Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
File: UKiPmoNBAa34dwN6UcgdEzqpRuw.mft (raw, json)
Hash identifier: ZXtNIxz4/Uv2m8+mRHWjLLOwvdX1SPyq6ZbU59qNnP0=
Subject key identifier: CF:50:34:B0:41:A8:33:ED:90:F9:A9:6F:D9:D0:73:23:47:91:8E:9B
Authority key identifier: 50:A8:8F:9A:83:41:01:AD:F8:77:03:7A:51:C8:1D:13:3A:A9:46:EC
Certificate issuer: /CN=50a88f9a834101adf877037a51c81d133aa946ec
Certificate serial: 0196BCDBCAEE879088FF3E75B36EA376DEFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKiPmoNBAa34dwN6UcgdEzqpRuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
Manifest number: 0CBE
Signing time: Sun 11 May 2025 01:00:42 +0000
Manifest this update: Sun 11 May 2025 01:00:42 +0000
Manifest next update: Mon 12 May 2025 01:00:42 +0000
Files and hashes: 1: UKiPmoNBAa34dwN6UcgdEzqpRuw.crl (hash: B99eUR4VTyFyWdw8skkSarz3SS2hHMrMfp9SgR+3dGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKiPmoNBAa34dwN6UcgdEzqpRuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:ca:ee:87:90:88:ff:3e:75:b3:6e:a3:76:de:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50a88f9a834101adf877037a51c81d133aa946ec
Validity
Not Before: May 11 01:00:42 2025 GMT
Not After : May 12 01:00:42 2025 GMT
Subject: CN=cf5034b041a833ed90f9a96fd9d0732347918e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9d:bb:3e:ab:a5:b6:ef:4e:f1:26:30:ec:6f:
00:d4:85:52:60:40:ff:d9:e5:25:ce:e2:98:59:51:
6c:e9:8e:cc:36:0c:76:d0:18:71:6a:ea:b4:07:52:
d5:93:51:81:bc:f6:e4:38:1b:87:25:e3:54:c6:d0:
23:52:2c:b6:49:ca:1c:eb:ab:f1:d1:84:65:ec:41:
05:95:39:08:85:1a:2c:5a:87:4c:b6:96:a3:5f:cb:
31:37:56:45:5c:00:fe:5c:93:5f:aa:80:8c:7a:52:
5e:88:b0:b6:c2:47:74:4c:25:83:67:f1:bd:b9:3e:
c3:ba:2b:12:c7:39:9d:6a:c7:f7:32:fb:93:46:db:
a7:1c:3f:45:23:0d:dd:93:f1:8d:b5:17:ba:c6:de:
08:fb:cc:48:5c:69:6a:e7:06:5f:5c:12:20:d2:f7:
bb:55:a5:dd:42:81:bc:8e:20:ff:b0:fd:91:36:50:
6f:1e:96:b6:c9:1c:ad:24:c2:66:eb:5a:a3:3e:0c:
dd:3b:3d:61:09:4b:0b:63:38:67:fc:c2:27:85:92:
c9:97:0e:06:41:06:fb:fd:6f:58:5f:20:22:10:d0:
90:98:1c:22:de:36:04:a4:71:d4:a9:9f:be:99:2f:
bd:64:e3:1b:c3:d6:12:ce:6b:a3:12:cf:c3:a9:a2:
3a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:50:34:B0:41:A8:33:ED:90:F9:A9:6F:D9:D0:73:23:47:91:8E:9B
X509v3 Authority Key Identifier:
keyid:50:A8:8F:9A:83:41:01:AD:F8:77:03:7A:51:C8:1D:13:3A:A9:46:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKiPmoNBAa34dwN6UcgdEzqpRuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c5:16:05:e0:e2:9c:47:b3:15:e7:f5:0c:28:23:60:17:aa:
bb:85:bf:a7:75:a0:5d:31:23:1a:f6:35:4f:d5:bf:6d:ca:a2:
46:09:34:24:e6:a6:89:8a:ef:b3:db:21:e8:5f:78:69:96:fa:
15:56:39:7d:dc:e4:b6:58:36:d2:c5:36:00:01:7f:c7:e5:e5:
ec:9c:c2:e5:07:d6:58:ab:af:60:17:2b:02:05:98:95:56:b1:
b4:a2:88:75:e2:db:08:50:a0:64:fb:11:ad:e3:b9:ff:36:4e:
09:bb:18:fc:32:7f:72:90:ed:f0:be:35:37:1b:fa:ac:83:ce:
f0:67:3e:e1:70:10:33:68:ac:7e:9f:31:83:b0:1e:53:17:85:
1f:e7:b4:bb:46:35:80:7b:3e:83:a0:d1:fa:b1:6a:3b:72:f6:
84:72:bf:c9:e8:b2:b8:d4:6a:b8:26:dc:9b:79:26:fe:9e:31:
46:7e:db:99:4d:92:c5:68:e1:6f:7c:82:55:7c:6b:a7:79:d1:
01:6e:02:7b:c6:63:cf:c4:7e:de:ba:68:ba:3d:cb:ae:cf:61:
68:c6:c8:2d:28:17:fa:dd:43:ba:bc:60:7b:09:20:c7:d0:6d:
1e:7d:3d:c3:10:fc:eb:04:7d:79:9d:81:4c:e5:b9:97:23:97:
93:56:b0:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa828ruh5CI/z51s26jdt7/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYTg4ZjlhODM0MTAxYWRmODc3MDM3YTUxYzgxZDEzM2Fh
OTQ2ZWMwHhcNMjUwNTExMDEwMDQyWhcNMjUwNTEyMDEwMDQyWjAzMTEwLwYDVQQD
EyhjZjUwMzRiMDQxYTgzM2VkOTBmOWE5NmZkOWQwNzMyMzQ3OTE4ZTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp27Pqultu9O8SYw7G8A1IVSYED/
2eUlzuKYWVFs6Y7MNgx20Bhxauq0B1LVk1GBvPbkOBuHJeNUxtAjUiy2Scoc66vx
0YRl7EEFlTkIhRosWodMtpajX8sxN1ZFXAD+XJNfqoCMelJeiLC2wkd0TCWDZ/G9
uT7DuisSxzmdasf3MvuTRtunHD9FIw3dk/GNtRe6xt4I+8xIXGlq5wZfXBIg0ve7
VaXdQoG8jiD/sP2RNlBvHpa2yRytJMJm61qjPgzdOz1hCUsLYzhn/MInhZLJlw4G
QQb7/W9YXyAiENCQmBwi3jYEpHHUqZ++mS+9ZOMbw9YSzmujEs/DqaI6iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9QNLBBqDPtkPmpb9nQcyNHkY6bMB8GA1UdIwQY
MBaAFFCoj5qDQQGt+HcDelHIHRM6qUbsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUtpUG1vTkJBYTM0ZHdONlVjZ2RFenFwUnV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85NzYwYzYtM2ZjZS00MmJkLWJiYzgt
NDlmYmMzMGE4ZjYxLzEvVUtpUG1vTkJBYTM0ZHdONlVjZ2RFenFwUnV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi85NzYwYzYtM2ZjZS00MmJkLWJiYzgtNDlmYmMzMGE4ZjYx
LzEvVUtpUG1vTkJBYTM0ZHdONlVjZ2RFenFwUnV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhsUWBeDi
nEezFef1DCgjYBequ4W/p3WgXTEjGvY1T9W/bcqiRgk0JOamiYrvs9sh6F94aZb6
FVY5fdzktlg20sU2AAF/x+Xl7JzC5QfWWKuvYBcrAgWYlVaxtKKIdeLbCFCgZPsR
reO5/zZOCbsY/DJ/cpDt8L41Nxv6rIPO8Gc+4XAQM2isfp8xg7AeUxeFH+e0u0Y1
gHs+g6DR+rFqO3L2hHK/yeiyuNRquCbcm3km/p4xRn7bmU2SxWjhb3yCVXxrp3nR
AW4Ce8Zjz8R+3rpouj3Lrs9haMbILSgX+t1Durxgewkgx9BtHn09wxD86wR9eZ2B
TOW5lyOXk1awzg==
-----END CERTIFICATE-----
Generated at Sun May 11 06:19:46 2025 by rpki-client