Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
File: UlngAMmR948kP95ZgM1c72SUCeY.mft (raw, json)
Hash identifier: vAT8EnL9q5gKoWR2kwQC6PcdNTx3Z4YSp02HEUXqzoE=
Subject key identifier: D7:AC:83:50:A0:AF:DD:F2:15:29:08:4D:AA:DA:7A:C3:1D:77:BB:92
Authority key identifier: 52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
Certificate issuer: /CN=5259e000c991f78f243fde5980cd5cef649409e6
Certificate serial: 0197B6A2291A04FADB571C590B2BB41FCD95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
Manifest number: 097C
Signing time: Sat 28 Jun 2025 13:02:49 +0000
Manifest this update: Sat 28 Jun 2025 13:02:49 +0000
Manifest next update: Sun 29 Jun 2025 13:02:49 +0000
Files and hashes: 1: UlngAMmR948kP95ZgM1c72SUCeY.crl (hash: prV7yi+YusNh6W90BVpp7h0RGptOcAL2x8eZjnk6uXQ=)
2: sq5AEY7QJIys2vGMgSgXE7FeRjY.roa (hash: aCGTeZMaEctcz9l1gB+wzw0eDWMxaeU9DQux69bQvFE=)
3: uDBXK8T_CYBhR7j4qUX3KNaOzNA.roa (hash: l69OGXgxbADqBf3n8PsE9PC3wGQv9qukdYrOEUN64Sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:29:1a:04:fa:db:57:1c:59:0b:2b:b4:1f:cd:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5259e000c991f78f243fde5980cd5cef649409e6
Validity
Not Before: Jun 28 13:02:49 2025 GMT
Not After : Jun 29 13:02:49 2025 GMT
Subject: CN=d7ac8350a0afddf21529084daada7ac31d77bb92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:58:33:4f:88:8a:80:18:db:6a:43:98:a7:f2:
fc:22:ad:da:17:51:26:1f:5c:57:50:aa:d2:68:36:
72:55:9e:6f:e7:e7:88:42:c8:a1:b2:0e:7c:5c:84:
1c:3a:97:ae:8e:03:d9:5a:8c:19:39:87:fa:90:b6:
9d:8d:72:49:17:68:c3:36:27:e7:43:22:14:e6:66:
2e:2f:20:73:88:0b:58:6f:be:30:b5:7a:52:98:51:
8a:30:ea:e2:73:53:3f:c1:c1:bc:95:4c:5d:41:66:
6b:d8:b2:50:a2:73:cf:cf:f2:17:c2:ba:9b:a7:97:
a3:80:b5:e5:8e:3f:cf:f7:18:e1:96:7b:10:59:99:
82:6c:07:9e:eb:80:a4:1d:a0:ec:eb:09:c6:40:89:
6e:7c:04:6d:6b:19:68:08:36:32:71:3d:8b:8b:5d:
0b:94:5a:57:4f:e2:4b:13:fb:e0:01:01:ce:37:7e:
1e:e2:77:24:98:4e:49:81:35:19:f6:4a:eb:43:8c:
cb:34:7b:56:e6:ec:c3:26:91:68:23:09:99:aa:f4:
10:dc:a6:62:d2:7b:91:17:bc:3a:80:f2:f4:3e:32:
42:6e:be:96:e5:8c:99:7d:12:5f:b9:f0:27:0c:d5:
be:93:45:58:02:c1:00:75:8e:1f:a2:2c:aa:90:91:
c1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AC:83:50:A0:AF:DD:F2:15:29:08:4D:AA:DA:7A:C3:1D:77:BB:92
X509v3 Authority Key Identifier:
keyid:52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ce:07:1c:a8:f7:7e:48:47:bf:7c:d3:9e:ed:2d:44:ce:ec:
35:df:11:99:43:33:bb:5e:f0:01:2d:51:70:94:1d:6b:f8:36:
af:da:c1:b1:49:b7:7d:48:6c:2b:7f:06:34:b4:37:91:a0:9a:
c3:11:61:92:e6:0b:9c:9e:e8:64:31:ee:77:2d:d6:ea:e2:e9:
f6:9f:b4:a3:a7:9d:2a:71:a2:83:48:1c:64:49:16:76:a5:6d:
78:18:5e:cb:b5:87:b8:d8:64:8b:e7:34:cc:66:b2:91:7f:78:
4b:95:7c:12:d7:3c:83:8d:8e:74:f7:33:2e:06:56:4b:2c:e2:
a1:88:6b:c7:25:de:67:dc:eb:60:c0:7a:7c:68:38:63:38:c6:
66:43:b8:47:c5:55:cd:34:e7:32:bd:01:1b:5c:2a:e8:93:a0:
05:59:b9:54:90:50:90:06:7b:ed:f3:69:21:b4:5e:4f:d7:6b:
05:d4:fe:a9:8f:21:b0:99:7b:57:b9:86:83:89:d5:f4:82:20:
db:c9:b1:f7:2f:0e:76:00:57:ce:64:ee:ff:70:ee:ef:f1:19:
3d:16:f7:bc:85:d5:fb:ae:c4:b4:01:ed:56:3b:d1:33:fe:8b:
b8:d7:53:90:e8:0b:bc:9a:28:1d:d7:88:06:9d:19:42:86:fb:
40:41:6a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:19:18 2025 by rpki-client