Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.mft
File: Unzgu6rDVu3srWci8qhvjgZJCY4.mft (raw, json)
Hash identifier: frVTAiFMMAvZG4JB/pPb2IzymvUnzP8jl2+VTsWWbfQ=
Subject key identifier: C8:0E:F7:D1:9F:7C:F8:41:55:CF:FA:26:DA:3C:EF:1C:C7:1D:30:3D
Authority key identifier: 52:7C:E0:BB:AA:C3:56:ED:EC:AD:67:22:F2:A8:6F:8E:06:49:09:8E
Certificate issuer: /CN=527ce0bbaac356edecad6722f2a86f8e0649098e
Certificate serial: 0197B7450624E65FBCE8F981D0A208A8BE50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Unzgu6rDVu3srWci8qhvjgZJCY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.mft
Manifest number: 1545
Signing time: Sat 28 Jun 2025 16:00:43 +0000
Manifest this update: Sat 28 Jun 2025 16:00:43 +0000
Manifest next update: Sun 29 Jun 2025 16:00:43 +0000
Files and hashes: 1: Unzgu6rDVu3srWci8qhvjgZJCY4.crl (hash: JYk8+H4wjLADuUMuyxIy2FhnMIIFpR9vPYOTyeSLpps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Unzgu6rDVu3srWci8qhvjgZJCY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:06:24:e6:5f:bc:e8:f9:81:d0:a2:08:a8:be:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=527ce0bbaac356edecad6722f2a86f8e0649098e
Validity
Not Before: Jun 28 16:00:43 2025 GMT
Not After : Jun 29 16:00:43 2025 GMT
Subject: CN=c80ef7d19f7cf84155cffa26da3cef1cc71d303d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:d1:02:47:ad:14:2c:80:fd:55:74:f7:ce:
d5:64:b4:a4:cf:4f:f6:ab:8d:7b:f1:19:11:9e:ef:
ce:14:cf:7c:21:d2:0d:7f:73:d9:16:24:ea:d9:ed:
36:7c:81:6d:6b:ff:c4:f4:ba:07:0e:54:1d:52:53:
e3:08:75:92:9c:f6:d8:66:b7:93:fd:c0:3d:ef:77:
9f:6e:f6:47:7e:f9:75:cf:e7:10:0f:10:cc:e2:36:
1b:54:32:35:b6:af:73:a8:a9:33:8a:6b:85:0f:dd:
93:28:cc:77:b9:1e:ec:4e:5e:1f:49:82:36:b6:3a:
f0:7c:bc:0d:48:63:7d:8d:8c:d9:c2:66:81:e3:31:
65:e7:40:38:bf:5f:90:1a:33:4e:33:11:5f:e6:fe:
15:62:db:ca:88:0b:6e:02:6b:dc:6d:23:06:7c:41:
e4:dc:f3:6b:d5:b3:ba:2e:a6:af:09:db:f3:3a:e4:
5d:45:7f:0f:15:6f:4e:22:e8:7a:94:12:d5:45:1f:
59:6b:4b:a5:c7:4c:0d:0a:5a:d0:52:1e:1d:e9:66:
94:f6:67:5f:19:e8:86:aa:d5:b5:09:be:e3:45:6f:
af:93:9c:ea:23:06:76:ed:74:98:12:08:a2:27:47:
b7:4b:04:c5:d4:83:0e:03:22:09:2e:e1:62:c8:df:
ab:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0E:F7:D1:9F:7C:F8:41:55:CF:FA:26:DA:3C:EF:1C:C7:1D:30:3D
X509v3 Authority Key Identifier:
keyid:52:7C:E0:BB:AA:C3:56:ED:EC:AD:67:22:F2:A8:6F:8E:06:49:09:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Unzgu6rDVu3srWci8qhvjgZJCY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:5b:27:dc:69:cf:b9:cd:1e:26:1c:d2:ec:1f:7b:0d:cf:d0:
1a:47:e6:02:27:41:45:7d:3a:30:28:ef:ce:9c:ac:9e:3f:e2:
9b:f1:f5:22:fa:5b:2c:e0:95:cb:d9:fc:1d:9d:11:e8:ef:c8:
d1:f2:2c:2d:fa:86:f3:8a:23:f6:81:4d:a4:4d:c0:69:3e:8e:
6d:9d:43:79:f2:56:ef:57:73:a9:f4:8e:cd:07:9c:ed:bc:ea:
a8:fd:37:ce:f8:b0:c5:61:35:6e:76:86:31:b9:07:65:b7:62:
0f:e9:93:fd:35:69:9d:28:9b:cd:38:3f:d3:c2:72:7d:d9:13:
f5:75:a5:c1:65:f2:05:12:65:96:90:4a:18:bf:52:57:24:66:
ab:e7:70:ec:6d:9f:06:d4:52:07:0c:76:1b:5e:3e:d0:71:61:
f9:10:58:0a:31:41:f7:93:95:e8:08:5f:ca:ff:2e:d4:bb:7f:
cf:93:46:03:e6:b1:dc:89:14:66:69:78:a3:62:e0:b7:92:b5:
c1:08:d0:51:92:f1:27:c5:b9:57:24:88:ca:f4:c5:4b:ca:c5:
5a:a0:4b:88:3a:cd:49:9d:ab:66:f2:5a:ae:64:18:8a:b7:bc:
ac:56:c0:31:52:d2:5b:74:ba:d0:ff:5f:38:5a:77:2f:d9:6e:
f2:64:a0:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RQYk5l+86PmB0KIIqL5QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyN2NlMGJiYWFjMzU2ZWRlY2FkNjcyMmYyYTg2ZjhlMDY0
OTA5OGUwHhcNMjUwNjI4MTYwMDQzWhcNMjUwNjI5MTYwMDQzWjAzMTEwLwYDVQQD
EyhjODBlZjdkMTlmN2NmODQxNTVjZmZhMjZkYTNjZWYxY2M3MWQzMDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaPRAketFCyA/VV0987VZLSkz0/2
q4178RkRnu/OFM98IdINf3PZFiTq2e02fIFta//E9LoHDlQdUlPjCHWSnPbYZreT
/cA973efbvZHfvl1z+cQDxDM4jYbVDI1tq9zqKkzimuFD92TKMx3uR7sTl4fSYI2
tjrwfLwNSGN9jYzZwmaB4zFl50A4v1+QGjNOMxFf5v4VYtvKiAtuAmvcbSMGfEHk
3PNr1bO6LqavCdvzOuRdRX8PFW9OIuh6lBLVRR9Za0ulx0wNClrQUh4d6WaU9mdf
GeiGqtW1Cb7jRW+vk5zqIwZ27XSYEgiiJ0e3SwTF1IMOAyIJLuFiyN+rnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMgO99GffPhBVc/6Jto87xzHHTA9MB8GA1UdIwQY
MBaAFFJ84Luqw1bt7K1nIvKob44GSQmOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW56Z3U2ckRWdTNzcldjaThxaHZqZ1pKQ1k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy85MWRhOGYtY2IwOC00OWMwLTgzMDkt
OGEyYjdmOTU2OTI0LzEvVW56Z3U2ckRWdTNzcldjaThxaHZqZ1pKQ1k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy85MWRhOGYtY2IwOC00OWMwLTgzMDktOGEyYjdmOTU2OTI0
LzEvVW56Z3U2ckRWdTNzcldjaThxaHZqZ1pKQ1k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAilsn3GnP
uc0eJhzS7B97Dc/QGkfmAidBRX06MCjvzpysnj/im/H1IvpbLOCVy9n8HZ0R6O/I
0fIsLfqG84oj9oFNpE3AaT6ObZ1DefJW71dzqfSOzQec7bzqqP03zviwxWE1bnaG
MbkHZbdiD+mT/TVpnSibzTg/08JyfdkT9XWlwWXyBRJllpBKGL9SVyRmq+dw7G2f
BtRSBwx2G14+0HFh+RBYCjFB95OV6Ahfyv8u1Lt/z5NGA+ax3IkUZml4o2Lgt5K1
wQjQUZLxJ8W5VySIyvTFS8rFWqBLiDrNSZ2rZvJarmQYire8rFbAMVLSW3S60P9f
OFp3L9lu8mSgYw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:18:48 2025 by rpki-client