Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft
File: uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft (raw, json)
Hash identifier: cFYtXBo8wL9jJzAih1NWzIKEUtKjKpZH4UMArCcFRNY=
Subject key identifier: A7:86:8D:B2:1A:9C:52:2D:DA:57:57:FC:88:74:0F:72:CE:28:28:48
Authority key identifier: B8:15:25:AE:1A:5A:FC:EF:19:3F:5A:40:17:7B:F2:73:88:83:10:78
Certificate issuer: /CN=b81525ae1a5afcef193f5a40177bf27388831078
Certificate serial: 0197CF16788EF1D4C0C4E46079A88A93AA41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft
Manifest number: 02DD
Signing time: Thu 03 Jul 2025 07:00:45 +0000
Manifest this update: Thu 03 Jul 2025 07:00:45 +0000
Manifest next update: Fri 04 Jul 2025 07:00:45 +0000
Files and hashes: 1: uBUlrhpa_O8ZP1pAF3vyc4iDEHg.crl (hash: fe7In5/FdcSGVy35F2f1kUx1S5BN4Ml/7G2rB266fEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:16:78:8e:f1:d4:c0:c4:e4:60:79:a8:8a:93:aa:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81525ae1a5afcef193f5a40177bf27388831078
Validity
Not Before: Jul 3 07:00:45 2025 GMT
Not After : Jul 4 07:00:45 2025 GMT
Subject: CN=a7868db21a9c522dda5757fc88740f72ce282848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0d:a9:df:c4:80:84:fd:50:7a:51:bd:28:5b:
30:36:09:ae:0b:36:bb:95:70:21:4b:8c:b9:2a:79:
96:ed:39:c9:7e:e1:81:86:7f:82:cd:24:67:27:26:
73:e8:cf:cb:61:3c:1d:51:4c:43:0f:ce:ba:d6:a6:
fc:9c:ff:cc:ea:df:59:8e:32:dd:84:67:cb:17:d0:
2d:fa:94:9b:12:61:72:da:da:0b:c5:a2:cf:dc:11:
f2:58:76:f4:2f:8a:02:8d:cb:5c:4d:58:4b:46:a0:
c3:4c:fa:be:bb:03:65:7a:b9:ee:1e:0f:f1:da:f8:
e7:2e:98:12:5a:aa:04:ee:0f:e9:35:ee:8f:b6:32:
d9:fd:50:00:bb:74:6e:ce:c5:e8:9c:f2:dd:72:9e:
df:83:7d:42:ea:90:52:4e:f1:bc:63:7f:b1:4c:ce:
30:57:ce:3d:46:8d:ec:22:97:a0:48:07:c1:37:1c:
c0:a7:b9:9a:f0:67:34:6d:fe:7d:8a:27:8c:83:b7:
f0:83:6d:0e:ab:91:a2:ea:35:b6:68:0c:8a:79:e9:
a3:e2:ec:ed:8a:74:c5:37:71:af:f7:e5:fe:de:e6:
dd:1b:14:69:4f:47:55:76:d7:0b:7d:6c:e7:92:48:
21:a4:fd:4e:51:bd:a3:73:5d:da:49:61:7f:80:b6:
e8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:86:8D:B2:1A:9C:52:2D:DA:57:57:FC:88:74:0F:72:CE:28:28:48
X509v3 Authority Key Identifier:
keyid:B8:15:25:AE:1A:5A:FC:EF:19:3F:5A:40:17:7B:F2:73:88:83:10:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d5:f8:e8:84:d4:e9:76:cd:32:12:89:e2:1f:75:b2:28:16:
c7:09:68:40:57:59:cb:bb:bd:68:dc:80:ae:b7:a3:57:e8:66:
bb:5e:03:bf:73:b2:04:c1:be:49:d9:54:27:c4:70:f6:8a:a1:
a1:4f:da:0b:8c:69:f3:34:aa:97:09:d8:2e:78:72:e8:12:32:
ee:c0:b7:a4:76:61:22:6a:f1:f2:26:7a:2f:b5:53:c7:ff:13:
54:5f:8e:97:db:16:e2:d2:97:f1:4b:00:e2:d8:e5:c4:98:86:
2d:6f:0b:37:52:49:5a:8c:18:76:3e:c2:f9:bf:8c:d4:fd:1b:
16:2f:5b:10:02:42:17:c1:50:65:e7:3d:14:4b:01:6f:df:76:
18:01:1a:db:92:43:a3:1f:42:1f:20:cf:2b:84:a8:1d:94:f2:
67:e7:f9:15:1b:52:1e:99:73:61:bc:ed:30:05:7f:49:30:0e:
1e:ba:c1:51:b8:48:81:b0:1d:ce:9f:f8:ac:1a:b3:3f:d5:df:
ce:b8:ce:68:ee:40:5e:a2:ba:82:d3:8c:54:b5:13:ff:c6:85:
17:37:c8:fb:c2:8c:68:ae:c8:8d:34:43:82:5c:2e:a4:74:56:
4c:e2:be:20:46:77:14:37:cd:b9:88:46:1e:2e:4e:5c:d3:bf:
48:c4:35:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfPFniO8dTAxORgeaiKk6pBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MTUyNWFlMWE1YWZjZWYxOTNmNWE0MDE3N2JmMjczODg4
MzEwNzgwHhcNMjUwNzAzMDcwMDQ1WhcNMjUwNzA0MDcwMDQ1WjAzMTEwLwYDVQQD
EyhhNzg2OGRiMjFhOWM1MjJkZGE1NzU3ZmM4ODc0MGY3MmNlMjgyODQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjA2p38SAhP1QelG9KFswNgmuCza7
lXAhS4y5KnmW7TnJfuGBhn+CzSRnJyZz6M/LYTwdUUxDD8661qb8nP/M6t9ZjjLd
hGfLF9At+pSbEmFy2toLxaLP3BHyWHb0L4oCjctcTVhLRqDDTPq+uwNlernuHg/x
2vjnLpgSWqoE7g/pNe6PtjLZ/VAAu3RuzsXonPLdcp7fg31C6pBSTvG8Y3+xTM4w
V849Ro3sIpegSAfBNxzAp7ma8Gc0bf59iieMg7fwg20Oq5Gi6jW2aAyKeemj4uzt
inTFN3Gv9+X+3ubdGxRpT0dVdtcLfWznkkghpP1OUb2jc13aSWF/gLbotQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKeGjbIanFIt2ldX/Ih0D3LOKChIMB8GA1UdIwQY
MBaAFLgVJa4aWvzvGT9aQBd78nOIgxB4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUJVbHJocGFfTzhaUDFwQUYzdnljNGlERUhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mNzA0YTgtOGQ3Ni00MjJlLWI5NjAt
OWVmODM4NDkwMDQyLzEvdUJVbHJocGFfTzhaUDFwQUYzdnljNGlERUhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9mNzA0YTgtOGQ3Ni00MjJlLWI5NjAtOWVmODM4NDkwMDQy
LzEvdUJVbHJocGFfTzhaUDFwQUYzdnljNGlERUhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQdX46ITU
6XbNMhKJ4h91sigWxwloQFdZy7u9aNyArrejV+hmu14Dv3OyBMG+SdlUJ8Rw9oqh
oU/aC4xp8zSqlwnYLnhy6BIy7sC3pHZhImrx8iZ6L7VTx/8TVF+Ol9sW4tKX8UsA
4tjlxJiGLW8LN1JJWowYdj7C+b+M1P0bFi9bEAJCF8FQZec9FEsBb992GAEa25JD
ox9CHyDPK4SoHZTyZ+f5FRtSHplzYbztMAV/STAOHrrBUbhIgbAdzp/4rBqzP9Xf
zrjOaO5AXqK6gtOMVLUT/8aFFzfI+8KMaK7IjTRDglwupHRWTOK+IEZ3FDfNuYhG
Hi5OXNO/SMQ1cQ==
-----END CERTIFICATE-----
Generated at Thu Jul 3 11:49:31 2025 by rpki-client