Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.mft
File: upyRALMvz2LV39ghy9BWq3PS5FU.mft (raw, json)
Hash identifier: 6J8xuXTG8nzkqvJRMvpaONoy1rvf+smrQo8OeNyii3s=
Subject key identifier: 1B:11:F1:D2:04:6E:91:2D:F1:09:8C:AD:3D:9C:4D:99:1D:82:B6:CB
Authority key identifier: BA:9C:91:00:B3:2F:CF:62:D5:DF:D8:21:CB:D0:56:AB:73:D2:E4:55
Certificate issuer: /CN=ba9c9100b32fcf62d5dfd821cbd056ab73d2e455
Certificate serial: 0196B3D93F370EB0252CA22EE484BAFF2472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upyRALMvz2LV39ghy9BWq3PS5FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.mft
Manifest number: 0A9F
Signing time: Fri 09 May 2025 07:01:21 +0000
Manifest this update: Fri 09 May 2025 07:01:21 +0000
Manifest next update: Sat 10 May 2025 07:01:21 +0000
Files and hashes: 1: upyRALMvz2LV39ghy9BWq3PS5FU.crl (hash: onpUYA15G7WR0y9eaIfdSrM2rda4I1oyjmWB95r9m3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/upyRALMvz2LV39ghy9BWq3PS5FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d9:3f:37:0e:b0:25:2c:a2:2e:e4:84:ba:ff:24:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9c9100b32fcf62d5dfd821cbd056ab73d2e455
Validity
Not Before: May 9 07:01:21 2025 GMT
Not After : May 10 07:01:21 2025 GMT
Subject: CN=1b11f1d2046e912df1098cad3d9c4d991d82b6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cb:0d:e1:7d:12:4e:09:fe:d7:1e:f4:f0:6a:
66:92:8f:49:17:8c:4d:21:38:75:71:9e:d9:7c:b2:
88:cf:e1:ad:41:d1:b0:48:39:0b:47:7b:7d:a6:77:
40:f7:48:ba:d4:e3:6b:da:e9:b2:49:52:9c:e6:c3:
80:31:ac:43:82:c1:99:de:8b:36:40:14:bb:e7:10:
0b:5c:4f:ec:52:1b:31:7e:f6:bf:54:76:f6:21:08:
9d:8b:8c:57:a6:29:5b:c4:fe:c9:14:1d:ed:d5:f4:
bb:04:d2:5d:cf:80:e1:df:a5:8b:a7:40:53:d9:b1:
e8:af:8d:c5:d6:5a:42:ad:14:b7:76:11:7b:10:33:
35:3e:04:ab:5c:57:90:44:2a:48:fd:3d:8a:9d:11:
fe:33:f3:96:a2:60:7c:35:67:bf:b3:3c:8f:89:67:
05:ca:20:69:7a:c9:47:32:ce:6c:a0:30:ab:4e:a9:
4d:f7:f7:dd:be:92:e3:bf:44:dc:cb:79:8d:9c:31:
f9:c4:bc:dd:8c:c3:e9:94:0e:7e:20:8f:d5:68:2f:
d5:92:d4:b1:d1:7c:86:a1:e3:de:c9:96:da:d0:55:
e9:39:7e:80:a8:14:fb:0e:3c:b1:33:4a:48:c0:c9:
54:57:8f:15:bb:34:72:43:e9:43:07:59:a9:18:97:
1d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:11:F1:D2:04:6E:91:2D:F1:09:8C:AD:3D:9C:4D:99:1D:82:B6:CB
X509v3 Authority Key Identifier:
keyid:BA:9C:91:00:B3:2F:CF:62:D5:DF:D8:21:CB:D0:56:AB:73:D2:E4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upyRALMvz2LV39ghy9BWq3PS5FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:bf:71:2c:91:68:0f:64:77:bb:d7:3a:dd:66:fb:45:3d:81:
31:90:2e:bd:f3:eb:6f:1d:4f:e9:59:5f:51:7f:53:17:c7:d8:
e5:dd:92:3b:66:bb:05:4e:4b:38:3a:b1:f6:23:7c:ce:e6:69:
62:df:54:23:89:e6:5f:b6:db:2a:b7:04:02:55:94:fb:6f:b0:
46:d9:84:c9:f1:dc:55:de:ca:9f:9b:67:3f:65:77:10:85:f9:
96:81:bf:1b:a3:73:65:09:2d:a3:a8:f6:bb:be:9d:d2:55:f3:
8b:9f:a3:d4:84:77:24:75:02:a0:00:6d:6f:37:93:28:2a:c2:
53:b3:68:6c:4f:6e:09:25:8d:3d:a5:60:01:7a:1e:36:13:26:
09:d0:4f:ba:74:79:8d:a8:a1:bf:cf:ce:91:92:cf:18:0f:e7:
2d:81:bf:cc:ef:4a:9d:a4:41:5d:5d:f6:30:91:fb:b2:0e:a8:
33:4a:e7:60:a0:65:11:55:cb:f2:53:e7:5f:39:40:e4:2a:82:
bd:f8:a2:41:6e:5c:dd:56:5f:b7:7f:59:dc:dd:ad:68:bc:93:
70:ba:bc:5a:c8:a0:8e:1d:3d:7a:e9:a8:20:c8:81:50:c3:72:
b1:94:0d:8f:82:61:5e:de:03:ec:cb:6d:97:f0:4b:9b:f0:1f:
e6:a2:41:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:31:53 2025 by rpki-client