Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
File: ulnZ9a887kQgFLc1lhxzuWkmDhk.mft (raw, json)
Hash identifier: UocjlNsrTEFl1L9I3/ygNg4OIGoybQpsepm4jauoq9E=
Subject key identifier: 70:FB:39:8A:04:9E:44:EF:0B:5D:85:F7:EF:DA:B2:6F:0F:02:0B:3A
Authority key identifier: BA:59:D9:F5:AF:3C:EE:44:20:14:B7:35:96:1C:73:B9:69:26:0E:19
Certificate issuer: /CN=ba59d9f5af3cee442014b735961c73b969260e19
Certificate serial: 0197B89070A67C432608AE152BC9B10A53BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 22:02:43 +0000
Manifest this update: Sat 28 Jun 2025 22:02:43 +0000
Manifest next update: Sun 29 Jun 2025 22:02:43 +0000
Files and hashes: 1: ulnZ9a887kQgFLc1lhxzuWkmDhk.crl (hash: ke7eYecgJuvkGGPcg6we7/SqMbuJRBSIdiP1M+SHz4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:70:a6:7c:43:26:08:ae:15:2b:c9:b1:0a:53:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba59d9f5af3cee442014b735961c73b969260e19
Validity
Not Before: Jun 28 22:02:43 2025 GMT
Not After : Jun 29 22:02:43 2025 GMT
Subject: CN=70fb398a049e44ef0b5d85f7efdab26f0f020b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:56:35:41:1e:9c:71:a5:8c:6a:d5:d4:39:0c:
71:f6:40:7a:fc:cf:88:a6:b5:39:a8:bf:1d:8d:cd:
54:74:9e:d4:2a:bd:93:b9:3c:da:99:98:fa:d4:fd:
bc:5f:cf:56:ec:57:8c:0f:ed:b6:14:db:78:84:4a:
38:5a:1a:a7:fc:c9:ec:bc:b8:17:a2:60:2c:ca:6d:
fc:3d:c1:16:c3:d8:56:71:52:43:48:8c:2f:14:ed:
ac:61:99:e2:ca:ec:bc:a4:81:26:8a:f7:6d:6b:ce:
4c:dd:a9:40:b5:3b:fd:17:5f:bf:af:75:3c:72:ef:
74:73:62:5e:a0:04:9a:12:24:a7:59:a6:c3:45:f6:
5b:05:16:cf:af:19:ee:87:bb:27:43:58:69:a1:8f:
f7:54:a5:d2:28:f4:45:21:c8:b8:29:fd:3d:f9:02:
c8:c9:f0:02:a2:48:60:bc:6c:ff:4f:8d:88:eb:e9:
08:ee:a2:67:ae:e3:80:9c:75:1e:ca:5f:fb:01:e8:
48:1b:0e:95:91:b5:ed:bf:10:2b:8f:47:30:25:72:
b3:b2:ed:67:9e:fa:c1:ad:76:fe:eb:d0:df:14:54:
bf:1b:de:90:30:ce:d9:b2:ef:e1:9d:b5:78:71:6e:
93:d7:39:c6:f4:d4:83:fa:79:ed:78:c9:3c:9b:09:
51:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FB:39:8A:04:9E:44:EF:0B:5D:85:F7:EF:DA:B2:6F:0F:02:0B:3A
X509v3 Authority Key Identifier:
keyid:BA:59:D9:F5:AF:3C:EE:44:20:14:B7:35:96:1C:73:B9:69:26:0E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:76:8b:04:0e:cc:24:85:d7:b7:eb:b1:b0:2f:26:2a:25:31:
c3:47:a2:3b:24:f9:54:c4:4f:e0:94:32:07:e1:98:64:21:38:
cd:9a:0b:cc:95:0d:5e:d4:25:7e:7b:7f:70:bb:16:fc:dd:b5:
2e:61:58:81:f1:26:f0:a3:bf:9e:72:dd:97:24:2b:c4:6e:df:
7b:7b:7e:e1:a8:df:5c:04:fd:e0:d0:a3:21:d0:10:b4:3f:9d:
00:0b:06:f8:b5:e8:1a:6a:72:69:aa:17:62:3c:18:6a:04:1c:
9d:05:83:d1:35:da:d7:e7:1c:40:ec:37:51:64:ed:51:4a:19:
8b:c8:43:89:27:62:a1:2c:d7:cf:5b:42:7c:7f:59:41:52:36:
a5:82:fb:3b:ad:3b:d7:ed:1e:18:99:97:f3:70:a0:b1:b6:16:
c5:62:15:ca:8a:f4:fc:d7:01:a4:9f:49:17:16:9c:df:ed:f3:
f9:6e:a3:ea:7c:7c:99:16:bc:18:40:a1:ec:83:43:18:fe:b9:
a2:c8:3f:e1:e4:38:c8:53:f1:fe:6d:93:6a:b0:a7:03:3e:42:
b2:d9:d9:23:d7:60:23:b3:ba:ec:ff:b2:bc:bd:2f:bd:d5:9e:
2c:6b:ba:95:d0:72:41:ca:24:2d:7a:46:3f:6a:ed:70:ee:30:
eb:75:cd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:46:04 2025 by rpki-client