Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
File: UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft (raw, json)
Hash identifier: 11GxK1cNBFZ98lAbX8pjWy6bVsyStWqSGDgxbfGbZsw=
Subject key identifier: 21:D9:01:E2:0F:09:FE:F0:0E:42:37:A7:9F:52:23:83:92:ED:30:C5
Authority key identifier: 50:1B:52:02:A0:ED:46:F6:41:1E:1E:DA:7C:7B:59:DD:8C:C6:CD:87
Certificate issuer: /CN=501b5202a0ed46f6411e1eda7c7b59dd8cc6cd87
Certificate serial: 0196C871A381611E6EAF14184F769B97A6A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
Manifest number: 128C
Signing time: Tue 13 May 2025 07:00:12 +0000
Manifest this update: Tue 13 May 2025 07:00:12 +0000
Manifest next update: Wed 14 May 2025 07:00:12 +0000
Files and hashes: 1: UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl (hash: ZgG3Rkg0c6KZjmIqZIDH6ld5wtrrGpkHYq+Tml1R++g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 07:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:71:a3:81:61:1e:6e:af:14:18:4f:76:9b:97:a6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501b5202a0ed46f6411e1eda7c7b59dd8cc6cd87
Validity
Not Before: May 13 07:00:12 2025 GMT
Not After : May 14 07:00:12 2025 GMT
Subject: CN=21d901e20f09fef00e4237a79f52238392ed30c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c0:d3:7a:d4:1b:41:79:e5:1d:b4:ee:16:ed:
52:8d:df:fe:9b:9c:1c:7d:0a:e9:e8:dc:27:03:be:
d3:3a:23:61:40:d1:25:d4:ab:76:39:dc:66:76:63:
35:95:25:a9:44:3f:8f:56:43:6f:0e:70:1a:52:c3:
f3:52:8b:9c:57:49:c6:ba:8d:96:ce:45:df:16:7e:
47:d9:55:40:35:3b:90:5f:ef:bb:bc:45:85:5b:20:
f9:00:10:ee:f4:ce:97:6c:bf:78:32:dc:c5:f9:77:
bd:8c:00:53:2c:60:18:95:a8:1a:a6:55:18:62:57:
45:f3:31:45:7a:bf:e0:19:77:90:6c:10:a4:d0:c2:
fe:b8:27:91:59:5d:c8:ca:59:91:e7:25:86:b1:86:
22:4e:67:4d:94:be:ec:c6:73:f7:5c:60:f7:35:4b:
2b:f6:cb:01:09:64:9b:e7:85:18:6e:14:de:2a:f9:
93:5d:a7:e7:06:e1:07:5b:06:b8:66:1a:0c:9f:db:
5d:1f:64:71:2a:6c:59:a7:6c:e5:8b:a2:c8:49:52:
30:73:10:c4:40:b1:a8:e1:0a:dc:00:2e:27:5b:0b:
3c:19:75:c9:53:ba:61:d5:ef:4b:c3:db:73:68:ea:
0f:e4:e9:ad:1e:3e:bb:05:fb:27:39:30:3e:65:b8:
91:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D9:01:E2:0F:09:FE:F0:0E:42:37:A7:9F:52:23:83:92:ED:30:C5
X509v3 Authority Key Identifier:
keyid:50:1B:52:02:A0:ED:46:F6:41:1E:1E:DA:7C:7B:59:DD:8C:C6:CD:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e6:3c:e9:f6:e8:a1:2d:6b:b0:9c:ba:e5:9f:6e:ae:5c:db:
57:53:49:68:3d:5e:86:f3:90:6d:b6:2f:3b:ee:73:9a:a2:84:
da:71:dd:37:da:4d:7b:4d:b6:27:c9:10:36:06:8d:6d:29:77:
ff:c2:85:23:5f:f4:cb:30:54:bc:b5:41:bb:b4:b4:13:18:c5:
78:79:37:b5:95:21:ce:3c:38:8b:90:01:33:fd:ba:80:e5:3f:
ad:a4:75:f0:3a:c2:c4:55:07:12:11:10:46:2d:ab:0f:69:4d:
87:a3:19:9f:93:3a:2a:ab:fc:ee:76:3f:4b:c6:4f:cd:7b:19:
2f:ee:3e:5f:8f:00:91:3e:81:cc:07:1c:90:38:43:05:45:f0:
94:63:ce:fc:6e:32:1b:90:8b:90:7e:3d:e4:fb:cf:18:0a:ab:
e1:bd:53:9e:4e:48:31:f2:85:97:ea:c3:21:bb:c5:58:02:74:
87:2f:63:8a:4a:ea:23:2a:20:c2:1b:34:a3:d6:fc:7d:f1:cc:
b0:67:85:c9:f0:81:74:70:df:26:b7:06:8c:60:a5:73:49:79:
07:4c:6c:d1:90:65:d8:40:3f:0a:7c:38:97:1e:4b:96:f3:08:
ba:47:83:6e:e7:a4:39:72:4d:fa:ba:6e:ba:8b:c9:12:3f:a2:
f3:85:6e:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbIcaOBYR5urxQYT3abl6agMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMWI1MjAyYTBlZDQ2ZjY0MTFlMWVkYTdjN2I1OWRkOGNj
NmNkODcwHhcNMjUwNTEzMDcwMDEyWhcNMjUwNTE0MDcwMDEyWjAzMTEwLwYDVQQD
EygyMWQ5MDFlMjBmMDlmZWYwMGU0MjM3YTc5ZjUyMjM4MzkyZWQzMGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8DTetQbQXnlHbTuFu1Sjd/+m5wc
fQrp6NwnA77TOiNhQNEl1Kt2OdxmdmM1lSWpRD+PVkNvDnAaUsPzUoucV0nGuo2W
zkXfFn5H2VVANTuQX++7vEWFWyD5ABDu9M6XbL94MtzF+Xe9jABTLGAYlagaplUY
YldF8zFFer/gGXeQbBCk0ML+uCeRWV3IylmR5yWGsYYiTmdNlL7sxnP3XGD3NUsr
9ssBCWSb54UYbhTeKvmTXafnBuEHWwa4ZhoMn9tdH2RxKmxZp2zli6LISVIwcxDE
QLGo4QrcAC4nWws8GXXJU7ph1e9Lw9tzaOoP5OmtHj67BfsnOTA+ZbiR6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHZAeIPCf7wDkI3p59SI4OS7TDFMB8GA1UdIwQY
MBaAFFAbUgKg7Ub2QR4e2nx7Wd2Mxs2HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUJ0U0FxRHRSdlpCSGg3YWZIdFozWXpHelljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8zNmIxZjMtNmM5Zi00MjQ5LWEwYzct
YjE3NmQ2YmI1N2RiLzEvVUJ0U0FxRHRSdlpCSGg3YWZIdFozWXpHelljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8zNmIxZjMtNmM5Zi00MjQ5LWEwYzctYjE3NmQ2YmI1N2Ri
LzEvVUJ0U0FxRHRSdlpCSGg3YWZIdFozWXpHelljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFOY86fbo
oS1rsJy65Z9urlzbV1NJaD1ehvOQbbYvO+5zmqKE2nHdN9pNe022J8kQNgaNbSl3
/8KFI1/0yzBUvLVBu7S0ExjFeHk3tZUhzjw4i5ABM/26gOU/raR18DrCxFUHEhEQ
Ri2rD2lNh6MZn5M6Kqv87nY/S8ZPzXsZL+4+X48AkT6BzAcckDhDBUXwlGPO/G4y
G5CLkH495PvPGAqr4b1Tnk5IMfKFl+rDIbvFWAJ0hy9jikrqIyogwhs0o9b8ffHM
sGeFyfCBdHDfJrcGjGClc0l5B0xs0ZBl2EA/Cnw4lx5LlvMIukeDbuekOXJN+rpu
uovJEj+i84VuGg==
-----END CERTIFICATE-----
Generated at Tue May 13 13:18:20 2025 by rpki-client