Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
File: uRFN_za5SLVsIR0l85h1HTW5PMI.mft (raw, json)
Hash identifier: GXpmWc+a/FzPqgtXxl1pBTMEOS2hEjp34fWFkVKw8e8=
Subject key identifier: AF:09:8C:9F:07:C2:A2:8C:58:3D:BA:D6:74:1F:92:C8:3B:57:54:EB
Authority key identifier: B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
Certificate issuer: /CN=b9114dff36b948b56c211d25f398751d35b93cc2
Certificate serial: 0197B96AD9EDA79DF5696FCBB0F11DE97415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
Manifest number: 0DC1
Signing time: Sun 29 Jun 2025 02:01:16 +0000
Manifest this update: Sun 29 Jun 2025 02:01:16 +0000
Manifest next update: Mon 30 Jun 2025 02:01:16 +0000
Files and hashes: 1: 1-_Px5n1Sga5Zt8S-x1iB09Td3qo.roa (hash: 23ZQeG0ng9+MyZlvY3tVFGHtF3ECWQ2rfUxxtpg8t4c=)
2: NYoZjbIugQuxKbQ3AOfllIqIvGI.roa (hash: MP3bZZbgC6I+guroq7hjxBmjZFMjOlVQchFUz6yhGNE=)
3: u36ax0xpTJgFKndS5YsGMSqnq7s.roa (hash: uik0LuaE13Pf2kO3ppprzpbjfY2DRZ0GXchvvKMGvNo=)
4: uRFN_za5SLVsIR0l85h1HTW5PMI.crl (hash: r0lo17r4ggh0NcuL9KmXtxvmSbsh1EYgP0SA6/31GGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:d9:ed:a7:9d:f5:69:6f:cb:b0:f1:1d:e9:74:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9114dff36b948b56c211d25f398751d35b93cc2
Validity
Not Before: Jun 29 02:01:16 2025 GMT
Not After : Jun 30 02:01:16 2025 GMT
Subject: CN=af098c9f07c2a28c583dbad6741f92c83b5754eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f9:b6:36:a6:af:99:e8:8c:9d:82:1b:96:ca:
2d:35:c6:68:4f:70:40:3a:0d:b6:08:60:5f:cb:75:
cf:7e:a0:13:e7:3f:b7:21:54:c9:6b:2d:d3:16:4d:
66:3f:6f:9a:d3:26:dd:7e:62:b7:17:cc:1e:48:5a:
c5:7d:d3:d6:1a:47:45:93:72:cf:a0:dd:7c:c2:17:
c0:5f:09:2a:09:82:4f:d3:b3:12:ef:f4:a0:cb:d1:
e2:78:3e:14:cc:34:29:96:27:33:50:c5:bc:d8:0e:
f2:a4:7a:0a:f7:c2:c7:73:f9:34:13:6f:e2:7e:a0:
81:89:af:a0:a6:75:cc:04:b3:d9:b6:cd:cd:cd:25:
08:29:44:64:b1:95:c2:ed:96:b6:5f:21:f1:d1:2a:
cb:8b:05:70:d9:63:b9:53:16:3b:74:db:3f:9d:fe:
f8:87:b1:91:63:4d:b0:92:d5:1c:36:b2:c9:9a:b0:
ac:19:33:c1:de:e7:0a:ed:8f:22:f2:1a:10:87:78:
f7:db:9e:c6:bc:99:da:02:9b:ab:57:24:5c:a5:07:
c9:c1:8e:e7:31:69:15:b2:c0:f0:bd:73:52:0f:83:
40:0f:64:a5:5d:4f:5b:9a:95:91:06:1b:19:a1:07:
fe:1e:89:2b:07:b7:b5:dc:af:c9:07:02:67:47:19:
76:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:09:8C:9F:07:C2:A2:8C:58:3D:BA:D6:74:1F:92:C8:3B:57:54:EB
X509v3 Authority Key Identifier:
keyid:B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:6f:b7:3e:a2:a2:ad:f3:fb:86:98:31:61:f0:26:78:f9:85:
75:0d:36:3c:16:c8:a4:d7:30:1a:94:36:1b:6c:bb:48:9a:79:
59:1c:53:25:1f:0e:7b:f0:82:3a:12:0f:9e:29:bb:aa:ff:21:
19:72:62:cd:48:73:34:a0:ce:68:a8:44:b5:a3:74:77:7f:58:
a9:b9:52:03:a5:74:75:c1:b4:1a:88:76:95:72:7f:7a:ae:88:
16:df:0c:ed:fc:3c:0e:6f:49:55:2f:e1:cb:c8:e2:f0:43:b7:
e1:ae:b0:79:56:0b:0a:4a:ac:1b:3c:31:98:db:9d:e2:62:15:
72:a6:b7:43:8d:46:5d:a9:46:da:cc:01:ff:44:d9:10:0b:13:
a1:58:4e:9f:c4:b9:fe:cd:72:c1:61:5b:ec:b9:e8:04:dd:f0:
13:d4:a8:83:0c:c6:6f:f2:3f:fd:84:95:70:c5:ba:81:0c:64:
5a:37:ca:2f:b5:ed:d5:36:f3:64:e0:d5:ce:f3:04:fe:14:36:
d7:be:9b:75:63:dc:91:8a:7d:50:5e:7b:e8:70:e6:82:38:93:
d5:88:ee:5c:da:a6:9a:ba:fc:1c:7d:99:09:02:3e:4f:57:7a:
10:a1:08:de:1b:aa:15:cb:32:94:0b:b7:be:8c:e7:8b:84:eb:
12:dd:29:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:31:48 2025 by rpki-client