Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
File: ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft (raw, json)
Hash identifier: qLPxTbIh/e46aE3RRSxe3MvVCnPNygxgzjSB6QTLPLs=
Subject key identifier: 40:67:6E:12:FC:6C:25:E4:67:E3:6D:AE:C3:4A:BC:AE:1F:AC:80:AA
Authority key identifier: BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94
Certificate issuer: /CN=ba515836af300f7c71f71dd18b9c3f51c252bb94
Certificate serial: 0196CC4E752F568A590B8FC38B5C5AB1F140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
Manifest number: 0BFF
Signing time: Wed 14 May 2025 01:00:15 +0000
Manifest this update: Wed 14 May 2025 01:00:15 +0000
Manifest next update: Thu 15 May 2025 01:00:15 +0000
Files and hashes: 1: Q2LTA1GKdHj7d0i_1GvyqSIwjxQ.roa (hash: xu02NdCI991FR8WiB+pSZuZa9Qgpw7qq1Oeg+OkFXG4=)
2: ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl (hash: aVuF5pMw0VXMvlTJ6+0AhI8d4jHIiWqFkBobL5Wz1iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:4e:75:2f:56:8a:59:0b:8f:c3:8b:5c:5a:b1:f1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba515836af300f7c71f71dd18b9c3f51c252bb94
Validity
Not Before: May 14 01:00:15 2025 GMT
Not After : May 15 01:00:15 2025 GMT
Subject: CN=40676e12fc6c25e467e36daec34abcae1fac80aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2e:a2:73:9f:3d:39:41:9f:ec:ca:20:79:01:
e7:30:25:fd:c7:de:c6:a1:f4:00:14:f5:eb:05:74:
2e:81:17:9b:6e:a9:75:7e:0f:c8:79:bc:68:28:43:
67:a5:77:06:64:0e:90:5a:89:ef:7a:7d:9f:f5:95:
ce:54:ac:e6:bd:5a:3a:32:33:a3:8d:ae:a0:32:3e:
98:6d:ea:8f:4f:f0:f1:2a:4a:71:63:34:c7:52:a1:
58:f9:8d:fd:37:01:b4:11:ad:9b:24:ac:f2:84:1e:
fa:ed:08:9a:1f:2c:1d:6f:23:ea:a7:3b:c0:7b:b3:
27:a7:59:c4:05:80:26:0c:71:77:0d:db:70:f0:0d:
13:26:be:7b:05:87:01:73:c0:cf:13:37:66:fe:ed:
fe:96:ea:6c:c7:18:ca:54:e5:f0:a9:61:56:35:40:
4a:28:aa:49:4e:db:9e:96:5f:f8:c1:3f:0b:c8:14:
88:f6:77:76:7e:fb:f7:7c:66:0c:56:e2:29:c7:22:
e7:2c:53:1a:64:5e:1d:57:45:b2:40:93:62:d6:ea:
88:b3:a5:c9:36:48:17:5c:0d:ad:d9:12:b2:aa:82:
fc:bb:66:90:7f:6e:ad:5d:24:48:d4:85:cc:04:d3:
50:27:54:ee:5e:90:d0:92:ad:d5:35:a2:82:74:5e:
00:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:67:6E:12:FC:6C:25:E4:67:E3:6D:AE:C3:4A:BC:AE:1F:AC:80:AA
X509v3 Authority Key Identifier:
keyid:BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:6d:1d:75:f8:a5:24:0d:53:68:20:d1:4f:26:ae:42:39:5c:
cd:02:aa:08:92:51:4f:af:74:91:87:5d:07:b4:84:31:b3:41:
d3:88:9b:19:15:1a:82:a5:e3:cc:0a:0f:4c:5f:94:cd:3a:77:
92:f1:b8:01:31:86:05:13:66:01:00:89:b5:1c:34:78:95:d1:
d0:f4:24:d4:97:55:54:4c:fc:0a:16:22:a2:f3:80:b4:aa:aa:
36:01:22:f4:bb:30:77:41:6c:50:09:ff:d9:b1:78:1c:9c:4a:
45:d6:4b:d3:10:7b:4c:c4:79:62:53:cf:ca:c3:cc:00:1c:32:
30:f9:2d:6f:f5:06:dc:14:4c:8c:01:78:f2:a7:9d:ca:ac:d2:
4d:4a:02:ef:65:a9:9a:4c:ef:7b:20:e3:98:8d:a5:6a:22:16:
d0:25:fa:fe:7f:51:66:06:8a:0f:59:88:db:60:99:d2:e3:a3:
58:52:da:31:52:77:a9:52:89:66:f9:7d:de:24:f2:64:e0:95:
d9:e2:49:a1:2b:24:33:5c:40:4b:c0:d2:43:3f:f6:fc:d3:eb:
4b:d2:11:49:b2:63:f3:67:de:fa:1c:43:14:69:dd:05:50:cc:
98:b4:41:d7:0a:6a:fe:5a:29:60:92:08:ed:da:fe:3d:74:b6:
ec:d6:a5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:15:29 2025 by rpki-client