Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.mft
File: UfsmDqHIG4GxkdCujcNkESHp65Y.mft (raw, json)
Hash identifier: OpcCYt0ZX5p3s8fNC4UBXRKoItI5k7e1ntWsLfvbbPE=
Subject key identifier: AC:58:6B:CD:D9:37:2B:D5:85:1A:42:74:C3:D1:92:F9:FF:DF:A2:C1
Authority key identifier: 51:FB:26:0E:A1:C8:1B:81:B1:91:D0:AE:8D:C3:64:11:21:E9:EB:96
Certificate issuer: /CN=51fb260ea1c81b81b191d0ae8dc3641121e9eb96
Certificate serial: 0196447AE572410DB8BA8773868F01D0A96C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfsmDqHIG4GxkdCujcNkESHp65Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.mft
Manifest number: 0497
Signing time: Thu 17 Apr 2025 16:00:26 +0000
Manifest this update: Thu 17 Apr 2025 16:00:26 +0000
Manifest next update: Fri 18 Apr 2025 16:00:26 +0000
Files and hashes: 1: UfsmDqHIG4GxkdCujcNkESHp65Y.crl (hash: HUomqL8aBn1YPzUsEPuLErnXIpVO1qGXIycAXVE3hHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UfsmDqHIG4GxkdCujcNkESHp65Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:7a:e5:72:41:0d:b8:ba:87:73:86:8f:01:d0:a9:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51fb260ea1c81b81b191d0ae8dc3641121e9eb96
Validity
Not Before: Apr 17 16:00:26 2025 GMT
Not After : Apr 18 16:00:26 2025 GMT
Subject: CN=ac586bcdd9372bd5851a4274c3d192f9ffdfa2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:16:77:71:92:9e:b8:fb:a0:ee:1b:70:56:a7:
40:aa:c5:5f:7c:4e:ff:fe:4f:c9:36:a2:63:d5:5b:
46:25:59:1c:df:d7:3a:62:e9:3c:1a:db:42:ce:80:
d1:e0:7f:02:f6:15:22:00:57:31:ee:11:5e:14:d6:
c4:48:b2:9e:36:5e:25:b3:a9:9c:46:b1:a0:fc:02:
7e:56:42:65:b1:fc:05:f8:76:de:23:dc:ae:22:48:
d6:30:32:f9:aa:d2:c3:0b:92:7c:d0:bc:20:d8:14:
f2:b4:e5:7a:f5:f0:7f:6e:1e:d7:43:f1:46:05:9b:
eb:88:ba:81:c1:78:c8:4e:8a:a0:98:c2:f3:d6:ff:
11:ae:93:1b:00:be:59:f6:f4:62:36:3a:87:50:98:
df:a7:7d:c7:d6:2e:84:33:11:75:90:a3:d0:9d:a7:
60:f2:80:b0:50:b1:65:00:55:c0:d5:ee:56:6f:9d:
3c:cd:59:53:a7:0f:4e:c8:eb:19:e9:f1:77:62:bb:
f4:09:96:70:50:f4:4b:91:31:e0:b4:c0:60:9c:ef:
88:ac:2c:d1:c8:25:75:e4:6b:e6:e6:2b:8a:ca:4a:
2d:15:e9:39:6d:f0:8b:97:32:79:46:a0:1b:6e:49:
ef:9b:ad:6e:2b:8b:b3:59:18:c8:33:1a:8b:7a:c3:
41:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:58:6B:CD:D9:37:2B:D5:85:1A:42:74:C3:D1:92:F9:FF:DF:A2:C1
X509v3 Authority Key Identifier:
keyid:51:FB:26:0E:A1:C8:1B:81:B1:91:D0:AE:8D:C3:64:11:21:E9:EB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfsmDqHIG4GxkdCujcNkESHp65Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c0:16:70:6f:fe:64:05:5b:3f:9f:d1:52:92:5d:de:28:50:
40:c1:de:a6:94:24:64:77:5c:a2:f3:be:13:3f:8d:60:c6:2d:
f3:78:34:31:0f:10:81:91:f3:ce:b8:e6:f2:e2:c4:60:ec:29:
2d:ba:32:53:44:79:39:aa:48:60:0b:ed:d8:4a:a5:47:19:45:
83:3f:c8:e0:37:a4:78:9a:8c:67:d8:6b:55:a9:c2:30:0f:f4:
dd:15:f0:5b:b7:a0:bd:a8:0c:54:af:b5:bd:da:85:48:cb:bc:
e1:51:c6:a8:81:a9:85:3c:2b:9c:70:28:ce:b9:f7:ff:71:2c:
7a:c5:86:d0:4e:c8:a9:b5:e2:35:85:53:e4:c4:42:ef:30:e7:
0e:76:12:fb:bc:9a:06:03:63:b8:ef:fa:90:b2:55:cd:e1:08:
28:ad:5c:ad:f6:cf:86:f1:bc:7d:8c:5d:6a:e5:ab:21:a6:f4:
73:4d:75:10:75:4d:59:54:94:d0:bf:be:2b:2f:79:05:01:c6:
3b:cd:57:67:b3:6c:05:aa:85:0c:0b:89:6a:35:82:b9:be:0a:
b5:49:e7:a0:dc:96:4f:d0:ea:fc:f8:78:bd:f3:57:e5:fe:72:
38:c5:2e:69:a7:f1:89:b3:b9:d8:2c:39:3d:bb:f6:64:bd:c1:
41:41:b7:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZEeuVyQQ24uodzho8B0KlsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZmIyNjBlYTFjODFiODFiMTkxZDBhZThkYzM2NDExMjFl
OWViOTYwHhcNMjUwNDE3MTYwMDI2WhcNMjUwNDE4MTYwMDI2WjAzMTEwLwYDVQQD
EyhhYzU4NmJjZGQ5MzcyYmQ1ODUxYTQyNzRjM2QxOTJmOWZmZGZhMmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBZ3cZKeuPug7htwVqdAqsVffE7/
/k/JNqJj1VtGJVkc39c6Yuk8GttCzoDR4H8C9hUiAFcx7hFeFNbESLKeNl4ls6mc
RrGg/AJ+VkJlsfwF+HbeI9yuIkjWMDL5qtLDC5J80Lwg2BTytOV69fB/bh7XQ/FG
BZvriLqBwXjIToqgmMLz1v8RrpMbAL5Z9vRiNjqHUJjfp33H1i6EMxF1kKPQnadg
8oCwULFlAFXA1e5Wb508zVlTpw9OyOsZ6fF3Yrv0CZZwUPRLkTHgtMBgnO+IrCzR
yCV15Gvm5iuKykotFek5bfCLlzJ5RqAbbknvm61uK4uzWRjIMxqLesNB2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxYa83ZNyvVhRpCdMPRkvn/36LBMB8GA1UdIwQY
MBaAFFH7Jg6hyBuBsZHQro3DZBEh6euWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWZzbURxSElHNEd4a2RDdWpjTmtFU0hwNjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi80ZjVlN2ItMTRlNy00NGJjLThkNWQt
ZDI5NTc0NTNiODQ0LzEvVWZzbURxSElHNEd4a2RDdWpjTmtFU0hwNjVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi80ZjVlN2ItMTRlNy00NGJjLThkNWQtZDI5NTc0NTNiODQ0
LzEvVWZzbURxSElHNEd4a2RDdWpjTmtFU0hwNjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEMAWcG/+
ZAVbP5/RUpJd3ihQQMHeppQkZHdcovO+Ez+NYMYt83g0MQ8QgZHzzrjm8uLEYOwp
LboyU0R5OapIYAvt2EqlRxlFgz/I4DekeJqMZ9hrVanCMA/03RXwW7egvagMVK+1
vdqFSMu84VHGqIGphTwrnHAozrn3/3EsesWG0E7IqbXiNYVT5MRC7zDnDnYS+7ya
BgNjuO/6kLJVzeEIKK1crfbPhvG8fYxdauWrIab0c011EHVNWVSU0L++Ky95BQHG
O81XZ7NsBaqFDAuJajWCub4KtUnnoNyWT9Dq/Ph4vfNX5f5yOMUuaafxibO52Cw5
Pbv2ZL3BQUG3ww==
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:36:40 2025 by rpki-client