Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
File: UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft (raw, json)
Hash identifier: 9yEbqPLH1YUHE7h6Hwp0MsVJ9lE0yAywi3GFydQL4Gw=
Subject key identifier: 2D:32:0E:74:49:A9:AD:2B:51:F7:6C:B3:A4:53:5C:A4:2F:A3:7C:1D
Authority key identifier: 50:1B:52:02:A0:ED:46:F6:41:1E:1E:DA:7C:7B:59:DD:8C:C6:CD:87
Certificate issuer: /CN=501b5202a0ed46f6411e1eda7c7b59dd8cc6cd87
Certificate serial: 0197B7EAB6C7F8EDBFF383282C7E264A0FB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
Manifest number: 1308
Signing time: Sat 28 Jun 2025 19:01:42 +0000
Manifest this update: Sat 28 Jun 2025 19:01:42 +0000
Manifest next update: Sun 29 Jun 2025 19:01:42 +0000
Files and hashes: 1: UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl (hash: ay20qqNaGfEti7fv3FJ4IhM+bewoquQBETerO0qgwtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:b6:c7:f8:ed:bf:f3:83:28:2c:7e:26:4a:0f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501b5202a0ed46f6411e1eda7c7b59dd8cc6cd87
Validity
Not Before: Jun 28 19:01:42 2025 GMT
Not After : Jun 29 19:01:42 2025 GMT
Subject: CN=2d320e7449a9ad2b51f76cb3a4535ca42fa37c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:32:80:cc:e5:04:e6:cb:d8:36:10:1c:66:50:
44:83:1a:0e:b5:ff:fa:db:18:c7:f0:1a:76:8e:89:
a8:22:bc:3a:e6:4e:e2:c0:90:38:70:65:0d:f3:cb:
2f:7c:94:1c:9b:03:2d:cb:19:7c:43:0d:4f:41:f3:
0b:86:32:06:b2:b7:f9:46:8c:22:52:20:a8:b1:b0:
43:3b:53:6e:f8:a2:11:70:bb:4b:e6:97:83:61:ca:
96:dc:42:97:4f:46:a2:f4:c6:9e:1b:87:81:01:45:
86:07:e5:d4:65:a7:f2:18:8d:b4:9c:89:9b:4a:3e:
a3:31:83:6a:cc:aa:cf:1d:bb:da:3a:57:22:d7:59:
18:73:f2:36:f6:71:76:f3:f9:7f:97:57:53:89:3b:
a9:fc:dc:54:ac:a9:c6:90:53:69:fd:69:10:d2:c2:
5d:66:b9:8d:db:1f:49:61:9e:f0:6b:07:3e:cc:ea:
32:b9:fe:a2:f3:3a:42:fe:ed:69:30:b3:c2:31:f4:
f8:ed:36:cd:a7:fc:ab:0c:43:ef:30:7e:92:9a:bc:
d6:b6:ba:2e:e3:28:4f:36:1a:b9:8b:5f:1f:da:35:
fd:b8:78:51:e8:59:99:73:27:73:7c:0d:29:ae:32:
fa:4a:8f:da:57:b5:cb:92:9a:82:72:97:d9:4e:32:
19:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:32:0E:74:49:A9:AD:2B:51:F7:6C:B3:A4:53:5C:A4:2F:A3:7C:1D
X509v3 Authority Key Identifier:
keyid:50:1B:52:02:A0:ED:46:F6:41:1E:1E:DA:7C:7B:59:DD:8C:C6:CD:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:9d:07:75:96:38:0e:5a:bc:25:42:03:1d:6f:9e:10:04:fa:
1b:de:9e:b6:1b:60:df:4d:98:b1:3f:f6:91:62:ef:c8:7f:56:
17:08:07:5d:7e:17:a1:8a:a4:27:49:6f:a4:1a:c5:b6:bb:40:
10:df:5a:7b:df:b4:38:ed:9c:ed:fc:71:23:bb:e0:1e:8a:cf:
22:63:0c:bf:4c:3c:34:bb:34:cd:d5:1c:40:38:c5:1f:b5:b1:
d1:08:d9:04:b8:30:70:35:fc:75:86:18:98:18:ae:77:15:38:
8d:17:3d:c2:30:4e:20:62:2d:e0:04:6a:f0:b2:68:ca:24:85:
c4:b7:26:54:f9:59:f0:08:d2:32:6c:3d:7b:c7:7c:94:bb:80:
1d:d8:b1:47:ce:33:bc:3d:0b:8e:3d:50:8f:25:9b:a9:8b:04:
05:8f:5a:6f:30:89:66:8f:f6:73:48:2d:56:1f:0c:3a:9b:eb:
33:8f:b1:85:ba:a6:89:6f:ca:41:2b:00:70:ea:06:17:bd:0b:
1e:ec:ad:41:4e:76:39:df:13:e6:f1:34:42:f7:86:9b:93:3a:
15:a8:1f:80:56:59:ec:cf:31:d8:1d:d6:2b:10:32:8a:a7:d6:
97:44:ae:83:05:67:ed:66:04:56:09:04:14:18:71:c6:b2:37:
b8:ea:6a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:28:19 2025 by rpki-client