Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
File: Ul0cSVWy778Anp5Bsecupt_4JLM.mft (raw, json)
Hash identifier: Y1OXaMf7bB6pnaXskYJC2oSBbk7gFKhqf0eozj+31Qs=
Subject key identifier: A9:B4:0A:67:4E:3D:0A:FB:56:B6:EA:D8:36:86:46:F8:47:6C:5B:D4
Authority key identifier: 52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3
Certificate issuer: /CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
Certificate serial: 0197B6A233C26B9DD8692173DEAC97892EDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
Manifest number: 0746
Signing time: Sat 28 Jun 2025 13:02:52 +0000
Manifest this update: Sat 28 Jun 2025 13:02:52 +0000
Manifest next update: Sun 29 Jun 2025 13:02:52 +0000
Files and hashes: 1: Ul0cSVWy778Anp5Bsecupt_4JLM.crl (hash: 7bLEM4BQumviCcjC5vSwTxbh8/xN1oqIXZjL6iOuBdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:33:c2:6b:9d:d8:69:21:73:de:ac:97:89:2e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
Validity
Not Before: Jun 28 13:02:52 2025 GMT
Not After : Jun 29 13:02:52 2025 GMT
Subject: CN=a9b40a674e3d0afb56b6ead8368646f8476c5bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3c:97:03:6d:fc:7a:18:7b:26:4b:ca:95:0a:
76:20:51:9f:be:a1:bf:e3:bc:76:22:9c:26:1f:a8:
8e:fc:29:83:9c:94:34:6e:5c:61:36:47:35:81:d1:
80:be:8a:55:3e:a0:dc:24:73:09:e8:06:37:06:a3:
8f:ff:e6:14:66:47:e1:70:ff:87:85:d6:21:73:21:
2a:b5:0e:1e:69:1d:3f:2a:3d:cf:32:3b:21:39:71:
b9:fd:37:da:53:f2:4b:97:5d:d0:fa:87:34:f9:d9:
0a:fe:3e:ad:e4:27:5f:44:ab:3e:b9:78:19:1f:c2:
31:6f:d6:2f:df:5a:48:a6:32:c6:a6:8f:d3:6a:af:
d7:0c:1f:34:4f:b1:d4:dd:36:09:6d:56:b7:28:68:
c4:a9:95:08:04:39:03:9c:34:63:be:0a:72:d7:8c:
e4:a6:08:c4:14:ef:93:4f:ce:86:d2:26:c2:8d:e3:
3e:4b:b6:e6:74:6c:d3:bf:1f:1e:f2:63:04:c5:d5:
94:6c:19:26:dd:01:ba:46:d3:35:ed:d2:ed:30:6e:
41:12:f9:f6:7d:02:dd:09:44:84:d8:60:76:fa:0c:
81:30:86:80:1d:38:18:00:6f:b6:8d:f1:4f:f6:7f:
9f:55:ba:d6:52:4a:1a:5f:e4:95:00:1c:85:be:e6:
22:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B4:0A:67:4E:3D:0A:FB:56:B6:EA:D8:36:86:46:F8:47:6C:5B:D4
X509v3 Authority Key Identifier:
keyid:52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:69:9a:d8:a7:2d:4c:73:f2:70:fa:d9:18:06:a6:c3:c4:d2:
47:b7:0b:4c:ed:33:7a:df:8a:20:46:aa:c1:f9:12:43:f7:e4:
db:3a:2c:95:a4:cb:38:5d:a3:14:cc:bd:a7:de:33:89:18:25:
68:bc:c8:c0:e0:4b:ec:15:97:cf:34:f9:20:33:d3:b2:e1:e9:
c1:c5:70:fb:10:a6:8d:54:19:19:0f:f5:a0:1f:03:9c:00:21:
ba:51:da:3e:da:9f:e2:a4:30:eb:b5:32:0c:98:8b:81:9d:0d:
52:d1:67:cf:93:2d:b1:61:db:4e:1c:70:b9:7a:d5:89:38:b6:
d8:44:0c:2e:6a:86:e0:db:17:72:8d:15:3c:ce:1c:aa:9c:d7:
90:00:bd:36:9e:ec:26:61:23:b2:f4:0a:39:99:61:4a:6c:c3:
dd:6e:59:a6:bc:94:9e:2b:ce:0d:a1:32:cd:b1:f7:54:74:f4:
a2:34:85:9a:6d:e7:28:b4:35:34:54:68:11:73:07:30:7c:eb:
af:23:27:73:f0:dd:66:cd:29:ab:a2:0b:32:e0:8e:0f:5c:c2:
6a:2c:c7:52:4a:75:2e:61:e6:de:55:fa:f4:d7:63:64:ca:b7:
fa:b8:cd:af:49:a1:80:0f:96:c1:ca:0c:2e:33:c9:a0:33:7f:
17:88:84:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:19 2025 by rpki-client