
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
File: ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft (raw, json)
Hash identifier: jiEjfwNIVAyiLShxhKux6d4DM8tmqgLXJ3UHmdCXc+A=
Subject key identifier: 62:C4:F9:A6:EF:3F:C8:FD:3E:F1:75:86:6F:3E:A9:45:AC:3D:B1:08
Authority key identifier: B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2
Certificate issuer: /CN=b9aefe976787c2878e269d807cab98ad736d61e2
Certificate serial: 0196AC55E34846E338F3EC9147F96638DF12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
Manifest number: 12A4
Signing time: Wed 07 May 2025 20:00:31 +0000
Manifest this update: Wed 07 May 2025 20:00:31 +0000
Manifest next update: Thu 08 May 2025 20:00:31 +0000
Files and hashes: 1: ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl (hash: M6x9ntMuxG6pF39iURV8rh+ifbcmxswaUVKP9Eld2T0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:55:e3:48:46:e3:38:f3:ec:91:47:f9:66:38:df:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9aefe976787c2878e269d807cab98ad736d61e2
Validity
Not Before: May 7 20:00:31 2025 GMT
Not After : May 8 20:00:31 2025 GMT
Subject: CN=62c4f9a6ef3fc8fd3ef175866f3ea945ac3db108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5a:f8:9b:73:ac:53:67:90:ac:ef:2d:1b:91:
8e:4a:2c:f2:75:8c:fd:1f:69:13:58:cc:b3:ca:91:
e7:2d:f5:12:37:28:28:c6:9f:9a:44:18:83:ce:b5:
df:da:b2:1f:09:46:51:b5:53:3a:bf:ae:3a:6d:5e:
c1:6f:72:d7:f1:62:22:72:be:49:f1:98:b5:5f:3e:
41:05:f9:ed:1d:f7:dc:c6:16:b0:1f:5c:f3:23:37:
90:ee:c9:89:df:5d:ce:ac:e4:f0:6f:66:1c:d7:92:
5d:6f:63:20:29:d9:3a:3f:79:dd:11:ee:9d:d3:19:
0b:69:21:58:ec:01:a2:90:fc:a0:55:bc:6b:2a:42:
55:67:2b:35:d3:d4:e3:ae:f5:9c:c4:d9:a5:25:82:
50:bb:db:3d:c5:6d:f4:d3:f6:f3:b9:c4:fd:18:c2:
f4:22:54:d9:67:5a:75:7a:bc:26:9d:2b:5c:50:d2:
8c:47:56:64:52:e5:a3:b8:46:77:52:06:2b:06:25:
91:98:69:db:31:1a:f2:58:f1:83:91:96:91:d7:04:
4d:12:25:23:ba:be:be:17:8f:db:fe:fb:b6:4b:6f:
b7:8e:75:b8:20:71:69:ee:ad:30:82:7d:71:88:af:
2a:c1:10:2a:d7:90:35:97:3e:9f:25:dc:ea:15:af:
f6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C4:F9:A6:EF:3F:C8:FD:3E:F1:75:86:6F:3E:A9:45:AC:3D:B1:08
X509v3 Authority Key Identifier:
keyid:B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:09:4e:49:a8:ae:56:0c:97:0a:e5:c6:29:78:d3:5b:7d:4f:
7a:22:c8:86:f2:fb:ce:53:e9:61:64:8d:ad:ed:dd:b5:b6:25:
02:b8:d8:12:53:fd:ce:8f:56:7a:60:a8:a2:44:c6:f5:3c:b1:
8c:ad:39:c6:95:77:1f:af:0e:39:a0:fd:0c:49:24:a7:68:2f:
2b:97:10:42:4c:1b:d2:57:59:4f:d6:4d:66:35:6f:19:82:87:
54:3c:8a:09:59:c8:86:97:15:e7:bb:61:a9:7a:79:b6:cb:72:
3e:05:25:1d:d4:8a:79:f7:83:9e:95:f3:13:8d:e4:76:78:e1:
69:eb:df:67:fa:c0:4b:ee:e7:b9:d7:2e:71:a1:2e:bb:da:0b:
28:87:1f:4d:91:90:dd:29:79:e4:16:d8:3c:8a:86:a2:61:47:
ad:17:c9:71:74:c9:b0:f1:e7:a0:00:e3:23:f4:8e:41:c6:65:
72:6f:c8:51:47:99:d2:78:35:46:e3:5c:85:2f:95:fc:aa:fe:
2b:9d:97:8b:d8:06:67:89:9f:1a:a1:c3:ff:9d:4b:2c:ad:60:
92:79:80:23:e0:a9:4d:a4:13:5d:c5:95:85:6c:0a:35:34:de:
58:1c:d7:a9:a9:d0:41:5d:db:f0:56:1b:60:a8:b4:10:5b:5e:
e2:9d:45:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZasVeNIRuM48+yRR/lmON8SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YWVmZTk3Njc4N2MyODc4ZTI2OWQ4MDdjYWI5OGFkNzM2
ZDYxZTIwHhcNMjUwNTA3MjAwMDMxWhcNMjUwNTA4MjAwMDMxWjAzMTEwLwYDVQQD
Eyg2MmM0ZjlhNmVmM2ZjOGZkM2VmMTc1ODY2ZjNlYTk0NWFjM2RiMTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFr4m3OsU2eQrO8tG5GOSizydYz9
H2kTWMyzypHnLfUSNygoxp+aRBiDzrXf2rIfCUZRtVM6v646bV7Bb3LX8WIicr5J
8Zi1Xz5BBfntHffcxhawH1zzIzeQ7smJ313OrOTwb2Yc15Jdb2MgKdk6P3ndEe6d
0xkLaSFY7AGikPygVbxrKkJVZys109TjrvWcxNmlJYJQu9s9xW300/bzucT9GML0
IlTZZ1p1erwmnStcUNKMR1ZkUuWjuEZ3UgYrBiWRmGnbMRryWPGDkZaR1wRNEiUj
ur6+F4/b/vu2S2+3jnW4IHFp7q0wgn1xiK8qwRAq15A1lz6fJdzqFa/26wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLE+abvP8j9PvF1hm8+qUWsPbEIMB8GA1UdIwQY
MBaAFLmu/pdnh8KHjiadgHyrmK1zbWHiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWE3LWwyZUh3b2VPSnAyQWZLdVlyWE50WWVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84MmNkODYtZGJmOS00NDcxLTgxMWIt
MTRiZDcxMzU2ZGFhLzEvdWE3LWwyZUh3b2VPSnAyQWZLdVlyWE50WWVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84MmNkODYtZGJmOS00NDcxLTgxMWItMTRiZDcxMzU2ZGFh
LzEvdWE3LWwyZUh3b2VPSnAyQWZLdVlyWE50WWVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqglOSaiu
VgyXCuXGKXjTW31PeiLIhvL7zlPpYWSNre3dtbYlArjYElP9zo9WemCookTG9Tyx
jK05xpV3H68OOaD9DEkkp2gvK5cQQkwb0ldZT9ZNZjVvGYKHVDyKCVnIhpcV57th
qXp5tstyPgUlHdSKefeDnpXzE43kdnjhaevfZ/rAS+7nudcucaEuu9oLKIcfTZGQ
3Sl55BbYPIqGomFHrRfJcXTJsPHnoADjI/SOQcZlcm/IUUeZ0ng1RuNchS+V/Kr+
K52Xi9gGZ4mfGqHD/51LLK1gknmAI+CpTaQTXcWVhWwKNTTeWBzXqanQQV3b8FYb
YKi0EFte4p1FoQ==
-----END CERTIFICATE-----
Generated at Thu May 8 00:34:57 2025 by rpki-client