Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
File: kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft (raw, json)
Hash identifier: smwVfFf769LGYtHBJNdb4PEQSf+Eaj1pOpyHEXlwRe4=
Subject key identifier: F7:49:7A:15:1C:78:27:98:17:F3:9E:0F:10:03:01:CD:F6:73:5E:9C
Authority key identifier: 91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63
Certificate issuer: /CN=9143c5f48c77a79c985f5e5362e082ad54e23063
Certificate serial: 0196BD810055FB0FAF0BFDE181B0D4354530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
Manifest number: 0C19
Signing time: Sun 11 May 2025 04:01:10 +0000
Manifest this update: Sun 11 May 2025 04:01:10 +0000
Manifest next update: Mon 12 May 2025 04:01:10 +0000
Files and hashes: 1: kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl (hash: w40PWIAVrxeG+cJzCsoptcvuGwLVDBFRFvvgx7/qcIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:81:00:55:fb:0f:af:0b:fd:e1:81:b0:d4:35:45:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9143c5f48c77a79c985f5e5362e082ad54e23063
Validity
Not Before: May 11 04:01:10 2025 GMT
Not After : May 12 04:01:10 2025 GMT
Subject: CN=f7497a151c78279817f39e0f100301cdf6735e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4a:3b:88:05:4f:ad:9e:39:dd:e2:23:84:36:
17:8e:15:f7:ac:48:ad:c4:55:cd:ff:77:23:05:5e:
33:64:57:4e:3b:e9:4a:34:3b:53:f4:38:e3:f9:e9:
06:6b:7f:10:aa:06:fd:15:c0:01:f7:73:0e:2b:b7:
2c:76:dd:ec:4f:bd:84:9d:30:4a:de:51:7e:9c:82:
bc:73:57:73:22:d4:5a:ef:87:19:d5:f2:8c:d0:13:
2c:fa:12:9b:e3:01:98:50:b8:24:f7:88:b8:9c:2b:
90:f1:f2:a7:a1:cd:3d:c9:80:9b:6a:ed:14:de:10:
16:2f:1b:bb:76:d9:65:a4:b1:67:9e:be:61:10:71:
a7:28:f6:3e:a0:8b:f8:87:ae:52:7b:9a:88:4d:0e:
e0:ab:a7:6d:9f:86:76:ac:16:b2:a9:d8:0c:6b:48:
1f:be:fa:14:6a:a9:d4:31:da:f0:dd:10:99:da:6c:
13:31:5c:2a:bc:90:97:e8:10:48:0e:bc:9d:79:35:
28:cb:3b:83:46:87:65:a8:45:5e:26:14:44:e7:64:
67:d2:7a:5e:93:ec:46:63:f4:40:f8:93:3d:a9:14:
49:99:06:9f:b1:e2:5b:87:36:8a:68:ff:8e:ca:51:
18:28:2c:cd:ec:45:d6:9d:3b:e0:79:f6:cf:3c:7a:
0f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:49:7A:15:1C:78:27:98:17:F3:9E:0F:10:03:01:CD:F6:73:5E:9C
X509v3 Authority Key Identifier:
keyid:91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:16:6d:50:4f:ff:65:12:82:64:ec:b9:48:33:2a:33:17:44:
1a:78:ab:2b:d5:14:1f:eb:6e:5b:84:8d:9d:5a:27:ac:16:3d:
ff:37:51:e6:d6:34:66:56:c2:3a:13:41:87:45:71:99:db:a1:
f8:fd:b8:b6:38:76:92:6d:1a:31:00:05:69:a5:09:5f:6b:9b:
70:0a:17:84:e2:95:06:e1:80:8a:ea:c7:66:d6:53:e1:fe:32:
71:ac:a8:87:80:69:3f:95:3a:58:18:c4:72:77:6a:b2:e9:00:
76:d9:a7:8a:e2:4e:13:25:1c:d1:70:f9:a4:63:fc:29:14:8b:
f9:f7:58:72:15:42:dd:2d:75:71:96:a2:ea:44:27:10:47:16:
82:f3:13:5c:7f:25:6f:d4:6f:d6:f6:0c:fb:fa:f0:09:59:aa:
dc:6b:9b:be:90:ce:51:77:9d:aa:5d:3e:b2:fd:0e:b0:e3:ce:
9b:03:37:13:ae:70:f4:c6:e9:3c:06:6c:36:b6:ea:87:5a:27:
42:90:11:a0:0e:42:51:46:2e:e6:73:24:de:fc:94:85:03:2f:
1e:1a:8a:b6:c8:06:5f:fa:1c:bf:f5:f2:ac:5a:54:37:32:b2:
10:21:33:1c:72:04:84:07:2d:1a:3a:38:f7:ec:a8:32:ac:52:
21:17:5e:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9gQBV+w+vC/3hgbDUNUUwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNDNjNWY0OGM3N2E3OWM5ODVmNWU1MzYyZTA4MmFkNTRl
MjMwNjMwHhcNMjUwNTExMDQwMTEwWhcNMjUwNTEyMDQwMTEwWjAzMTEwLwYDVQQD
EyhmNzQ5N2ExNTFjNzgyNzk4MTdmMzllMGYxMDAzMDFjZGY2NzM1ZTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUo7iAVPrZ453eIjhDYXjhX3rEit
xFXN/3cjBV4zZFdOO+lKNDtT9Djj+ekGa38Qqgb9FcAB93MOK7csdt3sT72EnTBK
3lF+nIK8c1dzItRa74cZ1fKM0BMs+hKb4wGYULgk94i4nCuQ8fKnoc09yYCbau0U
3hAWLxu7dtllpLFnnr5hEHGnKPY+oIv4h65Se5qITQ7gq6dtn4Z2rBayqdgMa0gf
vvoUaqnUMdrw3RCZ2mwTMVwqvJCX6BBIDrydeTUoyzuDRodlqEVeJhRE52Rn0npe
k+xGY/RA+JM9qRRJmQafseJbhzaKaP+OylEYKCzN7EXWnTvgefbPPHoPFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdJehUceCeYF/OeDxADAc32c16cMB8GA1UdIwQY
MBaAFJFDxfSMd6ecmF9eU2Lggq1U4jBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VQRjlJeDNwNXlZWDE1VFl1Q0NyVlRpTUdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9lYmM4MDQtZTNjNi00MGU2LWJmYmUt
YmRmMzY0YmE3N2NkLzEva1VQRjlJeDNwNXlZWDE1VFl1Q0NyVlRpTUdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9lYmM4MDQtZTNjNi00MGU2LWJmYmUtYmRmMzY0YmE3N2Nk
LzEva1VQRjlJeDNwNXlZWDE1VFl1Q0NyVlRpTUdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAhZtUE//
ZRKCZOy5SDMqMxdEGnirK9UUH+tuW4SNnVonrBY9/zdR5tY0ZlbCOhNBh0Vxmduh
+P24tjh2km0aMQAFaaUJX2ubcAoXhOKVBuGAiurHZtZT4f4ycayoh4BpP5U6WBjE
cndqsukAdtmniuJOEyUc0XD5pGP8KRSL+fdYchVC3S11cZai6kQnEEcWgvMTXH8l
b9Rv1vYM+/rwCVmq3GubvpDOUXedql0+sv0OsOPOmwM3E65w9MbpPAZsNrbqh1on
QpARoA5CUUYu5nMk3vyUhQMvHhqKtsgGX/ocv/XyrFpUNzKyECEzHHIEhActGjo4
9+yoMqxSIRdeKg==
-----END CERTIFICATE-----
Generated at Sun May 11 08:38:45 2025 by rpki-client