Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft
File: uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft (raw, json)
Hash identifier: wXZx6brikEfntHGFb6U7v1TF4h8opJDMFIELDUDKZ2o=
Subject key identifier: 21:D3:60:B2:85:A1:0A:EA:AD:15:E3:3E:B9:73:E8:66:EA:1A:FC:B7
Authority key identifier: B9:6A:ED:42:6F:B1:A0:63:25:A2:63:79:21:A4:B5:AB:98:A1:A5:94
Certificate issuer: /CN=b96aed426fb1a06325a2637921a4b5ab98a1a594
Certificate serial: 0196BC0028F660E9CF69B3DFDBF3E3DF24F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uWrtQm-xoGMlomN5IaS1q5ihpZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft
Manifest number: 0BFB
Signing time: Sat 10 May 2025 21:00:49 +0000
Manifest this update: Sat 10 May 2025 21:00:49 +0000
Manifest next update: Sun 11 May 2025 21:00:49 +0000
Files and hashes: 1: uWrtQm-xoGMlomN5IaS1q5ihpZQ.crl (hash: ck8UD//1+phWwUX2dJ/RlLXPJ/4eHwCR8JJfUdh6T3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uWrtQm-xoGMlomN5IaS1q5ihpZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:00:28:f6:60:e9:cf:69:b3:df:db:f3:e3:df:24:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b96aed426fb1a06325a2637921a4b5ab98a1a594
Validity
Not Before: May 10 21:00:49 2025 GMT
Not After : May 11 21:00:49 2025 GMT
Subject: CN=21d360b285a10aeaad15e33eb973e866ea1afcb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e9:a1:c2:b5:be:ed:86:eb:db:8d:68:cb:05:
c3:e5:0b:59:81:02:5e:36:35:29:de:16:32:ba:63:
33:d3:87:ff:de:d1:ef:47:f2:91:4e:f7:41:26:15:
2e:53:d0:6e:1e:63:b3:0a:b5:b2:5d:a5:0a:72:54:
68:ac:9a:dc:ab:13:d3:ce:c3:dc:11:43:2c:ff:eb:
4b:5d:3e:53:02:c6:67:28:7d:1b:b3:65:20:f7:90:
3c:2f:61:d0:15:12:a1:c0:1b:17:8e:ee:e8:18:af:
93:8a:80:ba:30:6d:9d:be:5e:41:4f:54:fa:10:ff:
18:f5:fa:68:80:09:f9:40:c5:f3:e2:7a:5e:e8:e9:
5c:e0:f8:97:6b:16:21:e1:e3:19:c5:b5:e2:42:51:
c7:3b:c6:ce:e1:c1:f9:dc:97:c4:5d:fc:59:ce:45:
ae:91:fb:6c:b2:1e:09:74:16:bb:69:95:f2:56:9b:
03:4e:d5:6e:12:9d:c7:5c:7a:eb:37:d3:03:f7:3b:
81:52:54:e3:3c:f0:64:5c:c8:2f:e1:17:02:db:df:
9e:06:57:5e:61:d9:6d:66:04:d8:84:a3:d5:e6:22:
8b:22:e9:6b:50:51:40:60:9a:d2:2a:c5:00:d6:99:
82:ec:81:be:c1:09:71:3c:32:d1:71:e8:9d:42:77:
20:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D3:60:B2:85:A1:0A:EA:AD:15:E3:3E:B9:73:E8:66:EA:1A:FC:B7
X509v3 Authority Key Identifier:
keyid:B9:6A:ED:42:6F:B1:A0:63:25:A2:63:79:21:A4:B5:AB:98:A1:A5:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWrtQm-xoGMlomN5IaS1q5ihpZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d8:39:12:3f:5b:6a:7d:34:bb:d9:2c:5a:90:9c:63:23:8b:
39:7d:61:f7:61:8b:34:fb:a2:19:d7:dc:b3:16:04:15:73:92:
64:06:20:11:41:37:7e:ce:f0:9d:68:02:f5:78:b0:7e:d8:a8:
65:19:8e:10:b6:0e:d0:a2:23:1f:32:63:ae:e9:6c:d7:72:60:
13:ca:a3:33:2a:e3:84:70:08:33:2c:b8:e2:47:85:47:9e:90:
c7:b5:d7:ab:36:0b:2b:55:80:9a:31:f0:9b:66:89:31:3e:f8:
a6:d4:58:5e:21:b8:7c:8a:55:d0:7c:e9:c3:27:51:bb:ca:65:
2a:e8:fd:80:7d:17:71:a7:b2:80:89:21:17:94:ae:ca:67:7d:
d3:ee:d9:0f:61:bb:0e:c4:65:a2:28:28:52:7b:96:53:26:9e:
84:5e:15:fd:ce:65:e9:f2:f0:d8:ba:85:a4:c1:9a:86:19:31:
7f:71:8d:f0:7a:1d:ad:05:ef:42:a1:dd:79:80:26:d7:da:ef:
18:3b:50:e9:49:8c:08:89:35:51:05:15:36:59:5a:aa:54:5b:
fa:04:ff:97:14:d5:fb:76:04:db:7b:71:4c:9f:98:68:b4:4a:
ce:d4:e9:69:bf:c2:c8:74:9d:7d:33:4c:5a:56:bf:7b:03:2f:
68:d4:05:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:47:46 2025 by rpki-client