Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft
File: ULhDqNkbFYJOYOLNaJpvRR4lal4.mft (raw, json)
Hash identifier: 3awFi29zKzSQiSrtRrJV0s8G1qiX+rX0a7YHTUZ4kcQ=
Subject key identifier: E4:70:DD:7F:8A:C4:7D:F8:6E:88:32:80:99:3D:29:00:8B:DD:32:72
Authority key identifier: 50:B8:43:A8:D9:1B:15:82:4E:60:E2:CD:68:9A:6F:45:1E:25:6A:5E
Certificate issuer: /CN=50b843a8d91b15824e60e2cd689a6f451e256a5e
Certificate serial: 0197481E2BFE77FCA434714929F6FE2DDE52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULhDqNkbFYJOYOLNaJpvRR4lal4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft
Manifest number: 02ED
Signing time: Sat 07 Jun 2025 02:00:26 +0000
Manifest this update: Sat 07 Jun 2025 02:00:26 +0000
Manifest next update: Sun 08 Jun 2025 02:00:26 +0000
Files and hashes: 1: ULhDqNkbFYJOYOLNaJpvRR4lal4.crl (hash: HVA4rk9ROiWEMkU4RgMNG+KhfimlrhP1WfLc0oPOj8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ULhDqNkbFYJOYOLNaJpvRR4lal4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:2b:fe:77:fc:a4:34:71:49:29:f6:fe:2d:de:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50b843a8d91b15824e60e2cd689a6f451e256a5e
Validity
Not Before: Jun 7 02:00:26 2025 GMT
Not After : Jun 8 02:00:26 2025 GMT
Subject: CN=e470dd7f8ac47df86e883280993d29008bdd3272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:25:5f:90:e6:fe:71:0c:d7:b5:9b:64:6d:6e:
d4:f7:02:a7:ab:f6:a7:d3:22:2d:8b:79:b3:04:6c:
6c:d7:e6:2f:b1:fc:3d:6f:a2:57:62:8b:46:dd:01:
5d:47:cf:c0:81:e3:4d:e4:9b:d3:df:44:b9:cc:eb:
df:d2:df:83:1e:c9:c3:24:e4:6e:cd:9a:64:4d:5d:
d6:70:fd:11:c8:bb:b7:8c:3c:4f:65:0a:a9:ad:38:
96:77:83:ff:c0:ab:32:f4:da:08:e0:ef:0d:56:62:
a8:cc:29:e6:e6:a8:dc:96:88:7c:e9:3b:7c:6e:fe:
77:8b:4b:54:81:74:26:b5:65:b1:67:cd:4d:56:77:
b3:4b:03:01:8f:03:6c:65:93:45:65:7e:11:15:d1:
aa:e0:ec:05:0f:2b:5c:d1:dc:98:92:40:1d:b5:aa:
64:b3:1d:3d:d8:c1:97:68:a3:27:33:fe:32:62:a2:
60:b2:c3:6a:6a:0c:e1:65:ed:50:af:51:1c:c2:42:
5c:f8:07:1c:dc:38:8e:c8:fb:53:21:be:0d:19:30:
56:a9:05:d1:99:c0:8a:55:b2:dc:98:de:af:ed:d6:
f4:5a:25:6c:dc:f5:55:22:27:dd:b8:ea:14:a2:bf:
dc:70:0e:fe:f4:9c:e8:d2:ce:da:b3:58:5a:a9:6e:
80:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:70:DD:7F:8A:C4:7D:F8:6E:88:32:80:99:3D:29:00:8B:DD:32:72
X509v3 Authority Key Identifier:
keyid:50:B8:43:A8:D9:1B:15:82:4E:60:E2:CD:68:9A:6F:45:1E:25:6A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULhDqNkbFYJOYOLNaJpvRR4lal4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d0:93:64:7c:49:f1:96:93:74:ff:d9:39:80:2c:81:29:0b:
d5:bb:5e:65:a5:80:04:d0:12:06:53:89:b0:bc:da:1e:85:e7:
fe:a8:d1:fc:c1:f8:c1:d7:6c:60:a7:d1:e7:d2:a4:b1:3a:5b:
60:b4:9a:24:9f:c1:0b:4d:f0:c4:0d:d9:2a:13:56:d3:97:58:
a5:53:73:5d:0f:1b:24:fd:ae:ce:a3:ee:96:37:32:7b:d8:57:
7d:33:a5:80:07:a2:e4:f3:df:6a:b7:89:a5:a8:8e:6e:62:a3:
b4:88:74:81:3f:25:4b:29:cb:ca:9b:03:88:2f:d3:9a:64:08:
c6:03:37:49:68:a4:2c:e7:8d:1a:59:bf:50:4b:6a:e6:e6:61:
ea:c7:05:9d:cf:42:ee:22:99:fb:78:3a:8a:5f:95:f1:26:76:
f1:d3:8d:d6:4b:c7:c2:43:71:78:8f:55:b7:0e:e3:b5:2d:37:
a4:ef:84:41:e3:71:5a:ad:bc:38:7d:15:9f:63:62:ca:57:c3:
ac:69:8c:28:6e:81:f7:75:f2:58:56:7d:75:ca:b7:9e:9f:06:
9c:3a:26:22:dd:b7:74:f6:1d:35:3a:ec:7e:4d:fd:e1:a8:06:
66:b9:a9:54:e5:b1:b6:b0:1e:ad:d0:ba:45:be:9e:fc:ad:fb:
6d:f3:ea:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:21:57 2025 by rpki-client