Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft
File: uFK2pNRayK4a7VTG9ayO1v88Hdc.mft (raw, json)
Hash identifier: QvoShMl3Nk3ZgkA1fSJDFE4wxe6sE1OhA/Bd9jzCWjE=
Subject key identifier: 3C:7F:B0:27:0A:D5:E2:20:3E:3E:59:F6:74:D5:41:32:54:76:09:9A
Authority key identifier: B8:52:B6:A4:D4:5A:C8:AE:1A:ED:54:C6:F5:AC:8E:D6:FF:3C:1D:D7
Certificate issuer: /CN=b852b6a4d45ac8ae1aed54c6f5ac8ed6ff3c1dd7
Certificate serial: 0197B6A0DB0571807F8C01EC4E94731324B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFK2pNRayK4a7VTG9ayO1v88Hdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft
Manifest number: 0B49
Signing time: Sat 28 Jun 2025 13:01:24 +0000
Manifest this update: Sat 28 Jun 2025 13:01:24 +0000
Manifest next update: Sun 29 Jun 2025 13:01:24 +0000
Files and hashes: 1: uFK2pNRayK4a7VTG9ayO1v88Hdc.crl (hash: ESHcoinrSY4MSKhN+VQEorxFPT6PRuf7oYslX3ekjlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFK2pNRayK4a7VTG9ayO1v88Hdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:db:05:71:80:7f:8c:01:ec:4e:94:73:13:24:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b852b6a4d45ac8ae1aed54c6f5ac8ed6ff3c1dd7
Validity
Not Before: Jun 28 13:01:24 2025 GMT
Not After : Jun 29 13:01:24 2025 GMT
Subject: CN=3c7fb0270ad5e2203e3e59f674d541325476099a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:53:38:e7:20:76:c7:88:e3:2f:34:03:8b:8c:
0d:5b:f9:71:40:c2:3d:82:b7:a5:41:14:37:47:05:
6d:c6:70:a6:c4:49:28:c5:55:6a:75:5d:ec:05:1c:
75:0a:bb:5b:e4:b0:10:66:a7:4b:a5:db:f7:db:61:
2b:2a:c1:40:2b:00:25:bf:81:0f:c4:24:b0:e3:4c:
15:fb:95:ad:dc:aa:98:c7:ce:fd:bf:d4:78:de:fb:
06:1a:fb:8e:8d:bc:bf:54:2a:63:1f:f4:41:27:ae:
02:6f:68:84:99:81:6a:c7:03:d5:eb:2e:be:ad:02:
d9:49:3e:ba:f8:aa:40:8d:5d:e5:11:26:ce:3b:cd:
5e:be:c2:2f:71:05:14:d7:95:0a:46:cf:94:af:88:
c7:17:f3:97:f5:91:fd:21:5a:21:2d:5e:b6:bc:18:
61:50:c2:75:26:98:2b:c8:ae:6b:12:0d:20:b5:b8:
f4:49:9c:f4:3f:7e:06:22:5a:67:77:a4:86:86:e9:
8e:69:0e:e6:da:81:7c:54:76:e5:32:eb:8f:65:03:
ee:b6:3c:7a:8f:8f:94:ea:60:9c:11:cd:34:61:3a:
bb:3e:e6:bf:0e:fd:37:0c:6e:cf:fa:60:1b:45:f9:
3c:20:2c:cc:01:1c:c6:41:47:23:23:e9:94:ff:ff:
79:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7F:B0:27:0A:D5:E2:20:3E:3E:59:F6:74:D5:41:32:54:76:09:9A
X509v3 Authority Key Identifier:
keyid:B8:52:B6:A4:D4:5A:C8:AE:1A:ED:54:C6:F5:AC:8E:D6:FF:3C:1D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFK2pNRayK4a7VTG9ayO1v88Hdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ac:cc:14:cd:12:df:64:54:34:04:0e:d0:a9:5d:17:db:e2:
fb:fe:08:37:3a:c4:ca:61:ad:16:e7:6a:e3:34:3a:be:84:33:
42:bd:3a:42:8a:3c:93:d6:34:ca:fb:1a:22:8a:f6:71:b3:ff:
06:cc:b4:3d:5e:33:b3:2a:d2:8a:24:21:91:ac:da:9b:a1:33:
55:a6:75:60:d6:ba:85:bc:fd:95:4d:a3:06:4d:b1:dc:c2:64:
5a:9d:09:4a:25:e2:01:17:ce:f6:07:2f:d8:72:c6:7b:b4:5e:
11:2b:71:3e:08:e3:d6:59:1b:b4:e4:41:31:9a:8a:8f:26:c2:
6c:88:c9:8e:0e:31:56:ff:9e:84:d5:c6:04:1c:51:01:8d:36:
e8:15:7f:f9:53:0d:e9:18:06:f8:a2:64:46:dc:53:e2:4e:b2:
af:df:2a:0a:9a:65:18:0b:25:51:e9:01:05:b5:ae:81:0c:51:
64:d7:4b:9f:62:9f:40:ce:21:10:df:65:7d:05:68:ea:a7:d7:
76:1f:a5:ca:43:a9:65:e2:21:fe:32:bb:26:9f:6b:32:a8:fb:
cc:3f:5b:1d:62:f6:fc:ee:6a:b0:8b:56:21:5d:6b:28:7e:8e:
6e:42:ce:39:24:23:72:37:eb:a4:50:b0:b7:17:14:4a:cf:46:
56:14:2a:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oNsFcYB/jAHsTpRzEyS1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NTJiNmE0ZDQ1YWM4YWUxYWVkNTRjNmY1YWM4ZWQ2ZmYz
YzFkZDcwHhcNMjUwNjI4MTMwMTI0WhcNMjUwNjI5MTMwMTI0WjAzMTEwLwYDVQQD
EygzYzdmYjAyNzBhZDVlMjIwM2UzZTU5ZjY3NGQ1NDEzMjU0NzYwOTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVM45yB2x4jjLzQDi4wNW/lxQMI9
grelQRQ3RwVtxnCmxEkoxVVqdV3sBRx1Crtb5LAQZqdLpdv322ErKsFAKwAlv4EP
xCSw40wV+5Wt3KqYx879v9R43vsGGvuOjby/VCpjH/RBJ64Cb2iEmYFqxwPV6y6+
rQLZST66+KpAjV3lESbOO81evsIvcQUU15UKRs+Ur4jHF/OX9ZH9IVohLV62vBhh
UMJ1JpgryK5rEg0gtbj0SZz0P34GIlpnd6SGhumOaQ7m2oF8VHblMuuPZQPutjx6
j4+U6mCcEc00YTq7Pua/Dv03DG7P+mAbRfk8ICzMARzGQUcjI+mU//95JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDx/sCcK1eIgPj5Z9nTVQTJUdgmaMB8GA1UdIwQY
MBaAFLhStqTUWsiuGu1UxvWsjtb/PB3XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUZLMnBOUmF5SzRhN1ZURzlheU8xdjg4SGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lZTQ3OWYtZGQ0ZS00OTJmLWI2YTYt
M2M0NmNkNTgwNzg5LzEvdUZLMnBOUmF5SzRhN1ZURzlheU8xdjg4SGRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9lZTQ3OWYtZGQ0ZS00OTJmLWI2YTYtM2M0NmNkNTgwNzg5
LzEvdUZLMnBOUmF5SzRhN1ZURzlheU8xdjg4SGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEazMFM0S
32RUNAQO0KldF9vi+/4INzrEymGtFudq4zQ6voQzQr06Qoo8k9Y0yvsaIor2cbP/
Bsy0PV4zsyrSiiQhkazam6EzVaZ1YNa6hbz9lU2jBk2x3MJkWp0JSiXiARfO9gcv
2HLGe7ReEStxPgjj1lkbtORBMZqKjybCbIjJjg4xVv+ehNXGBBxRAY026BV/+VMN
6RgG+KJkRtxT4k6yr98qCpplGAslUekBBbWugQxRZNdLn2KfQM4hEN9lfQVo6qfX
dh+lykOpZeIh/jK7Jp9rMqj7zD9bHWL2/O5qsItWIV1rKH6ObkLOOSQjcjfrpFCw
txcUSs9GVhQqjw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:24:19 2025 by rpki-client