Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.mft
File: UfsmDqHIG4GxkdCujcNkESHp65Y.mft (raw, json)
Hash identifier: QfmjV2M/D64HbbF+kReKADVylBjAL4MUrs66WWwlmDs=
Subject key identifier: 94:62:73:00:9B:D7:4F:D7:2D:5A:13:EB:21:2E:AF:F4:DE:6D:7D:F2
Authority key identifier: 51:FB:26:0E:A1:C8:1B:81:B1:91:D0:AE:8D:C3:64:11:21:E9:EB:96
Certificate issuer: /CN=51fb260ea1c81b81b191d0ae8dc3641121e9eb96
Certificate serial: 019749311DB2D49579199A0CA9DD67B881EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfsmDqHIG4GxkdCujcNkESHp65Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.mft
Manifest number: 051E
Signing time: Sat 07 Jun 2025 07:00:45 +0000
Manifest this update: Sat 07 Jun 2025 07:00:45 +0000
Manifest next update: Sun 08 Jun 2025 07:00:45 +0000
Files and hashes: 1: UfsmDqHIG4GxkdCujcNkESHp65Y.crl (hash: As2DE81nFvPDilpCLv0wG1kTwUkRfFDmy86A6TdPpqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UfsmDqHIG4GxkdCujcNkESHp65Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:1d:b2:d4:95:79:19:9a:0c:a9:dd:67:b8:81:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51fb260ea1c81b81b191d0ae8dc3641121e9eb96
Validity
Not Before: Jun 7 07:00:45 2025 GMT
Not After : Jun 8 07:00:45 2025 GMT
Subject: CN=946273009bd74fd72d5a13eb212eaff4de6d7df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:68:9d:92:8e:5d:70:01:84:fe:81:5d:3c:ca:
a0:81:e3:ce:4c:f2:26:88:01:af:91:52:61:5f:c4:
0c:89:cc:8a:e9:c6:32:85:82:d6:05:ac:8b:a2:a2:
e7:e0:e6:4a:f6:a1:c7:f5:ed:e5:8d:06:01:a6:66:
c6:f3:e4:d1:ab:9d:c0:30:ee:c7:cc:a8:ca:11:14:
3f:ad:be:6b:14:a3:13:f7:ee:f7:e4:15:67:70:5c:
de:b7:2f:a1:f7:23:f6:4d:c9:18:bf:94:2d:3e:82:
9b:15:52:40:b5:77:3e:ec:9a:42:cc:e7:83:4b:5f:
b3:61:09:63:45:7b:29:79:83:6f:f3:01:85:d0:3b:
9e:8b:b1:12:1f:d1:e4:bd:22:b5:61:f4:67:37:0a:
34:12:4d:1d:44:c0:a6:cd:98:6d:46:4e:fa:47:92:
27:af:e4:70:ae:34:16:5e:3a:d7:8a:9d:c5:69:66:
26:36:9c:45:56:cd:65:5c:64:6d:34:71:cf:a3:76:
be:ff:67:80:90:d7:18:2b:a6:fa:d6:0c:37:95:4d:
c5:32:24:26:ea:87:f6:2a:d7:78:10:c8:45:6d:a0:
a1:77:7b:b5:a0:54:b1:32:e7:55:d0:23:95:36:03:
32:9b:2e:25:60:cc:ed:81:1c:41:5a:5e:a0:cb:f2:
f0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:62:73:00:9B:D7:4F:D7:2D:5A:13:EB:21:2E:AF:F4:DE:6D:7D:F2
X509v3 Authority Key Identifier:
keyid:51:FB:26:0E:A1:C8:1B:81:B1:91:D0:AE:8D:C3:64:11:21:E9:EB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfsmDqHIG4GxkdCujcNkESHp65Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:5d:9b:39:83:b2:e3:90:1f:d9:81:41:32:3a:69:ec:ec:a5:
f0:ba:8c:6e:57:8e:34:6d:ec:73:3f:ea:04:5a:ec:52:e9:59:
82:1e:99:d7:7c:72:c5:b4:17:d3:35:08:cf:a4:6a:67:c8:50:
ec:69:d4:3b:1d:8c:d9:79:a8:d3:4a:45:14:53:78:5d:09:9e:
cf:6f:41:72:8a:07:de:7e:d1:07:5c:09:9a:26:39:01:19:be:
9f:05:f4:7b:da:f7:b5:c7:98:c3:78:4e:86:ff:86:98:0c:df:
c8:5f:66:91:52:a8:ee:d9:41:b8:4e:f1:0a:87:7b:27:99:e6:
45:86:c2:17:3b:c0:9d:a6:5c:bd:46:d3:d9:5a:a1:db:11:16:
0f:2d:9f:89:19:9e:f7:a5:22:d2:c1:2c:19:6d:5d:40:7b:68:
04:17:89:06:62:da:74:28:87:09:3e:06:00:ca:69:65:61:26:
e4:77:8d:6b:45:4a:0b:d6:ec:7a:7c:37:54:3b:cc:c9:a8:4b:
29:a3:f1:c7:17:bd:a2:1b:6e:60:8e:4b:74:cf:e8:1a:3d:41:
57:f2:41:42:c9:a9:9e:d1:32:3e:5a:78:60:f2:27:7f:58:d1:
6f:d5:c1:bd:12:02:d2:e0:bd:92:83:73:22:26:82:26:d9:5c:
23:aa:fc:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:28:14 2025 by rpki-client