Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft
File: UpJ4MtOYUOhR7staBRFpKZHdpdk.mft (raw, json)
Hash identifier: jDWygDx4ChKIj5dlAm+9rE9xbPnESbedlvVcBpxrdWM=
Subject key identifier: 06:F8:7E:7D:2C:55:E7:CD:2F:A0:9D:EB:0F:C3:E7:CC:5F:B8:A9:87
Authority key identifier: 52:92:78:32:D3:98:50:E8:51:EE:CB:5A:05:11:69:29:91:DD:A5:D9
Certificate issuer: /CN=52927832d39850e851eecb5a0511692991dda5d9
Certificate serial: 0197B6A1E5FF6CF320A74CEF5F125DCF9BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpJ4MtOYUOhR7staBRFpKZHdpdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:02:32 +0000
Manifest this update: Sat 28 Jun 2025 13:02:32 +0000
Manifest next update: Sun 29 Jun 2025 13:02:32 +0000
Files and hashes: 1: UpJ4MtOYUOhR7staBRFpKZHdpdk.crl (hash: chdK/UMkPKGVWzud8AqBu0tXGExWPh+ftd1csTmlJ0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpJ4MtOYUOhR7staBRFpKZHdpdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:e5:ff:6c:f3:20:a7:4c:ef:5f:12:5d:cf:9b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52927832d39850e851eecb5a0511692991dda5d9
Validity
Not Before: Jun 28 13:02:32 2025 GMT
Not After : Jun 29 13:02:32 2025 GMT
Subject: CN=06f87e7d2c55e7cd2fa09deb0fc3e7cc5fb8a987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c6:49:85:b1:67:4d:f0:cd:d5:1a:83:98:35:
ac:a9:6b:47:95:94:44:6f:ca:af:75:3f:7f:51:49:
3e:9b:13:23:55:9f:de:f3:90:4f:e2:3e:80:15:ed:
3b:16:65:b8:39:58:2f:76:2f:0f:4b:3b:f2:3a:58:
bd:72:fa:5f:b6:d1:e6:45:ca:59:f0:fb:ad:dc:2e:
89:67:e3:bb:84:1d:5d:db:02:77:ac:3b:8c:92:ba:
44:03:73:11:db:ab:9e:68:ce:ca:5a:95:a6:d1:7a:
0b:fa:76:23:29:16:c9:32:c1:d9:cc:eb:74:6e:fb:
38:d8:83:9f:9c:00:07:2d:4f:49:0d:68:8d:0d:40:
ad:62:b1:60:1b:ef:16:ba:34:3a:7e:76:eb:d8:f4:
68:56:93:a4:cd:68:40:d9:82:1f:33:44:aa:3b:79:
ff:68:f3:43:23:19:fe:ff:82:ae:f2:f7:9e:36:a9:
47:9e:47:9d:67:8a:f8:74:6e:3b:8e:51:41:3a:f6:
ef:22:1d:6c:73:47:ec:0d:f0:0e:52:5e:b5:0c:d1:
4c:9a:38:31:ed:9f:df:c9:b7:d4:3d:09:70:9e:d8:
15:f7:32:d5:56:f9:68:0d:82:ba:d0:b3:24:3c:ec:
6e:14:98:8c:ad:01:77:3e:d4:95:f3:16:db:8d:ab:
4a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F8:7E:7D:2C:55:E7:CD:2F:A0:9D:EB:0F:C3:E7:CC:5F:B8:A9:87
X509v3 Authority Key Identifier:
keyid:52:92:78:32:D3:98:50:E8:51:EE:CB:5A:05:11:69:29:91:DD:A5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpJ4MtOYUOhR7staBRFpKZHdpdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:d9:2c:c0:b9:34:eb:e0:32:0c:42:67:d5:03:59:fd:9e:39:
45:50:99:1b:ad:e1:c9:d8:e2:70:bd:c5:82:dd:10:66:28:38:
8f:43:43:a8:bd:0d:ca:32:e4:ea:fb:5d:05:37:d4:62:6e:b4:
9e:7e:a3:55:1d:c2:43:07:de:bd:02:4e:a2:f2:2b:83:8c:50:
4b:ce:47:92:b0:51:4d:95:dc:19:18:e0:08:cd:ce:f5:df:b1:
56:61:df:6a:13:69:44:2b:ef:54:08:8f:0c:e5:fb:e5:df:f9:
fa:f3:60:9b:87:03:43:ef:a9:eb:ca:61:bb:f7:6a:b3:f3:c4:
67:12:82:a8:b2:ff:05:68:b5:04:7a:ad:31:a4:55:9c:14:69:
f5:6e:63:5e:33:1c:d6:8c:1f:ec:af:44:de:a5:1a:17:0c:2b:
33:3f:76:f2:be:99:7a:6d:04:bf:78:0d:96:6d:f3:45:7d:70:
19:74:42:69:0e:85:cd:28:1e:a3:92:29:a3:b4:6c:d3:bc:b6:
da:eb:0f:ab:54:6f:6f:b9:96:b2:2e:e7:3e:95:34:7e:d8:e7:
eb:a7:ef:a7:e4:43:49:f9:3f:d5:62:e2:ed:3d:1f:bb:05:d5:
7d:0d:6c:ea:c3:c3:0f:dd:75:16:f5:52:4f:41:7e:3f:57:c2:
28:e8:b7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:52:56 2025 by rpki-client