Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
File: UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft (raw, json)
Hash identifier: WKgBqL1LvcRmZxd55yyCPyWUtoLvUEAMr8TjwVWbmWE=
Subject key identifier: 4C:22:4A:8E:48:66:74:7B:84:75:2D:AE:7F:5B:94:A3:60:E8:2C:ED
Authority key identifier: 51:C3:CC:54:41:4F:B4:42:BE:39:D6:E1:A4:AF:72:4C:FF:EE:EE:FF
Certificate issuer: /CN=51c3cc54414fb442be39d6e1a4af724cffeeeeff
Certificate serial: 0197B6A139363E4F6B7426D143C07B6425FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UcPMVEFPtEK-OdbhpK9yTP_u7v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
Manifest number: 14BA
Signing time: Sat 28 Jun 2025 13:01:48 +0000
Manifest this update: Sat 28 Jun 2025 13:01:48 +0000
Manifest next update: Sun 29 Jun 2025 13:01:48 +0000
Files and hashes: 1: UcPMVEFPtEK-OdbhpK9yTP_u7v8.crl (hash: 8OoBL+xEcjqi2m80Z6IimthpabpGOmmGsWQ5dzHgTcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UcPMVEFPtEK-OdbhpK9yTP_u7v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:39:36:3e:4f:6b:74:26:d1:43:c0:7b:64:25:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51c3cc54414fb442be39d6e1a4af724cffeeeeff
Validity
Not Before: Jun 28 13:01:48 2025 GMT
Not After : Jun 29 13:01:48 2025 GMT
Subject: CN=4c224a8e4866747b84752dae7f5b94a360e82ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ae:cd:2a:cc:ff:38:f3:1f:1f:e8:5b:67:30:
a0:7a:79:9c:39:aa:4c:8b:bf:1c:22:89:c7:c4:1c:
7d:ce:85:17:82:01:98:99:3c:d4:61:ff:2b:68:f0:
80:dd:49:f4:37:85:58:56:b4:d3:e5:ab:1a:94:fa:
fa:69:7f:7d:30:d5:05:32:75:67:65:c6:71:0d:d9:
18:71:95:d4:dd:85:6c:af:e4:cb:a0:96:5f:4e:73:
ef:d9:71:9f:26:24:79:61:85:8e:75:2d:29:03:dd:
56:f5:74:2a:8e:7e:76:1c:0d:15:9c:b6:ee:9e:93:
aa:33:8d:2a:06:3d:3b:6d:4c:17:0f:3d:c0:c8:61:
be:8c:a8:a2:0e:4f:f3:11:de:4b:9a:83:2b:fd:b2:
3b:f6:87:a6:d6:ca:2e:9f:64:eb:2c:8f:6c:d3:1b:
2a:3a:96:31:94:5e:c4:9b:ca:b0:94:aa:3a:38:59:
9d:12:96:7e:1e:f1:34:87:43:5d:95:fc:4d:9c:46:
d9:e8:dc:7f:59:da:13:9b:13:dd:40:12:14:02:cf:
ba:f2:c2:34:db:d6:e6:77:38:88:cc:e7:06:10:34:
a1:5d:5f:03:0a:95:92:00:e3:ac:5e:1e:12:ae:d9:
44:ff:b8:00:a8:b9:3e:1f:f3:32:1f:6b:93:88:e5:
16:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:22:4A:8E:48:66:74:7B:84:75:2D:AE:7F:5B:94:A3:60:E8:2C:ED
X509v3 Authority Key Identifier:
keyid:51:C3:CC:54:41:4F:B4:42:BE:39:D6:E1:A4:AF:72:4C:FF:EE:EE:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UcPMVEFPtEK-OdbhpK9yTP_u7v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:db:7b:b0:7b:30:41:df:c1:84:93:09:06:89:68:41:5c:c4:
57:28:d2:22:cb:1f:81:02:1f:7d:cc:c4:50:6c:ee:c4:9f:73:
67:9e:7a:54:43:44:cd:54:79:92:19:0e:33:62:d1:64:b2:71:
75:62:6e:2a:8d:be:fd:44:d1:f9:5e:86:b2:8d:91:94:a1:d5:
a3:52:30:51:e6:0c:43:27:34:ef:21:45:0c:8f:38:b1:44:06:
1a:2c:91:73:33:b7:be:b2:c8:e6:4a:4d:0c:06:1c:39:e9:68:
63:86:67:3b:72:e6:a6:f7:af:97:85:4f:60:2c:7f:c7:59:b5:
2c:70:58:ee:d4:09:28:e8:96:53:49:7c:b2:e1:00:01:5e:00:
58:d4:71:5c:fb:93:c4:03:28:0d:0f:60:6a:6e:9f:98:de:79:
a5:f0:86:a2:58:49:10:cd:bb:e3:bf:1c:28:12:6c:1c:96:51:
ca:31:7b:71:37:4b:d9:b7:79:48:35:0f:6a:25:b2:e9:a8:4c:
23:fc:0b:2f:87:97:db:74:c6:4c:2a:85:ff:d1:d2:d9:69:f2:
be:22:2f:df:e8:ce:41:71:43:70:85:cf:fa:34:0a:0e:c3:47:
1a:4a:27:5e:ed:d4:1c:17:c1:ee:a8:e1:c0:6b:82:43:6d:8a:
89:fe:bc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:44 2025 by rpki-client