d:78:ac:b9:c0:4a:1a:cd:4a:
b7:7b:ec:6f:41:05:56:71:7a:8e:6e:ac:28:6d:a5:ed:27:b9:
7d:bf:08:ee:74:a8:b3:84:a8:0e:5b:f4:c8:1c:47:12:20:cf:
73:30:9d:df:21:13:49:ac:c2:1c:df:76:2d:da:48:c0:2e:61:
f7:2e:cd:bb:aa:f1:16:93:f3:70:9a:20:92:98:43:80:d6:d1:
c0:db:ba:42:fe:e6:51:cc:4c:91:b4:ea:d0:59:a0:7b:aa:25:
d8:8f:01:5a:44:a0:e5:64:2f:ae:d5:6e:f8:86:09:93:87:3f:
74:c5:f6:3a:8d:08:8b:ab:51:96:48:b0:31:dc:79:12:78:86:
da:48:eb:45:b8:f9:8c:2c:49:de:9a:22:cf:0c:c8:2a:df:95:
e0:ba:08:e0:da:ad:f5:c4:61:9b:5a:ee:be:9a:98:67:d8:b6:
58:12:b8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:08:30 2025 by rpki-client