Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
File: uRil9IFVJuHpJRDTZI69oM27wqw.mft (raw, json)
Hash identifier: I1wbIljIPCi5PW7hsw7VS9GVq9x0slEOkxJn3iOBrcI=
Subject key identifier: 88:CB:69:A4:B2:64:3C:D0:27:94:44:1F:9E:C1:07:86:13:A7:96:F6
Authority key identifier: B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC
Certificate issuer: /CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
Certificate serial: 0197B820DD642098EB1F63FDD7C78120D6D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
Manifest number: 07C1
Signing time: Sat 28 Jun 2025 20:00:50 +0000
Manifest this update: Sat 28 Jun 2025 20:00:50 +0000
Manifest next update: Sun 29 Jun 2025 20:00:50 +0000
Files and hashes: 1: NQ1K-9XIHqQJwtN4074dlf3XMz8.roa (hash: vM/pIxk1nyw8ZAVigG02xXVdjyCX5kUlIgX1S1etmX8=)
2: uRil9IFVJuHpJRDTZI69oM27wqw.crl (hash: yZhkWbytU7/S/jZg4lFBr8wDuUJolHKNz/0b24YDEOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:dd:64:20:98:eb:1f:63:fd:d7:c7:81:20:d6:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
Validity
Not Before: Jun 28 20:00:50 2025 GMT
Not After : Jun 29 20:00:50 2025 GMT
Subject: CN=88cb69a4b2643cd02794441f9ec1078613a796f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d0:02:4b:07:a8:c5:d8:c0:77:5b:00:09:95:
07:76:82:fd:5e:ea:93:c8:9a:7b:43:36:ff:f4:7a:
f1:4a:47:b4:15:a1:9c:5e:2a:c1:e4:25:ba:cf:ce:
aa:0a:6a:35:cf:8c:62:f3:46:cb:23:9c:b4:a1:a7:
42:57:d8:70:37:23:b1:2d:5d:05:53:8e:ad:c9:59:
53:36:d5:7b:e5:ea:9b:29:41:d7:da:cd:0e:0f:fc:
a2:3d:1c:28:3e:53:8a:64:f5:fb:82:c0:e3:53:c0:
20:14:d4:7b:fd:a3:3e:cb:f8:49:f4:8a:7e:79:7a:
75:56:e2:cd:96:67:06:10:29:89:d1:ac:d7:3c:d7:
85:3f:9c:d6:17:72:57:6c:64:5b:0c:29:66:ca:75:
e0:1b:61:35:0b:23:f8:5b:f4:0f:f5:7f:43:4b:c7:
45:8d:bb:07:23:b8:74:02:be:d9:6d:be:9e:aa:4e:
11:57:dd:6d:f0:ae:f5:c1:ff:35:e2:8d:43:cb:14:
25:be:3b:e0:46:4f:7c:05:16:73:40:02:0b:e7:37:
6d:fa:b6:4e:9e:90:ad:77:51:25:cd:10:54:ff:5c:
18:32:10:44:75:e8:1b:60:b3:6e:44:40:8e:61:e5:
20:94:13:fb:b7:88:5f:89:fa:78:25:cc:43:85:e9:
1b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CB:69:A4:B2:64:3C:D0:27:94:44:1F:9E:C1:07:86:13:A7:96:F6
X509v3 Authority Key Identifier:
keyid:B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:9d:66:b6:df:c6:a7:d5:8e:3e:61:39:cc:04:cb:40:6d:89:
20:35:86:bc:39:2a:ac:8e:b8:09:0b:03:29:b2:e7:57:16:17:
8a:e6:57:34:bb:8f:ad:cb:6e:7e:c2:23:c3:25:8a:ab:f8:56:
5f:d0:be:94:eb:fc:5b:fb:9d:26:27:e2:40:f6:7d:8a:ab:e2:
b6:10:2f:69:64:94:ba:6a:84:5d:95:1c:cb:f5:7e:96:49:82:
ad:4e:1f:87:8e:cd:17:2d:80:2f:21:d7:a1:63:35:0b:c6:44:
e4:25:73:1f:9e:cb:19:51:6e:be:e5:77:09:1a:be:3f:c6:eb:
64:61:28:6a:47:87:f9:80:2d:80:7e:b0:a4:5d:d3:e4:64:ce:
2b:f0:06:87:38:9c:64:01:8e:5c:f9:12:6a:46:96:51:2b:06:
46:38:36:76:f2:f7:0d:64:64:d8:3f:29:53:4a:d0:dd:16:71:
57:c0:79:6f:c1:4a:39:e3:0f:a4:42:8e:df:a0:b9:a9:79:fe:
aa:3a:03:62:3b:9d:62:90:44:f2:c8:44:ac:b5:7a:80:c6:55:
0f:56:80:86:e6:08:3d:e7:df:57:cb:1a:25:23:f7:13:29:f3:
ab:e1:2a:22:1d:42:64:e1:23:c3:b4:71:d3:ca:ac:d0:89:52:
3e:42:ee:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:30 2025 by rpki-client