Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
File: un1KwTROw43OmXaNeKEU6_fxfYU.mft (raw, json)
Hash identifier: Ie50v1IcbDAWIVSCMOs4/Q62AKf/h5t1nyrm7UPXPqg=
Subject key identifier: 00:21:82:53:DB:44:37:02:AF:21:35:F6:29:C7:E1:F2:88:90:09:4B
Authority key identifier: BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
Certificate issuer: /CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Certificate serial: 0197C8391547764A1928042BBB58EE3C4429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
Manifest number: 0C77
Signing time: Tue 01 Jul 2025 23:01:13 +0000
Manifest this update: Tue 01 Jul 2025 23:01:13 +0000
Manifest next update: Wed 02 Jul 2025 23:01:13 +0000
Files and hashes: 1: eJvxqWQVuJlIAcOu0zuhq-FEIwc.roa (hash: T9Btt+1WHrBsFsD5c6tC5d0RHMAv0qfav0ae3k59Hwg=)
2: un1KwTROw43OmXaNeKEU6_fxfYU.crl (hash: TvwCGlYb+jxRq/UKQOVN8BLzeUJB1gyIyATxAMRp/9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 23:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:39:15:47:76:4a:19:28:04:2b:bb:58:ee:3c:44:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Validity
Not Before: Jul 1 23:01:13 2025 GMT
Not After : Jul 2 23:01:13 2025 GMT
Subject: CN=00218253db443702af2135f629c7e1f28890094b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:26:bd:63:33:45:9d:27:8d:fe:1c:09:c9:ec:
1e:b9:17:d7:29:5d:3c:b5:e2:5b:34:5b:49:0b:9d:
c6:d7:b5:15:f4:58:e6:bd:d3:99:8d:0d:0a:86:ff:
47:ad:93:53:5f:30:cd:b9:f6:64:7f:d2:75:34:21:
1f:01:d4:d2:75:64:df:ae:d2:0b:7a:8b:4c:24:1d:
2f:5f:f8:50:5f:a9:eb:c2:82:9f:b7:aa:c1:ef:6e:
85:e1:69:4b:3f:d9:d3:19:a2:0b:c9:a6:65:df:91:
a8:19:14:22:c0:97:d3:b1:b0:84:74:95:7a:de:33:
e8:c0:45:2e:10:f3:ab:a1:c2:18:62:35:d7:ac:a6:
94:72:96:fd:b5:bb:4a:e4:ce:d4:86:f5:ea:8b:89:
1f:9b:58:25:26:e5:dd:70:35:25:17:b3:b9:d6:5b:
39:1f:b7:0d:04:47:6a:c8:7e:9a:12:f2:d3:61:cb:
ad:95:78:8b:9d:72:40:fd:0e:4e:94:4d:9a:62:f0:
62:47:ac:fc:ff:be:8b:44:35:2f:42:8c:58:cc:f3:
f8:cb:32:51:65:8e:f8:ce:3b:46:17:1f:2e:5d:6e:
6b:a9:ac:44:27:a7:37:83:99:e5:82:3e:80:62:8c:
99:fd:36:3f:5e:0c:96:dd:99:eb:d6:f0:5b:4e:6a:
16:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:21:82:53:DB:44:37:02:AF:21:35:F6:29:C7:E1:F2:88:90:09:4B
X509v3 Authority Key Identifier:
keyid:BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:57:80:93:d2:f9:bb:cb:f2:22:83:27:b5:e8:70:79:91:f3:
11:d3:f1:86:45:e5:3b:40:47:3f:88:84:2f:21:b2:2a:97:1c:
f5:a0:8a:ae:33:8e:f5:1a:ec:47:b4:ab:46:74:84:58:b8:2c:
dc:3d:fa:88:ab:3a:ef:7b:7d:f0:e2:c3:fe:87:b0:ab:2e:22:
fb:4e:06:16:77:69:ab:fe:0b:e1:53:ef:d2:34:7e:86:d2:58:
81:db:9d:1c:58:7a:2b:f7:d7:b1:e2:74:57:a1:01:2a:8b:0e:
09:d2:c0:35:a5:5b:09:eb:54:5f:75:08:e9:31:20:ec:c2:0c:
c4:24:12:e4:d5:0e:ff:3e:7f:b8:2a:a6:e8:d8:1a:91:6b:7a:
fd:d1:9c:49:54:5b:c1:be:63:ad:c8:11:72:21:dd:47:dc:fa:
62:3a:30:49:c5:1d:4d:53:d5:d8:31:70:d0:97:a8:2b:21:58:
e1:f2:e7:8c:b1:9d:d4:13:99:c4:1d:2d:92:67:a4:d0:66:cf:
63:5d:61:07:d1:da:5c:81:33:0e:76:64:1c:79:fe:aa:ed:e6:
74:7f:23:33:9a:04:0b:08:55:69:7a:18:53:df:19:a9:b7:a8:
ff:d4:af:e3:f0:60:40:17:7e:6a:a5:e9:4d:43:d1:04:f2:9c:
f3:b2:2d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 06:12:50 2025 by rpki-client