Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
File: ubjmb62BRkWYT9TqrTE7b-AFibc.mft (raw, json)
Hash identifier: Fkz027/FEVmDoVxmvFVl+iAWTrvNC0bNkUd8DPZ1c3w=
Subject key identifier: 88:C5:8E:4A:A4:E4:40:7D:BA:35:81:90:A5:D3:BB:0A:A4:0A:6B:E0
Authority key identifier: B9:B8:E6:6F:AD:81:46:45:98:4F:D4:EA:AD:31:3B:6F:E0:05:89:B7
Certificate issuer: /CN=b9b8e66fad814645984fd4eaad313b6fe00589b7
Certificate serial: 0196B9A3EBEA7ECFBF559A651F8E0CA426F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
Manifest number: 09B6
Signing time: Sat 10 May 2025 10:00:49 +0000
Manifest this update: Sat 10 May 2025 10:00:49 +0000
Manifest next update: Sun 11 May 2025 10:00:49 +0000
Files and hashes: 1: ubjmb62BRkWYT9TqrTE7b-AFibc.crl (hash: LspNNWMCcIeZzpcCkL0fhy7u8NOJ83RsXYJDDn4/rN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a3:eb:ea:7e:cf:bf:55:9a:65:1f:8e:0c:a4:26:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b8e66fad814645984fd4eaad313b6fe00589b7
Validity
Not Before: May 10 10:00:49 2025 GMT
Not After : May 11 10:00:49 2025 GMT
Subject: CN=88c58e4aa4e4407dba358190a5d3bb0aa40a6be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:45:eb:fe:80:7a:6d:6b:89:40:38:76:77:26:
87:fc:a8:b9:d0:ca:76:6a:52:ec:5d:82:d9:6b:4e:
81:2d:00:0e:8f:06:9b:96:c3:65:34:91:65:b7:37:
80:05:dd:5b:1f:62:93:01:31:60:5f:9f:8f:c4:b3:
67:bb:88:70:9b:d1:a0:a9:ec:ac:09:be:5f:c2:f3:
42:ff:19:49:a6:ed:13:11:85:a4:f9:a9:51:ce:c4:
b4:98:b2:70:c0:e9:af:3d:c8:5a:52:98:cc:ef:c2:
52:24:cc:76:c9:5f:0e:02:39:f1:50:0a:b6:5f:9b:
00:03:7a:70:48:b2:0c:5c:6a:d4:71:c1:75:1b:d5:
15:8a:0c:70:92:9b:7e:c3:bf:2e:c3:98:57:27:48:
18:fb:c2:4e:6b:d4:b8:6a:5f:ea:a9:34:f1:39:d4:
9c:63:71:77:20:fa:0c:f2:1c:c0:0c:9a:b0:87:49:
32:b5:fd:ab:c1:0a:82:21:bf:19:de:29:39:a7:98:
c3:16:82:94:00:f9:4e:5e:3b:25:7f:d1:84:a0:d9:
8b:bb:8e:7a:e0:d8:04:49:d8:11:ce:92:b0:86:a6:
8f:e8:58:8f:43:01:97:4a:77:68:f4:ed:97:37:20:
98:0f:f3:f6:4e:45:65:66:f4:c4:9e:e2:b0:bd:d4:
53:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C5:8E:4A:A4:E4:40:7D:BA:35:81:90:A5:D3:BB:0A:A4:0A:6B:E0
X509v3 Authority Key Identifier:
keyid:B9:B8:E6:6F:AD:81:46:45:98:4F:D4:EA:AD:31:3B:6F:E0:05:89:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d1:d7:a9:44:18:c4:12:b3:b5:5c:f3:07:27:6b:7f:ad:ca:
e1:75:de:88:2d:4f:5c:ab:1e:8c:19:43:a2:fb:33:b5:91:43:
6b:d5:b3:e6:49:00:c8:20:96:f0:a4:13:8a:a2:c9:3f:5b:b5:
74:ce:dd:73:3f:40:7d:34:e7:b3:0b:1d:68:c0:4a:4b:55:98:
ff:57:f4:8c:b2:69:a5:cc:e4:24:f7:d7:85:e1:5c:92:8a:8d:
37:35:06:90:70:c8:d2:c2:1b:d5:a8:87:4b:67:6f:b2:95:29:
ce:0f:6d:1e:fe:f3:76:79:70:81:1a:a0:a4:b1:2c:e4:6b:74:
ea:ae:0f:10:25:f4:fd:7d:14:41:7f:c2:a1:4d:d3:df:5c:61:
b0:72:8d:85:78:45:dc:29:cc:2c:de:37:5f:86:d3:85:cd:58:
f0:a3:c0:41:8d:1d:c1:4b:2b:5c:25:3b:d6:8e:e7:e1:f1:d0:
cb:ef:99:2e:da:80:8e:35:0e:61:a4:45:44:df:59:0d:47:8d:
7f:06:af:d6:59:db:25:5c:ae:5b:b0:9a:ee:24:e1:b9:87:69:
85:2f:cd:08:63:de:e6:8f:0d:1c:8a:fa:3f:c3:39:10:e0:ca:
2e:ce:55:1c:16:ca:d8:8a:81:dd:a5:d2:25:1e:51:04:54:30:
00:bf:a6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:19:36 2025 by rpki-client