Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
File: u5O3SkaFwcFKueGSF6qxQWNBEdY.mft (raw, json)
Hash identifier: rH/DG6yNWKHwAPxgCgYTm34abNgEuaWUI1HtBvet/hY=
Subject key identifier: 48:08:C7:F2:09:18:C9:DA:11:5F:8E:46:81:CA:C0:B3:C5:39:A9:D8
Authority key identifier: BB:93:B7:4A:46:85:C1:C1:4A:B9:E1:92:17:AA:B1:41:63:41:11:D6
Certificate issuer: /CN=bb93b74a4685c1c14ab9e19217aab141634111d6
Certificate serial: 0197B7EA1E8DBB2CD33452EF8E3DC4817BA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5O3SkaFwcFKueGSF6qxQWNBEdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
Manifest number: 0F5D
Signing time: Sat 28 Jun 2025 19:01:03 +0000
Manifest this update: Sat 28 Jun 2025 19:01:03 +0000
Manifest next update: Sun 29 Jun 2025 19:01:03 +0000
Files and hashes: 1: u5O3SkaFwcFKueGSF6qxQWNBEdY.crl (hash: Jg2XyJeSgWLAZ80zSeQ9kZFmBLxlME8AnEdXGsWbC/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5O3SkaFwcFKueGSF6qxQWNBEdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:1e:8d:bb:2c:d3:34:52:ef:8e:3d:c4:81:7b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb93b74a4685c1c14ab9e19217aab141634111d6
Validity
Not Before: Jun 28 19:01:03 2025 GMT
Not After : Jun 29 19:01:03 2025 GMT
Subject: CN=4808c7f20918c9da115f8e4681cac0b3c539a9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b9:0d:df:f4:24:45:82:1f:6f:49:4d:16:32:
2f:88:b3:d3:d0:2c:8e:a0:77:bf:dd:1a:8d:97:d9:
e4:bc:fe:aa:10:7c:55:9b:bf:9d:5b:09:cc:b7:59:
4d:b7:a7:0f:ad:69:73:02:dc:4f:0f:86:25:21:f7:
13:ea:6c:f1:75:40:69:3f:11:a3:8e:df:c4:f7:e9:
c6:0b:9b:29:15:a4:b1:70:9c:1c:79:2b:b7:cf:df:
34:6a:9e:39:71:0a:c2:9e:55:7e:cd:18:90:95:9a:
3d:8f:c7:aa:37:ac:b5:4e:0c:a6:fe:f2:6b:e0:01:
67:cc:f1:c6:60:e5:24:e6:84:f1:86:2f:c1:d0:b1:
be:79:db:2a:8a:f0:b1:f3:00:d6:f7:f4:f3:d0:55:
fc:c3:c9:b2:b9:fe:9f:c6:33:78:2e:08:1c:fd:f6:
47:fc:09:71:d3:86:46:84:03:11:80:4f:b6:e1:7d:
97:90:da:49:cd:99:b3:8e:17:bb:7b:ce:fd:6d:49:
25:4e:c6:de:a3:ca:a1:0f:2a:fa:5f:d6:82:1f:cd:
0b:84:98:14:0d:f0:e8:02:8a:db:d5:f0:ae:e6:8b:
8c:6c:55:62:28:23:93:ca:90:a9:a2:e0:78:de:6e:
b5:f8:ab:23:73:5c:c8:e9:fe:4d:26:ac:44:4c:44:
f7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:08:C7:F2:09:18:C9:DA:11:5F:8E:46:81:CA:C0:B3:C5:39:A9:D8
X509v3 Authority Key Identifier:
keyid:BB:93:B7:4A:46:85:C1:C1:4A:B9:E1:92:17:AA:B1:41:63:41:11:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5O3SkaFwcFKueGSF6qxQWNBEdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:4e:e8:22:4b:2c:bd:fd:47:e0:f1:b0:6c:0a:8a:19:a0:a3:
52:f9:5b:8b:7f:eb:ae:d6:df:d8:42:b9:8d:ec:70:e6:b9:8b:
32:26:0a:06:f2:3f:4e:78:52:d8:3a:eb:77:89:46:49:19:dc:
de:fd:6d:41:bd:ac:23:03:f8:91:8d:43:b6:fc:5c:98:8f:04:
7d:b6:d8:19:b6:55:23:ce:e2:3f:bd:3c:e9:86:49:95:04:20:
43:49:d9:c2:13:76:da:92:69:45:47:38:2b:db:d5:d4:1b:24:
c5:c3:63:a4:87:d9:27:cf:ab:6f:82:76:85:26:71:6e:e2:16:
a6:12:b2:de:a5:c9:d2:1f:96:1f:3e:9b:e0:76:52:59:ff:be:
13:3f:0b:c4:30:3b:b2:3c:23:34:9a:8d:1f:5d:0c:99:58:6a:
08:05:60:91:b3:49:0a:fc:9a:c8:fd:b2:5d:c5:5c:bd:b9:21:
2f:49:46:bd:93:04:ef:5f:0c:49:3e:c7:3b:d5:93:78:aa:e0:
1c:1f:40:0b:79:5e:e5:ca:48:dc:79:17:1f:1e:d5:93:6a:75:
19:eb:a3:ee:8d:1d:a7:29:e5:87:b6:70:8f:7c:dd:16:e3:01:
7f:29:65:f4:71:cf:5a:9e:09:cd:9c:72:f7:fd:1f:c4:74:1d:
6b:64:aa:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36h6NuyzTNFLvjj3EgXugMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiOTNiNzRhNDY4NWMxYzE0YWI5ZTE5MjE3YWFiMTQxNjM0
MTExZDYwHhcNMjUwNjI4MTkwMTAzWhcNMjUwNjI5MTkwMTAzWjAzMTEwLwYDVQQD
Eyg0ODA4YzdmMjA5MThjOWRhMTE1ZjhlNDY4MWNhYzBiM2M1MzlhOWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLkN3/QkRYIfb0lNFjIviLPT0CyO
oHe/3RqNl9nkvP6qEHxVm7+dWwnMt1lNt6cPrWlzAtxPD4YlIfcT6mzxdUBpPxGj
jt/E9+nGC5spFaSxcJwceSu3z980ap45cQrCnlV+zRiQlZo9j8eqN6y1Tgym/vJr
4AFnzPHGYOUk5oTxhi/B0LG+edsqivCx8wDW9/Tz0FX8w8myuf6fxjN4Lggc/fZH
/Alx04ZGhAMRgE+24X2XkNpJzZmzjhe7e879bUklTsbeo8qhDyr6X9aCH80LhJgU
DfDoAorb1fCu5ouMbFViKCOTypCpouB43m61+Ksjc1zI6f5NJqxETET36QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEgIx/IJGMnaEV+ORoHKwLPFOanYMB8GA1UdIwQY
MBaAFLuTt0pGhcHBSrnhkheqsUFjQRHWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTVPM1NrYUZ3Y0ZLdWVHU0Y2cXhRV05CRWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9hZTkwODEtZjY1MS00MWY1LWIzYTIt
MzcwNmIxZmNkNmNiLzEvdTVPM1NrYUZ3Y0ZLdWVHU0Y2cXhRV05CRWRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9hZTkwODEtZjY1MS00MWY1LWIzYTItMzcwNmIxZmNkNmNi
LzEvdTVPM1NrYUZ3Y0ZLdWVHU0Y2cXhRV05CRWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWE7oIkss
vf1H4PGwbAqKGaCjUvlbi3/rrtbf2EK5jexw5rmLMiYKBvI/TnhS2Drrd4lGSRnc
3v1tQb2sIwP4kY1DtvxcmI8EfbbYGbZVI87iP7086YZJlQQgQ0nZwhN22pJpRUc4
K9vV1BskxcNjpIfZJ8+rb4J2hSZxbuIWphKy3qXJ0h+WHz6b4HZSWf++Ez8LxDA7
sjwjNJqNH10MmVhqCAVgkbNJCvyayP2yXcVcvbkhL0lGvZME718MST7HO9WTeKrg
HB9AC3le5cpI3HkXHx7Vk2p1Geuj7o0dpynlh7Zwj3zdFuMBfyll9HHPWp4JzZxy
9/0fxHQda2SqUg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:59:20 2025 by rpki-client