Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c9619d-1b3b-49db-89c2-a70bc30a33c3/1/RE_UFLu7UMn_tejPBmVPeftYdsw.mft
File: RE_UFLu7UMn_tejPBmVPeftYdsw.mft (raw, json)
Hash identifier: eA4QVJ76haQaS8nEQQiaE9YuUdU0I5WA8sYEjJRIIVc=
Subject key identifier: D6:CA:47:2F:80:38:1A:7B:59:66:08:77:4A:93:87:BC:AF:1C:D0:40
Authority key identifier: 44:4F:D4:14:BB:BB:50:C9:FF:B5:E8:CF:06:65:4F:79:FB:58:76:CC
Certificate issuer: /CN=444fd414bbbb50c9ffb5e8cf06654f79fb5876cc
Certificate serial: 0197B77C40EAAD67F7A9A6965D9F623D433B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RE_UFLu7UMn_tejPBmVPeftYdsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c9619d-1b3b-49db-89c2-a70bc30a33c3/1/RE_UFLu7UMn_tejPBmVPeftYdsw.mft
Manifest number: 029B
Signing time: Sat 28 Jun 2025 17:01:02 +0000
Manifest this update: Sat 28 Jun 2025 17:01:02 +0000
Manifest next update: Sun 29 Jun 2025 17:01:02 +0000
Files and hashes: 1: RE_UFLu7UMn_tejPBmVPeftYdsw.crl (hash: t6QVThipsgfmjS6xJc35X7WuUxxgWf+7F8fi0C4fgrI=)
2: epx5ZtV1DmNUOssTw71RpRlPSQg.roa (hash: Mn6EWImg2YFEUwlk4S0gZpe8CjG2vGuON1o03HQf5Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c9619d-1b3b-49db-89c2-a70bc30a33c3/1/RE_UFLu7UMn_tejPBmVPeftYdsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/c9619d-1b3b-49db-89c2-a70bc30a33c3/1/RE_UFLu7UMn_tejPBmVPeftYdsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RE_UFLu7UMn_tejPBmVPeftYdsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:40:ea:ad:67:f7:a9:a6:96:5d:9f:62:3d:43:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=444fd414bbbb50c9ffb5e8cf06654f79fb5876cc
Validity
Not Before: Jun 28 17:01:02 2025 GMT
Not After : Jun 29 17:01:02 2025 GMT
Subject: CN=d6ca472f80381a7b596608774a9387bcaf1cd040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:24:c0:37:05:70:cc:6f:a6:b3:17:c6:91:5c:
82:e2:32:3d:de:88:9d:4b:31:ae:cf:95:43:45:5c:
af:0f:42:67:d3:09:c2:48:89:b5:3b:0a:2d:e4:f8:
cb:18:07:2d:47:6f:ec:b9:f5:69:cb:f1:de:c9:9d:
a6:9a:35:0b:0f:2d:07:5b:d5:ee:c2:2e:7c:99:5b:
b7:50:60:21:bf:a4:de:8f:7c:05:4a:6f:0d:df:ff:
a1:43:25:8f:8d:2e:88:a2:a0:0a:05:7e:92:40:66:
00:5e:08:26:28:3a:ba:36:eb:b0:e6:ce:81:28:06:
ec:3f:1a:fb:3c:ad:38:2b:38:a8:95:b3:57:5b:ef:
6f:7e:58:38:f0:2d:d1:35:8b:9f:7a:28:c2:f4:18:
56:7b:ce:2a:b0:be:30:3c:c2:7d:20:6a:10:d7:79:
0b:aa:76:1e:70:5c:e0:39:e3:bd:d9:c5:7e:c0:79:
a5:4a:81:12:4f:76:1a:20:17:6b:87:38:95:9b:70:
82:a3:59:6a:22:db:cc:34:c9:43:4b:88:68:6f:25:
af:bf:1a:3a:de:d1:9b:7e:bf:8c:7b:dd:ad:a4:ec:
93:91:d0:54:38:ef:df:3c:80:79:df:98:75:78:1f:
39:db:52:d4:8c:2e:b6:b0:09:f6:a8:31:43:c5:93:
9b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CA:47:2F:80:38:1A:7B:59:66:08:77:4A:93:87:BC:AF:1C:D0:40
X509v3 Authority Key Identifier:
keyid:44:4F:D4:14:BB:BB:50:C9:FF:B5:E8:CF:06:65:4F:79:FB:58:76:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RE_UFLu7UMn_tejPBmVPeftYdsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c9619d-1b3b-49db-89c2-a70bc30a33c3/1/RE_UFLu7UMn_tejPBmVPeftYdsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c9619d-1b3b-49db-89c2-a70bc30a33c3/1/RE_UFLu7UMn_tejPBmVPeftYdsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:fa:24:28:b8:ee:89:9e:d2:80:d0:dd:58:a4:f7:35:43:ef:
f6:14:f0:af:be:0c:2b:1c:83:f0:cf:5e:8e:4d:41:b6:2a:ae:
ba:ea:4b:02:1c:2c:b8:46:09:b8:cb:9d:cf:72:03:94:8a:71:
d1:e0:62:e5:50:79:2d:30:c4:55:74:e7:f9:a1:2a:95:36:04:
1a:3a:c8:d8:a4:94:d0:bd:7c:2a:ca:24:a0:29:53:de:49:8d:
f8:f7:5f:5d:bd:6e:23:c8:5a:32:09:23:e4:f0:3b:7c:0a:a9:
b9:03:fc:02:81:55:bb:17:26:c8:bc:a6:18:53:e2:1b:af:9e:
4f:10:a4:79:fa:0c:71:32:22:10:d7:3e:d2:5e:9c:3d:08:fd:
a2:42:ae:ef:2f:4e:c9:fe:8d:63:98:6a:46:4a:50:af:8c:ab:
e4:97:0e:d1:dc:80:0d:f0:f5:c4:44:8f:86:e2:4c:d2:0d:36:
af:24:97:b1:97:c9:fa:b5:92:87:e2:24:5f:4d:54:66:08:33:
e6:2c:86:41:56:ab:32:c8:91:03:1a:92:b6:30:56:b8:33:0d:
af:fe:72:ea:ae:d7:84:33:56:d7:6a:35:29:73:8a:49:d7:f7:
da:ef:0d:99:20:7c:ba:9b:9c:e0:2b:9c:39:0d:d1:fa:9e:1e:
3e:be:98:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:24:24 2025 by rpki-client