Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
File: 9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft (raw, json)
Hash identifier: 7/98PHNtA4b+epJoIS7aI4Lt1hGqG8OyS+r07E/pvqw=
Subject key identifier: 03:3B:5C:51:1B:3D:1B:00:CD:64:8E:40:44:A2:FB:69:82:0B:3B:4E
Authority key identifier: F6:E7:D8:11:95:49:93:A9:53:B7:94:8D:D0:67:65:CB:C0:90:DC:F7
Certificate issuer: /CN=f6e7d811954993a953b7948dd06765cbc090dcf7
Certificate serial: 0197B77C093E89DF7F79052288F252549F80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
Manifest number: 01CD
Signing time: Sat 28 Jun 2025 17:00:48 +0000
Manifest this update: Sat 28 Jun 2025 17:00:48 +0000
Manifest next update: Sun 29 Jun 2025 17:00:48 +0000
Files and hashes: 1: 9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl (hash: x6IfA09zHF0KOTloVKH4QxM00hNWW1sKNkqffqzm5VU=)
2: AnWhlH6XKqUu4_GnJM2nKdO071s.roa (hash: /ulEE3dLzdrGEic+8DMTJn8iVbu0rFN7I+VggC4+dZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:09:3e:89:df:7f:79:05:22:88:f2:52:54:9f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6e7d811954993a953b7948dd06765cbc090dcf7
Validity
Not Before: Jun 28 17:00:48 2025 GMT
Not After : Jun 29 17:00:48 2025 GMT
Subject: CN=033b5c511b3d1b00cd648e4044a2fb69820b3b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3c:c2:24:38:53:3c:6a:b2:f4:cf:4c:98:55:
fd:ed:01:f2:a5:0e:15:f9:43:14:e0:e7:1b:66:bd:
f4:94:10:16:57:95:46:95:af:68:a3:63:72:77:a4:
2f:c1:56:f3:4a:fe:d3:15:9a:c0:05:e8:30:3b:75:
6e:38:eb:a9:42:e3:5e:a7:17:0f:fa:fb:a8:45:31:
ad:26:70:84:43:f0:50:a4:4f:db:22:5e:17:b5:61:
e9:ce:59:31:1d:ec:b5:e5:03:5a:85:a8:04:0b:9e:
8a:26:a7:4b:92:a0:fc:40:ce:d4:ed:37:5b:ba:a1:
d0:9c:26:e7:b2:20:0d:b3:b6:34:93:9b:4a:71:a3:
78:f5:ed:00:bd:34:09:d2:ff:6d:97:de:f2:4e:03:
64:56:35:82:20:42:ec:06:20:0e:e6:12:6d:26:74:
2d:8f:33:17:5f:05:a3:9e:70:e0:e1:d4:c0:3c:20:
2b:ec:22:dc:db:f1:f5:57:0e:a3:83:f0:cb:09:0a:
42:bc:72:f1:bf:fb:c2:14:31:32:fc:3e:ef:01:d2:
6c:81:bc:fc:b0:d9:2c:0a:30:70:90:8f:5a:c5:67:
95:55:02:94:0a:40:14:1f:74:01:d7:48:fc:9f:b8:
63:18:84:0d:5f:2d:82:63:3d:e0:84:b9:e4:b3:3d:
40:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3B:5C:51:1B:3D:1B:00:CD:64:8E:40:44:A2:FB:69:82:0B:3B:4E
X509v3 Authority Key Identifier:
keyid:F6:E7:D8:11:95:49:93:A9:53:B7:94:8D:D0:67:65:CB:C0:90:DC:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e5:c6:90:a7:42:ae:80:2c:54:30:53:fe:78:d8:79:9f:7b:
00:94:52:30:81:0f:ac:89:5c:8a:e2:f2:a0:be:34:d5:fd:b6:
82:01:f0:4a:d5:8e:56:a1:18:1b:b6:07:4b:25:68:69:51:a2:
dc:c0:46:88:9d:af:15:cd:b2:c4:fc:6f:0d:a6:9f:a9:b3:99:
31:94:a3:53:71:13:ed:49:cc:94:81:cc:26:0a:06:d1:c9:0e:
f2:b1:17:58:39:f2:74:e1:30:52:38:31:1d:7d:6e:0e:8b:9a:
ec:d9:6c:ea:d1:f6:20:23:90:5d:d6:6b:62:39:58:0b:59:6b:
b1:bd:6b:01:1f:f6:fb:d4:62:29:da:67:82:b2:49:56:cf:1e:
88:52:3f:98:4e:2c:6c:4e:c0:37:e6:ee:18:b0:67:df:cc:79:
04:8c:de:f5:7d:a6:44:64:c5:d5:5d:ac:6c:83:bc:9b:de:92:
0c:94:2d:4b:4f:c7:c6:e0:65:c9:c4:f0:ad:0e:a2:e7:76:14:
c3:be:70:63:35:59:d2:6e:d2:99:70:47:d2:88:35:d7:3e:02:
33:76:2c:79:c6:b3:6b:c5:f9:fc:49:a2:5d:ad:d4:3f:6d:46:
c3:29:fa:c2:e8:a6:79:67:94:61:65:52:de:25:da:8a:c2:a1:
5a:93:a5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:55:40 2025 by rpki-client