Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
File: UrDyNFHcBfp-z50etB3T0TdWRTs.mft (raw, json)
Hash identifier: zK0+mFlTByGbbj0e9XUX2fqgX8Y9Dwkt8/gATwvtghk=
Subject key identifier: 15:3D:D9:C1:5B:C2:25:24:E5:A1:F4:04:5D:9F:96:5E:D9:9A:E1:F0
Authority key identifier: 52:B0:F2:34:51:DC:05:FA:7E:CF:9D:1E:B4:1D:D3:D1:37:56:45:3B
Certificate issuer: /CN=52b0f23451dc05fa7ecf9d1eb41dd3d13756453b
Certificate serial: 0196BA11BFD409A6F7F21923CB97D9521858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
Manifest number: 152F
Signing time: Sat 10 May 2025 12:00:47 +0000
Manifest this update: Sat 10 May 2025 12:00:47 +0000
Manifest next update: Sun 11 May 2025 12:00:47 +0000
Files and hashes: 1: UrDyNFHcBfp-z50etB3T0TdWRTs.crl (hash: hZIXIJ77+UvclHO4deLncn7QVlT87ETNUZzGdGQN4Lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:bf:d4:09:a6:f7:f2:19:23:cb:97:d9:52:18:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b0f23451dc05fa7ecf9d1eb41dd3d13756453b
Validity
Not Before: May 10 12:00:47 2025 GMT
Not After : May 11 12:00:47 2025 GMT
Subject: CN=153dd9c15bc22524e5a1f4045d9f965ed99ae1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c6:c1:89:f0:4d:d4:00:df:ca:14:dc:0a:3a:
c8:96:96:c6:da:95:c0:20:0d:54:94:61:86:4b:37:
29:8a:52:69:2f:0c:42:a8:bf:be:0e:ad:34:fc:db:
ab:9a:f2:28:f1:b8:da:92:59:b3:46:b3:fc:cb:98:
03:42:1a:c8:6c:5f:c3:d8:ab:4f:c0:55:bb:20:af:
cb:0b:ea:97:09:af:ef:a8:53:2e:cb:4d:c5:25:fe:
5f:bb:1b:d8:25:0f:00:85:9d:14:94:0e:98:18:a8:
99:e9:b8:8e:4c:94:e0:06:9f:9a:3a:67:51:ff:3a:
5f:56:11:73:c1:3c:93:c3:1d:a4:ca:6f:2a:fa:1b:
c4:32:17:75:4b:3c:5c:21:f4:fa:9d:8f:6a:2d:e9:
88:c0:af:0c:8b:70:6c:10:41:e1:ac:83:6a:5b:56:
ad:2c:46:24:7c:ae:c8:ee:cf:83:ef:eb:fb:3b:d4:
92:1c:24:57:d3:4a:db:88:b4:f5:85:60:af:0c:23:
85:9a:80:86:39:fc:11:28:26:91:8e:8b:b2:f9:9d:
a2:82:35:d3:9f:d1:83:74:37:39:b1:21:7b:43:f4:
5b:a2:eb:71:ae:52:36:6a:17:d7:52:9b:46:cb:f6:
d8:b9:b4:db:89:8c:9a:b6:ad:c9:76:9a:1d:ff:8a:
a6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3D:D9:C1:5B:C2:25:24:E5:A1:F4:04:5D:9F:96:5E:D9:9A:E1:F0
X509v3 Authority Key Identifier:
keyid:52:B0:F2:34:51:DC:05:FA:7E:CF:9D:1E:B4:1D:D3:D1:37:56:45:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:57:ea:fb:02:55:1d:60:2f:c7:15:75:96:6c:a0:2b:00:63:
5d:c4:12:66:09:32:54:8d:3b:d7:5c:d5:8a:ce:a9:e1:3c:7d:
44:68:bf:4e:c5:b9:7a:f2:f2:0b:e9:4c:cf:99:1d:8e:11:53:
0b:d5:ab:ae:06:43:a2:f4:02:e6:cd:e9:7f:2d:88:bb:f3:c4:
45:7c:5e:15:cd:13:d0:40:32:26:e1:28:b1:fc:f2:ff:b6:6a:
54:54:29:2d:8a:ed:fe:ed:bf:3f:57:bd:d4:c9:e0:53:ac:cd:
7e:44:e5:23:ac:b0:a8:76:49:cb:b2:17:11:c9:ea:6b:28:e8:
44:60:38:a2:16:66:49:68:40:9e:4f:34:ea:e3:59:b0:d4:86:
54:aa:ec:a5:4a:bd:75:42:91:fb:d6:be:f8:4d:c8:a0:02:3b:
75:8a:c6:87:56:3d:be:11:17:af:cb:8e:b9:d8:6b:85:74:6d:
2f:f9:20:6a:10:6e:e2:58:7a:a0:0e:de:d0:31:dc:92:3a:ea:
0f:3b:8b:18:cf:b6:5d:c0:66:bc:2b:07:a9:dc:1d:52:71:39:
b5:3c:53:57:51:92:e6:0c:47:6d:11:14:95:81:d6:33:7f:4c:
9c:83:30:6d:42:cf:94:48:84:56:cf:bc:4d:09:69:53:98:34:
88:3e:d1:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6Eb/UCab38hkjy5fZUhhYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYjBmMjM0NTFkYzA1ZmE3ZWNmOWQxZWI0MWRkM2QxMzc1
NjQ1M2IwHhcNMjUwNTEwMTIwMDQ3WhcNMjUwNTExMTIwMDQ3WjAzMTEwLwYDVQQD
EygxNTNkZDljMTViYzIyNTI0ZTVhMWY0MDQ1ZDlmOTY1ZWQ5OWFlMWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8bBifBN1ADfyhTcCjrIlpbG2pXA
IA1UlGGGSzcpilJpLwxCqL++Dq00/NurmvIo8bjaklmzRrP8y5gDQhrIbF/D2KtP
wFW7IK/LC+qXCa/vqFMuy03FJf5fuxvYJQ8AhZ0UlA6YGKiZ6biOTJTgBp+aOmdR
/zpfVhFzwTyTwx2kym8q+hvEMhd1SzxcIfT6nY9qLemIwK8Mi3BsEEHhrINqW1at
LEYkfK7I7s+D7+v7O9SSHCRX00rbiLT1hWCvDCOFmoCGOfwRKCaRjouy+Z2igjXT
n9GDdDc5sSF7Q/RboutxrlI2ahfXUptGy/bYubTbiYyatq3Jdpod/4qm/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBU92cFbwiUk5aH0BF2fll7ZmuHwMB8GA1UdIwQY
MBaAFFKw8jRR3AX6fs+dHrQd09E3VkU7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXJEeU5GSGNCZnAtejUwZXRCM1QwVGRXUlRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81M2Q5MjQtNGRiZC00NTAxLWJmYjMt
ODQwZjA5ZWQ0OGQ1LzEvVXJEeU5GSGNCZnAtejUwZXRCM1QwVGRXUlRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC81M2Q5MjQtNGRiZC00NTAxLWJmYjMtODQwZjA5ZWQ0OGQ1
LzEvVXJEeU5GSGNCZnAtejUwZXRCM1QwVGRXUlRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFlfq+wJV
HWAvxxV1lmygKwBjXcQSZgkyVI0711zVis6p4Tx9RGi/TsW5evLyC+lMz5kdjhFT
C9WrrgZDovQC5s3pfy2Iu/PERXxeFc0T0EAyJuEosfzy/7ZqVFQpLYrt/u2/P1e9
1MngU6zNfkTlI6ywqHZJy7IXEcnqayjoRGA4ohZmSWhAnk806uNZsNSGVKrspUq9
dUKR+9a++E3IoAI7dYrGh1Y9vhEXr8uOudhrhXRtL/kgahBu4lh6oA7e0DHckjrq
DzuLGM+2XcBmvCsHqdwdUnE5tTxTV1GS5gxHbREUlYHWM39MnIMwbULPlEiEVs+8
TQlpU5g0iD7R5w==
-----END CERTIFICATE-----
Generated at Sat May 10 22:26:47 2025 by rpki-client