Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
File: u7kUAX20Xp91443ePwNXzitx2Cc.mft (raw, json)
Hash identifier: eiZuhdx4nwiE9NLFjKEdIdmQU6TV8rze+BLt9CdXAM0=
Subject key identifier: DE:2E:2A:AE:F3:9E:15:A0:B3:CB:54:66:36:40:CB:37:62:A9:68:ED
Authority key identifier: BB:B9:14:01:7D:B4:5E:9F:75:E3:8D:DE:3F:03:57:CE:2B:71:D8:27
Certificate issuer: /CN=bbb914017db45e9f75e38dde3f0357ce2b71d827
Certificate serial: 01964B8F7DAA0518923FE761EF4B98093506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
Manifest number: 05A3
Signing time: Sat 19 Apr 2025 01:00:17 +0000
Manifest this update: Sat 19 Apr 2025 01:00:17 +0000
Manifest next update: Sun 20 Apr 2025 01:00:17 +0000
Files and hashes: 1: u7kUAX20Xp91443ePwNXzitx2Cc.crl (hash: v3S5a86Zuag5I00Jrj3wk1zvISneMulUdmoC0ai2sJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:8f:7d:aa:05:18:92:3f:e7:61:ef:4b:98:09:35:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbb914017db45e9f75e38dde3f0357ce2b71d827
Validity
Not Before: Apr 19 01:00:17 2025 GMT
Not After : Apr 20 01:00:17 2025 GMT
Subject: CN=de2e2aaef39e15a0b3cb54663640cb3762a968ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:51:c2:52:1b:0e:97:66:fd:7f:3f:f7:aa:b4:
f2:b3:b9:81:cb:8c:f4:1c:3f:78:ba:68:6c:f6:70:
ee:ec:d9:52:15:3a:c7:f7:57:10:b5:59:48:b0:86:
6b:d6:e0:73:53:d8:99:80:fc:82:6c:2f:7f:0b:bc:
3f:fb:ac:81:d8:4a:b5:f1:f3:90:22:04:25:d2:de:
6e:f3:4a:d9:a3:b3:aa:06:0e:7b:bc:6c:30:64:f2:
f6:2c:67:7e:91:b8:b3:6e:30:a5:51:cf:7a:6a:3c:
91:5d:8e:53:f7:b3:1b:3f:a2:19:c2:05:1d:75:39:
2b:cc:da:38:22:3c:d0:fe:60:cf:24:9c:cf:c2:1e:
b9:9d:7b:3a:b7:d7:59:1f:b6:4f:8d:9c:ec:5d:95:
6e:82:44:04:e1:5d:89:15:9a:04:08:3f:97:94:1a:
27:bb:f3:d1:04:1b:cc:93:8d:f5:c4:d7:70:47:21:
0b:0a:3d:2d:aa:c1:38:a2:6f:1f:3b:8d:47:87:a4:
57:14:10:5b:38:2e:3f:1d:cf:ae:fb:da:a6:d9:91:
12:df:2b:07:96:55:e9:c5:7f:4d:a9:11:e5:d9:1b:
ad:0e:b0:d2:c7:ac:1b:d2:69:90:7f:0c:35:36:9a:
68:b9:62:84:f4:e7:d5:6a:3b:2f:25:ed:e9:bf:1b:
c3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2E:2A:AE:F3:9E:15:A0:B3:CB:54:66:36:40:CB:37:62:A9:68:ED
X509v3 Authority Key Identifier:
keyid:BB:B9:14:01:7D:B4:5E:9F:75:E3:8D:DE:3F:03:57:CE:2B:71:D8:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:be:bd:42:98:be:60:1f:75:ea:49:39:01:f3:5d:52:c0:9e:
0e:d7:f2:0f:9c:a2:27:4b:c7:f2:1b:12:9a:4f:65:25:17:90:
35:f2:d9:1f:df:ad:1c:29:eb:57:b1:c1:c2:aa:80:49:57:21:
ba:06:09:53:d0:d9:4c:f6:90:7f:64:83:8a:de:7b:0d:4d:a5:
05:ed:59:2b:53:24:70:f2:74:18:2f:7d:60:60:bc:6b:95:35:
db:3f:33:d0:38:b5:3d:82:74:88:b5:1b:88:49:66:c5:cc:36:
c7:59:26:ef:3b:db:ac:9d:86:df:fe:57:38:79:d4:fd:6b:7f:
52:13:e5:e6:f0:a4:16:e6:c6:4f:4b:b1:11:6f:0c:b2:fb:a7:
e4:f9:97:3f:f4:69:7f:f3:75:e4:66:bc:fb:da:c5:a2:00:da:
83:36:e3:62:dc:8e:48:c9:8e:2d:3d:37:f2:94:f3:73:db:49:
ff:26:12:ef:83:cc:c3:a3:26:d6:4d:c9:f6:33:09:d2:2b:86:
f9:f5:41:02:36:54:23:c3:c1:c5:a9:66:fa:dc:19:64:11:81:
3a:f1:18:e6:4a:5f:a0:15:05:c0:b8:73:d9:64:02:7f:ad:b6:
cf:88:b2:3c:8f:5c:0d:3f:43:d9:bd:ee:75:38:d3:04:62:da:
a6:07:42:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZLj32qBRiSP+dh70uYCTUGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiYjkxNDAxN2RiNDVlOWY3NWUzOGRkZTNmMDM1N2NlMmI3
MWQ4MjcwHhcNMjUwNDE5MDEwMDE3WhcNMjUwNDIwMDEwMDE3WjAzMTEwLwYDVQQD
EyhkZTJlMmFhZWYzOWUxNWEwYjNjYjU0NjYzNjQwY2IzNzYyYTk2OGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1HCUhsOl2b9fz/3qrTys7mBy4z0
HD94umhs9nDu7NlSFTrH91cQtVlIsIZr1uBzU9iZgPyCbC9/C7w/+6yB2Eq18fOQ
IgQl0t5u80rZo7OqBg57vGwwZPL2LGd+kbizbjClUc96ajyRXY5T97MbP6IZwgUd
dTkrzNo4IjzQ/mDPJJzPwh65nXs6t9dZH7ZPjZzsXZVugkQE4V2JFZoECD+XlBon
u/PRBBvMk431xNdwRyELCj0tqsE4om8fO41Hh6RXFBBbOC4/Hc+u+9qm2ZES3ysH
llXpxX9NqRHl2RutDrDSx6wb0mmQfww1NppouWKE9OfVajsvJe3pvxvDNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4uKq7znhWgs8tUZjZAyzdiqWjtMB8GA1UdIwQY
MBaAFLu5FAF9tF6fdeON3j8DV84rcdgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTdrVUFYMjBYcDkxNDQzZVB3Tlh6aXR4MkNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9hM2JiZjItMjYxZS00NGU4LWI5YmMt
NmJlOTdlMzcyNDFmLzEvdTdrVUFYMjBYcDkxNDQzZVB3Tlh6aXR4MkNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9hM2JiZjItMjYxZS00NGU4LWI5YmMtNmJlOTdlMzcyNDFm
LzEvdTdrVUFYMjBYcDkxNDQzZVB3Tlh6aXR4MkNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYr69Qpi+
YB916kk5AfNdUsCeDtfyD5yiJ0vH8hsSmk9lJReQNfLZH9+tHCnrV7HBwqqASVch
ugYJU9DZTPaQf2SDit57DU2lBe1ZK1MkcPJ0GC99YGC8a5U12z8z0Di1PYJ0iLUb
iElmxcw2x1km7zvbrJ2G3/5XOHnU/Wt/UhPl5vCkFubGT0uxEW8Msvun5PmXP/Rp
f/N15Ga8+9rFogDagzbjYtyOSMmOLT038pTzc9tJ/yYS74PMw6Mm1k3J9jMJ0iuG
+fVBAjZUI8PBxalm+twZZBGBOvEY5kpfoBUFwLhz2WQCf622z4iyPI9cDT9D2b3u
dTjTBGLapgdCJQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:07:27 2025 by rpki-client