Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.mft
File: U3YJ5EhhINufF7bT10v4VfJxV18.mft (raw, json)
Hash identifier: EDKaEqbXpU1ehsJns62rSvY0g3SSNG492D1VpdkQ3cg=
Subject key identifier: D5:1F:3B:54:A3:9D:78:D0:4E:EF:77:95:6E:D2:E1:D8:18:75:3A:92
Authority key identifier: 53:76:09:E4:48:61:20:DB:9F:17:B6:D3:D7:4B:F8:55:F2:71:57:5F
Certificate issuer: /CN=537609e4486120db9f17b6d3d74bf855f271575f
Certificate serial: 0196550085B6B8D2C6A253FF63CB24FC0086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3YJ5EhhINufF7bT10v4VfJxV18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.mft
Manifest number: 0B7C
Signing time: Sun 20 Apr 2025 21:00:19 +0000
Manifest this update: Sun 20 Apr 2025 21:00:19 +0000
Manifest next update: Mon 21 Apr 2025 21:00:19 +0000
Files and hashes: 1: U3YJ5EhhINufF7bT10v4VfJxV18.crl (hash: ck7aqhoESnDNz06S/So515zOGaJRP9cDs8JwPbGXNFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3YJ5EhhINufF7bT10v4VfJxV18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:85:b6:b8:d2:c6:a2:53:ff:63:cb:24:fc:00:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=537609e4486120db9f17b6d3d74bf855f271575f
Validity
Not Before: Apr 20 21:00:19 2025 GMT
Not After : Apr 21 21:00:19 2025 GMT
Subject: CN=d51f3b54a39d78d04eef77956ed2e1d818753a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ef:bb:50:51:50:77:1d:21:58:df:04:bb:ae:
ab:c9:da:21:71:70:da:b9:83:b5:87:ac:b7:79:ea:
54:bd:30:f1:b7:31:b5:71:13:d3:bf:bb:cd:11:41:
58:4c:9b:29:e1:0e:9f:3c:ea:70:20:a4:62:3b:82:
e6:77:1e:d1:59:a4:9e:8d:83:1e:f4:bb:17:58:5d:
f6:01:2f:fc:9b:19:75:6e:39:5a:ad:2a:94:99:1f:
66:44:d4:c3:2a:8e:da:bc:da:d1:30:51:28:ac:d3:
1f:3e:da:b3:1c:9a:38:9c:c4:1d:ab:29:8d:9d:72:
87:19:b4:f5:2d:11:a6:b2:e9:2c:e1:a9:93:b4:67:
12:75:5e:fe:f1:56:25:c1:b4:5e:ac:b1:02:f0:d0:
9b:4a:13:3d:9b:9b:50:1f:22:32:76:a0:97:87:1c:
8b:41:fa:e8:72:d2:97:81:7c:2b:e0:d1:47:c2:52:
60:33:5c:db:c0:e5:1a:76:e4:0a:cb:a5:47:68:02:
f5:3b:c1:b8:f5:54:fe:5a:3e:36:fe:19:5e:bc:df:
5e:63:7b:75:9d:78:34:13:59:aa:d7:46:c9:0b:a4:
c5:c9:00:ce:ce:1f:5a:55:35:54:32:f9:1f:56:93:
aa:4b:ef:b1:f5:c7:9d:1b:b6:f2:f6:bd:eb:c6:e7:
a3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1F:3B:54:A3:9D:78:D0:4E:EF:77:95:6E:D2:E1:D8:18:75:3A:92
X509v3 Authority Key Identifier:
keyid:53:76:09:E4:48:61:20:DB:9F:17:B6:D3:D7:4B:F8:55:F2:71:57:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3YJ5EhhINufF7bT10v4VfJxV18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:6f:6c:03:93:c7:16:e5:b8:09:e0:91:48:18:44:56:7c:8c:
a7:0e:50:92:e6:0f:b0:62:f7:2b:be:7a:84:4c:52:13:62:75:
64:3c:4c:d2:d8:86:1f:cb:0f:e5:6b:d4:14:63:07:df:9d:67:
69:1e:8b:94:75:d2:f4:0d:fe:3e:4c:8f:67:00:64:d6:ad:94:
17:2d:a0:b3:bc:0b:62:63:a2:6d:e6:31:b5:0e:3f:56:76:8c:
79:49:0e:21:ff:dd:d9:2d:fb:57:61:bc:eb:d3:3c:23:b5:7f:
8d:53:73:39:60:b3:c0:43:3f:15:ab:47:d7:ee:e9:27:2a:ff:
39:12:43:d6:4a:81:68:cd:a7:3f:ab:5a:d7:a5:04:db:5a:a6:
64:ac:bd:fc:f3:c0:81:6b:51:02:fb:c0:fd:5c:ae:b3:30:80:
11:54:b2:52:4f:0e:4a:af:ea:37:31:8b:c8:bb:3d:19:b7:ef:
1d:de:ed:2e:38:c7:4b:c0:34:b8:d6:08:34:f7:01:a2:61:d8:
09:df:e9:d3:f5:ec:87:7b:63:7a:16:b5:0b:e3:d0:67:88:91:
d3:56:42:cb:ca:71:6b:56:83:42:0a:f4:5f:16:ec:76:33:50:
b2:b2:07:f1:ed:62:a9:a5:da:7a:35:cc:98:de:7b:13:e5:97:
c1:17:02:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVAIW2uNLGolP/Y8sk/ACGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNzYwOWU0NDg2MTIwZGI5ZjE3YjZkM2Q3NGJmODU1ZjI3
MTU3NWYwHhcNMjUwNDIwMjEwMDE5WhcNMjUwNDIxMjEwMDE5WjAzMTEwLwYDVQQD
EyhkNTFmM2I1NGEzOWQ3OGQwNGVlZjc3OTU2ZWQyZTFkODE4NzUzYTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxO+7UFFQdx0hWN8Eu66rydohcXDa
uYO1h6y3eepUvTDxtzG1cRPTv7vNEUFYTJsp4Q6fPOpwIKRiO4Lmdx7RWaSejYMe
9LsXWF32AS/8mxl1bjlarSqUmR9mRNTDKo7avNrRMFEorNMfPtqzHJo4nMQdqymN
nXKHGbT1LRGmsuks4amTtGcSdV7+8VYlwbRerLEC8NCbShM9m5tQHyIydqCXhxyL
QfroctKXgXwr4NFHwlJgM1zbwOUaduQKy6VHaAL1O8G49VT+Wj42/hlevN9eY3t1
nXg0E1mq10bJC6TFyQDOzh9aVTVUMvkfVpOqS++x9cedG7by9r3rxuejbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUfO1SjnXjQTu93lW7S4dgYdTqSMB8GA1UdIwQY
MBaAFFN2CeRIYSDbnxe209dL+FXycVdfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTNZSjVFaGhJTnVmRjdiVDEwdjRWZkp4VjE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wNWRiODAtMWJhZi00MzdhLWE0OGYt
ZDRkNDRiZDkxYWZlLzEvVTNZSjVFaGhJTnVmRjdiVDEwdjRWZkp4VjE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8wNWRiODAtMWJhZi00MzdhLWE0OGYtZDRkNDRiZDkxYWZl
LzEvVTNZSjVFaGhJTnVmRjdiVDEwdjRWZkp4VjE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuG9sA5PH
FuW4CeCRSBhEVnyMpw5QkuYPsGL3K756hExSE2J1ZDxM0tiGH8sP5WvUFGMH351n
aR6LlHXS9A3+PkyPZwBk1q2UFy2gs7wLYmOibeYxtQ4/VnaMeUkOIf/d2S37V2G8
69M8I7V/jVNzOWCzwEM/FatH1+7pJyr/ORJD1kqBaM2nP6ta16UE21qmZKy9/PPA
gWtRAvvA/VyuszCAEVSyUk8OSq/qNzGLyLs9GbfvHd7tLjjHS8A0uNYINPcBomHY
Cd/p0/Xsh3tjeha1C+PQZ4iR01ZCy8pxa1aDQgr0XxbsdjNQsrIH8e1iqaXaejXM
mN57E+WXwRcC1w==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:17 2025 by rpki-client