Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
File: UlkVtMckB6-3lB5b4pSscTOxB7M.mft (raw, json)
Hash identifier: NN0vCb8imRgCi+LRPOp2bTH0BzpXvUyJ9iPNJzqGTbA=
Subject key identifier: 9A:67:BE:C6:7B:C8:3F:9E:D1:DE:BA:EE:14:BA:83:D9:77:BD:7E:37
Authority key identifier: 52:59:15:B4:C7:24:07:AF:B7:94:1E:5B:E2:94:AC:71:33:B1:07:B3
Certificate issuer: /CN=525915b4c72407afb7941e5be294ac7133b107b3
Certificate serial: 0197B6D796E811B3D02A7149AB7E28F4BD65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
Manifest number: 12A6
Signing time: Sat 28 Jun 2025 14:01:11 +0000
Manifest this update: Sat 28 Jun 2025 14:01:11 +0000
Manifest next update: Sun 29 Jun 2025 14:01:11 +0000
Files and hashes: 1: UlkVtMckB6-3lB5b4pSscTOxB7M.crl (hash: 6XyqeaUncNF0Mc6hDr+/LlqwbcoDfsK3gGuKnjI2+w4=)
2: ci7D-gavzkR5lRu-Y8rw6gTVt8k.roa (hash: e5+WwJtdUyHAODWheWNyNbbf9/GmybmxPgwjpdHpaL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:96:e8:11:b3:d0:2a:71:49:ab:7e:28:f4:bd:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525915b4c72407afb7941e5be294ac7133b107b3
Validity
Not Before: Jun 28 14:01:11 2025 GMT
Not After : Jun 29 14:01:11 2025 GMT
Subject: CN=9a67bec67bc83f9ed1debaee14ba83d977bd7e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:80:27:4b:85:07:4f:73:8e:69:1d:dc:45:e3:
9c:f5:79:92:64:3e:1a:f5:1b:5a:20:82:6b:e2:64:
30:a6:10:53:f8:b7:99:d3:be:95:08:b0:84:82:7b:
3a:04:97:dd:d4:76:68:80:8b:bb:12:73:86:af:95:
21:75:ed:8a:a4:c0:6d:b9:68:4b:fb:dd:29:7d:a7:
c6:8f:50:d6:b0:85:5c:2d:80:8a:bd:9a:87:eb:d2:
66:4e:52:6b:32:c9:e4:2e:00:b1:89:be:56:22:0c:
dc:a7:56:aa:d5:69:08:57:ea:95:77:20:75:a6:83:
59:f9:b6:41:1e:d3:80:2f:11:3e:3c:d6:a1:b1:37:
70:bb:e2:40:e0:af:d3:46:51:31:c6:8c:35:07:c4:
d7:67:df:03:cb:aa:9c:c3:db:c0:44:ad:7e:34:d7:
7b:3b:8f:71:de:9f:3e:a0:46:55:0c:b4:48:1e:d4:
23:a0:06:5d:f9:0f:6a:4f:09:9f:de:96:43:3d:0a:
b3:d8:65:c1:95:b8:09:b1:5d:77:83:bf:29:cd:c0:
9a:4e:3f:e8:0b:ab:64:87:6a:f3:7a:83:49:ee:88:
48:94:23:3d:04:fe:a8:98:bf:71:72:57:1f:2c:2d:
dd:1b:66:d7:82:61:95:b5:62:33:fc:9a:75:e6:65:
c1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:67:BE:C6:7B:C8:3F:9E:D1:DE:BA:EE:14:BA:83:D9:77:BD:7E:37
X509v3 Authority Key Identifier:
keyid:52:59:15:B4:C7:24:07:AF:B7:94:1E:5B:E2:94:AC:71:33:B1:07:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c7:a7:79:69:9c:46:c9:c8:3d:f1:0f:da:f7:8a:8a:da:97:
1d:1c:f8:db:f3:08:53:e1:dc:82:6b:3f:33:25:5a:d9:61:4e:
5c:2e:88:27:30:1f:45:e2:ed:c1:cd:a0:c9:e3:27:4e:c3:26:
cb:ff:a7:38:c5:34:1e:57:5a:62:91:16:6f:ef:96:ff:69:6e:
7d:1f:dd:2a:28:1f:9d:4c:11:40:38:13:bf:96:77:1d:43:10:
02:7f:f8:0e:7f:5e:1a:31:4c:fa:cc:3e:e8:66:80:76:9a:bb:
09:70:78:8c:da:0f:08:2f:61:28:ab:fa:2a:5a:1b:a1:10:97:
16:d3:4f:bf:dc:83:09:4f:69:1f:e0:a8:b4:30:76:c5:85:c4:
56:9b:fc:f2:d1:64:7a:9e:eb:23:0b:7d:26:2c:3c:00:74:61:
0d:74:60:2c:22:be:ff:81:46:0c:70:c7:8c:8c:56:d6:0a:8c:
23:95:5b:d6:11:cb:bc:22:76:1e:58:e1:53:89:7a:63:c4:0b:
1c:04:36:57:68:42:a1:b1:84:ec:4d:7a:bc:57:a9:57:c0:4b:
48:e0:ea:fd:00:b5:dc:08:b1:35:41:2e:a7:08:16:2a:8a:66:
7f:4e:2f:f1:8e:15:0f:46:1e:be:95:b3:d5:4e:c7:06:fa:0d:
d1:3f:07:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:23:31 2025 by rpki-client