Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
File: Uw4xZLFq4JEmhPqpDkORTeH91aU.mft (raw, json)
Hash identifier: bz6pj8S6o3pBVI5/eHPRe5XOc4CZlqkYQIevzq/JTc8=
Subject key identifier: 1E:E0:0A:EB:C8:27:E5:6D:54:01:BB:39:44:BB:1D:21:21:E6:9E:9F
Authority key identifier: 53:0E:31:64:B1:6A:E0:91:26:84:FA:A9:0E:43:91:4D:E1:FD:D5:A5
Certificate issuer: /CN=530e3164b16ae0912684faa90e43914de1fdd5a5
Certificate serial: 0197B8901B7291507A3ED091F69E2A257356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
Manifest number: 0E69
Signing time: Sat 28 Jun 2025 22:02:21 +0000
Manifest this update: Sat 28 Jun 2025 22:02:21 +0000
Manifest next update: Sun 29 Jun 2025 22:02:21 +0000
Files and hashes: 1: Uw4xZLFq4JEmhPqpDkORTeH91aU.crl (hash: YzJvRC3QYYBou48x5q9GbR3i5Rxq/5h0jc7OKgdqySo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:1b:72:91:50:7a:3e:d0:91:f6:9e:2a:25:73:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=530e3164b16ae0912684faa90e43914de1fdd5a5
Validity
Not Before: Jun 28 22:02:21 2025 GMT
Not After : Jun 29 22:02:21 2025 GMT
Subject: CN=1ee00aebc827e56d5401bb3944bb1d2121e69e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f2:5e:2d:92:fb:32:0b:5f:d2:68:c9:6d:d0:
dd:14:8b:33:c4:4a:93:6b:e9:5a:36:45:2a:44:fe:
91:09:9a:7a:06:40:92:56:ce:f9:50:98:7b:69:4d:
0d:5f:8f:63:4f:5a:5e:f6:48:61:cc:0b:d1:ef:23:
9e:55:94:1c:ad:ab:d3:3b:02:8d:db:63:77:74:d8:
f5:ea:eb:46:06:4f:2c:ca:32:dc:cc:60:7d:d2:fe:
2a:2f:0c:9b:f5:aa:00:82:63:6b:b0:4c:f2:26:3c:
53:95:f9:87:df:ac:b0:eb:c9:5b:a6:3a:7e:5e:b2:
9c:47:37:e1:c9:37:6a:7d:e0:e6:d1:7e:89:c8:ee:
84:27:a6:a8:1a:d2:2b:a7:97:cd:f4:7b:a1:17:5f:
ad:53:31:4d:5c:c1:4e:50:68:7a:69:99:11:0a:e7:
71:c0:72:0c:55:53:c2:1e:64:84:ca:db:e1:c8:92:
be:d3:ae:00:d3:eb:3b:04:72:b0:61:4a:9d:05:5e:
e5:f1:c4:f0:12:31:11:a4:ef:4b:16:a7:91:e5:68:
5f:5b:45:dd:f4:42:62:1a:51:70:7c:0c:32:f6:ad:
e7:12:1a:a3:a5:cf:50:2d:75:20:1e:ca:e3:28:8c:
f4:7e:6f:6a:4a:2e:fc:83:03:62:5b:15:a8:a8:b9:
5a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E0:0A:EB:C8:27:E5:6D:54:01:BB:39:44:BB:1D:21:21:E6:9E:9F
X509v3 Authority Key Identifier:
keyid:53:0E:31:64:B1:6A:E0:91:26:84:FA:A9:0E:43:91:4D:E1:FD:D5:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:6f:6d:42:5d:ce:28:95:f6:7c:45:04:c5:28:2a:91:64:fd:
4b:4a:0c:af:b1:43:8c:17:25:67:55:04:5d:e7:7e:62:71:41:
88:27:5a:af:52:15:bf:e9:be:e0:7b:83:ba:e0:23:40:42:29:
c7:1e:cc:2b:a8:a8:fb:ca:89:6f:4f:74:ae:08:a4:ee:62:b8:
7a:ef:b3:ac:c0:76:be:ea:7f:01:d1:e5:cc:37:95:55:11:fa:
1e:5f:97:e4:55:a4:6a:ca:f5:33:36:18:3c:09:5d:ed:09:29:
02:d4:06:c2:2c:1f:71:68:5c:30:c0:81:35:27:9e:c9:0e:78:
0b:26:a2:2e:93:31:ed:d5:0d:f1:51:6f:78:6d:64:ec:92:77:
0c:e6:8c:8f:5f:4e:9a:c3:5a:52:55:91:06:fe:87:5a:39:0a:
7e:87:ff:89:e2:e1:02:54:c7:ce:23:b0:34:61:e5:08:33:48:
9d:e1:ce:55:6c:6f:18:8a:ba:d0:da:62:35:40:a8:d2:e0:32:
91:f7:60:fe:cb:29:fe:89:15:0d:91:86:42:14:ae:f2:ce:20:
d9:5f:27:60:c6:2f:72:04:c1:9f:cd:8d:4e:6e:bb:f4:2f:b1:
5e:13:53:8b:0e:61:e9:72:09:be:28:b2:27:43:2b:e3:c3:fe:
2b:07:6b:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4kBtykVB6PtCR9p4qJXNWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMGUzMTY0YjE2YWUwOTEyNjg0ZmFhOTBlNDM5MTRkZTFm
ZGQ1YTUwHhcNMjUwNjI4MjIwMjIxWhcNMjUwNjI5MjIwMjIxWjAzMTEwLwYDVQQD
EygxZWUwMGFlYmM4MjdlNTZkNTQwMWJiMzk0NGJiMWQyMTIxZTY5ZTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPJeLZL7Mgtf0mjJbdDdFIszxEqT
a+laNkUqRP6RCZp6BkCSVs75UJh7aU0NX49jT1pe9khhzAvR7yOeVZQcravTOwKN
22N3dNj16utGBk8syjLczGB90v4qLwyb9aoAgmNrsEzyJjxTlfmH36yw68lbpjp+
XrKcRzfhyTdqfeDm0X6JyO6EJ6aoGtIrp5fN9HuhF1+tUzFNXMFOUGh6aZkRCudx
wHIMVVPCHmSEytvhyJK+064A0+s7BHKwYUqdBV7l8cTwEjERpO9LFqeR5WhfW0Xd
9EJiGlFwfAwy9q3nEhqjpc9QLXUgHsrjKIz0fm9qSi78gwNiWxWoqLlamQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7gCuvIJ+VtVAG7OUS7HSEh5p6fMB8GA1UdIwQY
MBaAFFMOMWSxauCRJoT6qQ5DkU3h/dWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXc0eFpMRnE0SkVtaFBxcERrT1JUZUg5MWFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9hYjYwYjUtZTcyMC00ODBiLTlhOTAt
MDQ5Y2JiZTJmNzY3LzEvVXc0eFpMRnE0SkVtaFBxcERrT1JUZUg5MWFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9hYjYwYjUtZTcyMC00ODBiLTlhOTAtMDQ5Y2JiZTJmNzY3
LzEvVXc0eFpMRnE0SkVtaFBxcERrT1JUZUg5MWFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU29tQl3O
KJX2fEUExSgqkWT9S0oMr7FDjBclZ1UEXed+YnFBiCdar1IVv+m+4HuDuuAjQEIp
xx7MK6io+8qJb090rgik7mK4eu+zrMB2vup/AdHlzDeVVRH6Hl+X5FWkasr1MzYY
PAld7QkpAtQGwiwfcWhcMMCBNSeeyQ54CyaiLpMx7dUN8VFveG1k7JJ3DOaMj19O
msNaUlWRBv6HWjkKfof/ieLhAlTHziOwNGHlCDNIneHOVWxvGIq60NpiNUCo0uAy
kfdg/ssp/okVDZGGQhSu8s4g2V8nYMYvcgTBn82NTm679C+xXhNTiw5h6XIJviiy
J0Mr48P+KwdrKQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:41:13 2025 by rpki-client