Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
File: uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft (raw, json)
Hash identifier: on7nDwENlS33mRverPQxAKc0euYHxnkXK05Uh3k1ThI=
Subject key identifier: 6B:E0:60:DA:4E:5E:CA:54:D8:6E:21:AD:4A:C6:48:22:0B:59:23:A8
Authority key identifier: B9:14:53:15:B4:4C:B6:5D:2A:79:1A:0A:E5:82:36:64:D0:C4:44:5E
Certificate issuer: /CN=b9145315b44cb65d2a791a0ae5823664d0c4445e
Certificate serial: 0196A6537E61A6981EDB3A44F7A4DA1B13F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
Manifest number: 1522
Signing time: Tue 06 May 2025 16:00:11 +0000
Manifest this update: Tue 06 May 2025 16:00:11 +0000
Manifest next update: Wed 07 May 2025 16:00:11 +0000
Files and hashes: 1: uRRTFbRMtl0qeRoK5YI2ZNDERF4.crl (hash: Y6omZRER6Gr8mTaa2IrJquuVqw0zTDLNOFraBZgaWjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:53:7e:61:a6:98:1e:db:3a:44:f7:a4:da:1b:13:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9145315b44cb65d2a791a0ae5823664d0c4445e
Validity
Not Before: May 6 16:00:11 2025 GMT
Not After : May 7 16:00:11 2025 GMT
Subject: CN=6be060da4e5eca54d86e21ad4ac648220b5923a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:74:cf:54:51:de:07:89:f1:bb:3a:21:6c:94:
18:30:2a:2c:50:38:44:d5:93:39:ae:36:20:b8:cf:
50:65:4f:dd:73:80:19:d3:ce:87:a2:3b:bb:fd:b7:
d2:be:9d:a0:74:86:2f:0c:f6:3b:a7:e5:b4:59:55:
54:63:bd:e0:20:49:9d:f6:82:57:15:3f:29:b7:dc:
39:1c:aa:77:40:c2:34:ad:91:92:2a:4a:cd:86:a7:
9c:aa:a8:0e:19:d2:f4:69:0b:ef:07:5d:a9:a3:22:
89:b0:63:2c:4c:79:1c:12:bb:c9:96:5c:3f:64:78:
11:11:49:0e:f7:50:1c:45:4b:8a:b0:1c:d3:bf:13:
a1:78:aa:22:cc:9a:a7:f3:5c:cb:14:6a:e8:44:5a:
02:1a:37:ac:ea:eb:60:50:ff:d3:00:b4:0c:09:59:
7d:8b:fa:9a:6a:19:d6:d8:58:8f:c4:51:ec:f3:3f:
71:96:f7:d4:9a:e2:5f:fd:70:ed:75:5c:b7:4d:54:
b3:c1:c7:ee:76:55:e8:99:f3:74:5b:13:8b:81:2e:
3c:b0:f4:88:eb:20:0f:c8:db:27:70:4f:ac:f0:1b:
1b:04:8b:20:50:34:6c:dc:aa:89:8a:6a:e9:47:7b:
39:25:22:8f:5e:a3:c7:2d:b2:08:4d:33:d3:d6:62:
2d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E0:60:DA:4E:5E:CA:54:D8:6E:21:AD:4A:C6:48:22:0B:59:23:A8
X509v3 Authority Key Identifier:
keyid:B9:14:53:15:B4:4C:B6:5D:2A:79:1A:0A:E5:82:36:64:D0:C4:44:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:45:b0:8e:c9:8a:fc:3b:96:82:47:ff:83:1d:ee:19:cd:c3:
bd:b9:3f:0a:1a:6a:d9:3b:d7:19:7d:5a:d3:6c:40:bc:34:a3:
46:b2:ed:f8:fb:e0:4c:38:66:cb:de:92:3f:26:ea:fd:a3:2c:
14:0c:c6:9e:cf:d9:f0:63:01:96:74:69:92:cd:02:9a:47:86:
36:ae:ee:aa:65:43:aa:81:c6:5b:3d:1c:8e:14:bb:1d:d6:9f:
e5:55:6a:5e:48:3c:82:09:89:f3:15:eb:be:31:27:f9:87:d1:
7f:30:f5:ea:a2:ea:a4:51:82:f1:87:df:e2:22:0e:dd:2f:52:
d7:3f:48:71:31:70:b0:8b:c0:c3:45:41:d5:f4:05:b9:be:ce:
2e:7b:88:f0:54:0d:c4:15:99:f1:23:40:73:be:f8:4d:58:dd:
7b:b0:3c:9e:9a:28:5b:24:98:c6:a7:ed:56:5f:ef:8c:02:33:
2c:e4:43:d2:e7:d5:6a:95:66:56:3c:a9:a4:b9:ea:41:12:c1:
7c:72:bc:6e:d6:bf:e7:30:54:3e:6d:9c:13:ad:d5:dd:8a:77:
c3:7e:fd:78:bd:83:83:c0:bc:ab:fd:2d:0b:70:00:31:bb:b1:
0e:0d:89:ab:00:9f:1d:94:fe:3e:48:6e:54:f5:5f:42:bc:17:
80:3e:6e:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZamU35hppge2zpE96TaGxP5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTQ1MzE1YjQ0Y2I2NWQyYTc5MWEwYWU1ODIzNjY0ZDBj
NDQ0NWUwHhcNMjUwNTA2MTYwMDExWhcNMjUwNTA3MTYwMDExWjAzMTEwLwYDVQQD
Eyg2YmUwNjBkYTRlNWVjYTU0ZDg2ZTIxYWQ0YWM2NDgyMjBiNTkyM2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHTPVFHeB4nxuzohbJQYMCosUDhE
1ZM5rjYguM9QZU/dc4AZ086Hoju7/bfSvp2gdIYvDPY7p+W0WVVUY73gIEmd9oJX
FT8pt9w5HKp3QMI0rZGSKkrNhqecqqgOGdL0aQvvB12poyKJsGMsTHkcErvJllw/
ZHgREUkO91AcRUuKsBzTvxOheKoizJqn81zLFGroRFoCGjes6utgUP/TALQMCVl9
i/qaahnW2FiPxFHs8z9xlvfUmuJf/XDtdVy3TVSzwcfudlXomfN0WxOLgS48sPSI
6yAPyNsncE+s8BsbBIsgUDRs3KqJimrpR3s5JSKPXqPHLbIITTPT1mItTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvgYNpOXspU2G4hrUrGSCILWSOoMB8GA1UdIwQY
MBaAFLkUUxW0TLZdKnkaCuWCNmTQxEReMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJSVEZiUk10bDBxZVJvSzVZSTJaTkRFUkY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS80Zjg4N2UtM2Y2Yy00OGEzLWJiMDMt
ZGZiOTQ2ZDE3ZDBjLzEvdVJSVEZiUk10bDBxZVJvSzVZSTJaTkRFUkY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS80Zjg4N2UtM2Y2Yy00OGEzLWJiMDMtZGZiOTQ2ZDE3ZDBj
LzEvdVJSVEZiUk10bDBxZVJvSzVZSTJaTkRFUkY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgEWwjsmK
/DuWgkf/gx3uGc3Dvbk/Chpq2TvXGX1a02xAvDSjRrLt+PvgTDhmy96SPybq/aMs
FAzGns/Z8GMBlnRpks0CmkeGNq7uqmVDqoHGWz0cjhS7Hdaf5VVqXkg8ggmJ8xXr
vjEn+YfRfzD16qLqpFGC8Yff4iIO3S9S1z9IcTFwsIvAw0VB1fQFub7OLnuI8FQN
xBWZ8SNAc774TVjde7A8npooWySYxqftVl/vjAIzLORD0ufVapVmVjyppLnqQRLB
fHK8bta/5zBUPm2cE63V3Yp3w379eL2Dg8C8q/0tC3AAMbuxDg2JqwCfHZT+Pkhu
VPVfQrwXgD5uQQ==
-----END CERTIFICATE-----
Generated at Tue May 6 19:14:13 2025 by rpki-client