Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
File: 1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft (raw, json)
Hash identifier: bXd0OhCf5yVDiVmo879xvRk6Y9TzZgGswAKaYB/ey+0=
Subject key identifier: 59:60:F0:0D:6C:E5:6B:82:E1:17:28:BA:C3:0F:12:0C:2A:53:BB:0A
Authority key identifier: D5:46:8F:54:C0:D4:95:81:F6:9B:54:38:3D:55:73:FF:77:56:20:EC
Certificate issuer: /CN=d5468f54c0d49581f69b54383d5573ff775620ec
Certificate serial: 0197B77C3E1FA3D65CD94C899E7F9DE73263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
Manifest number: 099E
Signing time: Sat 28 Jun 2025 17:01:02 +0000
Manifest this update: Sat 28 Jun 2025 17:01:02 +0000
Manifest next update: Sun 29 Jun 2025 17:01:02 +0000
Files and hashes: 1: 1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl (hash: IbkAzusK0IOsTqFIRj77qAyOuc/Bra/mD8TwfBFNTXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:3e:1f:a3:d6:5c:d9:4c:89:9e:7f:9d:e7:32:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5468f54c0d49581f69b54383d5573ff775620ec
Validity
Not Before: Jun 28 17:01:02 2025 GMT
Not After : Jun 29 17:01:02 2025 GMT
Subject: CN=5960f00d6ce56b82e11728bac30f120c2a53bb0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b7:59:04:17:a3:a7:1a:33:71:d6:70:a1:4c:
a0:7f:23:e7:db:23:db:c8:8b:be:ec:4e:36:db:a4:
25:28:ce:5c:a9:63:5c:4c:60:ba:e1:f3:cc:b5:a7:
38:e6:56:fb:22:89:89:90:20:8a:0c:7a:5e:ba:f3:
9a:cb:d9:66:4b:6d:56:f5:45:21:79:c4:bb:c3:68:
e8:06:89:14:72:99:34:73:32:72:96:c4:be:22:66:
94:70:1f:bf:97:36:55:ab:00:26:93:3e:0c:63:12:
8b:2d:94:36:9b:94:f7:c0:aa:9c:ba:0d:ab:59:9e:
59:f3:74:6c:98:f5:c4:0e:c2:97:b6:3d:10:ed:4d:
9a:ae:4b:3c:a3:54:bf:8a:ba:15:38:ea:c3:a3:2f:
e9:d9:a4:24:90:42:95:f3:34:6c:e4:6f:76:33:5a:
8d:0e:79:61:c2:7e:10:3e:94:d3:2e:d2:1b:ea:49:
f0:da:bc:99:3e:19:f1:50:25:60:fa:4a:fe:a5:b7:
7f:a3:a9:ac:f7:6a:53:b7:ab:ba:8d:fb:6b:77:fd:
0b:ab:80:3b:b8:fc:cf:98:05:74:a5:4b:ab:f6:49:
26:c4:f8:71:4d:ad:5b:11:86:7f:a3:bd:e7:58:d1:
ee:87:98:fe:97:ad:df:07:ff:0f:f5:70:c5:4a:79:
59:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:60:F0:0D:6C:E5:6B:82:E1:17:28:BA:C3:0F:12:0C:2A:53:BB:0A
X509v3 Authority Key Identifier:
keyid:D5:46:8F:54:C0:D4:95:81:F6:9B:54:38:3D:55:73:FF:77:56:20:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:6e:59:74:8a:6c:af:47:d0:af:1a:cf:8c:d0:8e:d4:85:c6:
77:d6:3f:44:e4:f0:8b:ea:cf:83:a9:27:6c:55:83:c2:bc:f9:
68:47:c0:c5:b3:e5:3f:bb:4b:87:c9:4d:3f:ae:ec:26:92:b6:
23:b0:41:52:15:0f:5d:46:d7:9a:43:da:cb:b3:46:9f:f1:23:
64:02:cf:ad:d7:78:8f:ad:17:6d:3b:bb:3e:69:fa:e3:98:bd:
0d:0c:82:91:69:0c:5f:ae:07:cf:1d:35:08:39:ad:27:9c:a2:
ca:ef:f9:45:ad:64:53:a7:d3:7f:66:58:f4:a9:ec:8e:01:9f:
b7:54:31:58:77:5f:14:ae:a8:eb:9b:52:f5:00:a0:db:7c:42:
f0:88:7f:a0:d1:1c:08:90:61:88:f1:e0:40:5d:02:ed:66:61:
4f:d6:40:71:2f:7d:12:47:31:fe:16:82:17:f8:3f:4d:d9:53:
31:e3:26:22:2d:dc:f4:8e:7f:23:8f:73:a9:fa:97:17:dd:a6:
b1:b5:d4:67:3d:b7:38:b0:b8:20:2c:21:47:f1:95:c9:da:03:
47:91:5a:b8:6e:43:1d:47:f4:42:4d:c8:8a:ec:cb:dc:47:57:
80:cc:3f:35:71:17:13:b3:d1:46:33:57:0e:6d:cf:2f:43:51:
59:d9:05:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:35:28 2025 by rpki-client