Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/6e1f38-6807-4866-a9ed-43bf1c43ec0f/1/uF4L5rcnnN7PeL3WQQX4RD0MDAI.mft
File: uF4L5rcnnN7PeL3WQQX4RD0MDAI.mft (raw, json)
Hash identifier: gQOs/K8tLWHxXxkunCPRi7hvfzCl8eF0N7yKrhvHxZU=
Subject key identifier: 4C:68:12:FB:10:7A:16:26:71:02:19:54:0A:D1:4D:A0:3C:CE:D1:5B
Authority key identifier: B8:5E:0B:E6:B7:27:9C:DE:CF:78:BD:D6:41:05:F8:44:3D:0C:0C:02
Certificate issuer: /CN=b85e0be6b7279cdecf78bdd64105f8443d0c0c02
Certificate serial: 0196C539CF936FE4E40B997365D61F99AE6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uF4L5rcnnN7PeL3WQQX4RD0MDAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/6e1f38-6807-4866-a9ed-43bf1c43ec0f/1/uF4L5rcnnN7PeL3WQQX4RD0MDAI.mft
Manifest number: 0F89
Signing time: Mon 12 May 2025 16:00:22 +0000
Manifest this update: Mon 12 May 2025 16:00:22 +0000
Manifest next update: Tue 13 May 2025 16:00:22 +0000
Files and hashes: 1: uF4L5rcnnN7PeL3WQQX4RD0MDAI.crl (hash: e7pMGPcfh5uvKyis8R0iGpCzGjBewqd3MHS5eSA48TY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/6e1f38-6807-4866-a9ed-43bf1c43ec0f/1/uF4L5rcnnN7PeL3WQQX4RD0MDAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/6e1f38-6807-4866-a9ed-43bf1c43ec0f/1/uF4L5rcnnN7PeL3WQQX4RD0MDAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uF4L5rcnnN7PeL3WQQX4RD0MDAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:39:cf:93:6f:e4:e4:0b:99:73:65:d6:1f:99:ae:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85e0be6b7279cdecf78bdd64105f8443d0c0c02
Validity
Not Before: May 12 16:00:22 2025 GMT
Not After : May 13 16:00:22 2025 GMT
Subject: CN=4c6812fb107a1626710219540ad14da03cced15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2f:30:7b:2d:24:a1:59:ff:11:af:eb:48:b4:
61:49:ec:f8:39:5b:aa:3f:18:b0:c7:de:2d:61:f8:
0c:29:00:98:3e:c7:a1:01:ee:73:20:bb:9b:d3:3a:
8f:82:40:97:d6:42:a4:4a:8f:ec:62:bd:4a:2e:a9:
08:3c:30:71:3f:5e:48:d6:50:24:41:1a:9f:fd:26:
57:c1:71:56:15:0a:df:cc:f2:ff:d2:62:12:c0:e8:
b6:19:19:e9:03:2a:89:99:57:37:f3:f6:6a:6d:69:
01:04:c0:d5:d8:96:16:f3:51:57:bf:cd:c6:52:27:
55:59:25:a5:cf:06:ef:24:f4:76:0a:a0:48:9f:4f:
14:9e:27:eb:fe:6f:1a:32:ce:47:d9:ad:ea:d4:b8:
70:8c:c6:63:34:5e:3a:69:f5:92:57:8b:4b:80:61:
07:7f:1e:1b:29:a2:30:73:02:00:f0:36:bc:89:7b:
31:47:18:a6:f6:6e:75:e6:b8:d5:57:e6:ca:48:dc:
24:de:ee:d9:5c:b5:cf:6f:43:ca:92:f0:04:ce:33:
fd:7f:d1:aa:7f:bb:f0:cc:95:07:91:c1:c0:d1:43:
05:2b:b5:4a:a9:b3:8c:88:ea:fc:50:9b:f3:b3:01:
d7:cd:42:58:95:0d:52:3f:06:1d:ba:ec:cc:26:1a:
9c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:68:12:FB:10:7A:16:26:71:02:19:54:0A:D1:4D:A0:3C:CE:D1:5B
X509v3 Authority Key Identifier:
keyid:B8:5E:0B:E6:B7:27:9C:DE:CF:78:BD:D6:41:05:F8:44:3D:0C:0C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uF4L5rcnnN7PeL3WQQX4RD0MDAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6e1f38-6807-4866-a9ed-43bf1c43ec0f/1/uF4L5rcnnN7PeL3WQQX4RD0MDAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6e1f38-6807-4866-a9ed-43bf1c43ec0f/1/uF4L5rcnnN7PeL3WQQX4RD0MDAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:8a:8c:b5:64:3c:b6:01:ac:e2:d0:2b:7e:25:55:47:b1:97:
66:65:cb:5b:5b:83:74:81:92:47:cf:0c:2c:69:a6:43:71:74:
35:21:55:13:58:a8:a5:a5:b3:d7:64:dd:20:51:24:30:13:34:
8d:01:3d:bb:6d:89:58:53:5b:26:ab:e4:1c:da:b2:99:1d:2c:
4b:70:f8:c8:2f:09:95:8f:2a:aa:cc:e1:81:0a:5d:53:87:2e:
a6:01:e9:62:59:5c:e8:c9:a7:7f:88:0c:71:f0:36:ad:c9:32:
6b:ac:0b:dc:12:3d:49:9f:18:6f:45:85:a9:9b:b0:a8:1e:dc:
b5:65:e8:c0:a1:45:be:c7:ce:f5:fd:c2:ba:b7:fb:f3:f6:35:
4f:bc:e1:6a:7c:a0:46:64:47:45:46:d7:90:83:eb:f8:86:0b:
0c:2c:09:84:ed:ea:1c:19:03:17:7f:84:d7:2d:75:36:d5:f6:
ae:9b:8a:62:bd:07:1b:58:e7:1c:20:fd:4e:dd:57:27:41:0f:
7a:73:e3:81:a3:35:25:de:87:da:22:63:9a:84:93:e2:37:1f:
95:a8:48:c0:31:16:a9:01:b7:5a:db:9f:e6:7d:43:e0:39:71:
91:3f:47:9a:3b:c5:eb:fa:77:75:c7:d3:5c:13:65:d6:d1:5a:
0c:73:cf:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:11:27 2025 by rpki-client