Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
File: UfSwsEaesNBxmUzYI480vvAMb74.mft (raw, json)
Hash identifier: wRZRxDHxw+TDTBxQnEwYZJ9GsTH8i4kqWwdHLx1Z6Ps=
Subject key identifier: D5:C3:BE:02:CA:18:8E:27:E6:6D:E0:AE:52:9C:C5:53:3F:AE:37:F5
Authority key identifier: 51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE
Certificate issuer: /CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
Certificate serial: 0197B8C5E77E1BAD6A21D5661852654AEC2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
Manifest number: 052A
Signing time: Sat 28 Jun 2025 23:01:06 +0000
Manifest this update: Sat 28 Jun 2025 23:01:06 +0000
Manifest next update: Sun 29 Jun 2025 23:01:06 +0000
Files and hashes: 1: UfSwsEaesNBxmUzYI480vvAMb74.crl (hash: 6S9RC4F5ZFdD4Yw0PeMAnT0HaC5r9iwPmYSSIvjH1Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:e7:7e:1b:ad:6a:21:d5:66:18:52:65:4a:ec:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
Validity
Not Before: Jun 28 23:01:06 2025 GMT
Not After : Jun 29 23:01:06 2025 GMT
Subject: CN=d5c3be02ca188e27e66de0ae529cc5533fae37f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:88:ae:66:bb:7d:0a:ed:fb:e5:f2:c1:61:94:
5c:84:f2:48:48:9d:11:ab:9a:57:a9:d6:9e:c6:40:
47:38:3a:e0:1e:f5:b3:b9:73:ca:6a:3a:ab:e4:80:
fa:df:e4:35:bb:62:fa:99:41:2a:46:1c:fc:08:ab:
4c:67:26:b2:28:97:c8:b8:c3:11:91:6d:65:33:76:
e8:29:23:d6:f1:ae:3b:78:12:a5:af:df:17:11:b4:
db:71:38:da:13:89:89:7c:22:8a:de:51:53:c3:a6:
d1:ce:25:6f:a4:01:e2:b4:47:be:92:e9:67:1a:a0:
dc:a6:6b:1a:c5:7e:ac:5f:48:f1:39:c4:0f:bd:77:
44:2f:24:19:cf:7f:94:8a:c5:4a:01:aa:cd:b2:de:
3d:a0:65:f3:8d:b7:da:63:66:e9:cf:a4:5f:2a:41:
83:18:33:6b:e3:31:2e:5b:06:41:0f:6f:3f:ef:a4:
a8:2f:eb:a6:77:f6:e8:eb:c9:f5:f0:e3:bd:82:2f:
cb:10:40:2b:47:b0:08:06:da:ac:3c:7d:7b:07:e6:
04:e0:94:c6:89:3c:77:a8:03:62:6a:19:11:61:2c:
85:d0:8c:58:8a:8b:ee:03:0d:0a:60:7c:e7:7e:e9:
6e:05:f6:4b:df:7c:b6:82:ec:c7:c6:2a:90:ab:0b:
9f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C3:BE:02:CA:18:8E:27:E6:6D:E0:AE:52:9C:C5:53:3F:AE:37:F5
X509v3 Authority Key Identifier:
keyid:51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:3e:20:7f:b4:8f:61:cd:ac:c4:c2:61:2a:d5:1e:73:5f:0b:
96:2c:e3:10:19:f8:05:d9:b2:73:de:13:f2:86:5f:55:c2:1a:
1f:84:4f:69:47:be:8d:6e:b1:e6:4a:81:3b:3f:ad:b9:df:99:
9f:1b:2a:2b:27:ee:4f:eb:d2:1a:72:b1:c4:2d:88:91:67:30:
e9:76:28:e9:4e:23:d9:36:29:3b:92:0e:ea:e6:01:c1:3e:d1:
da:27:17:80:e3:f6:76:2c:b5:d4:0a:b6:b8:d0:b5:4c:ab:04:
b1:a5:b1:41:3c:71:a6:20:13:9f:35:90:97:91:f1:87:d7:df:
03:e9:54:f5:53:71:77:51:e6:64:70:4f:d9:a6:68:a9:46:9e:
a6:8b:c8:57:5e:43:ee:27:67:33:07:4c:e5:7d:63:36:bb:a0:
10:ce:bd:8c:d8:f2:8f:14:f3:09:be:ad:ea:ba:71:04:dd:96:
7e:29:01:a4:54:96:d9:fe:9e:72:14:67:dd:4f:34:91:80:02:
db:75:e1:53:82:34:f8:24:da:50:88:76:cf:7f:e2:85:1a:d9:
1b:f1:88:1e:3f:2e:87:ef:a8:c5:09:64:6f:a1:ef:c8:62:ec:
f6:cd:8f:92:97:03:00:dd:0f:1f:8b:76:ed:e6:5c:28:1e:dc:
c3:d2:85:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:14:43 2025 by rpki-client