Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/23c0a9-68b1-40fd-a1e7-eb0885b9003e/1/uIF3qaNGnbOs8QqY9sA5MeNVFfo.mft
File: uIF3qaNGnbOs8QqY9sA5MeNVFfo.mft (raw, json)
Hash identifier: GsUvX41kto1vWOKvLtw1cFlDIBVkRKmtWBvUKiGFDa8=
Subject key identifier: A6:89:14:97:36:33:76:14:92:1C:47:61:5D:12:06:E6:F3:09:32:63
Authority key identifier: B8:81:77:A9:A3:46:9D:B3:AC:F1:0A:98:F6:C0:39:31:E3:55:15:FA
Certificate issuer: /CN=b88177a9a3469db3acf10a98f6c03931e35515fa
Certificate serial: 01974CD6DA856AE11E5E5FAF20675D10A55E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uIF3qaNGnbOs8QqY9sA5MeNVFfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/23c0a9-68b1-40fd-a1e7-eb0885b9003e/1/uIF3qaNGnbOs8QqY9sA5MeNVFfo.mft
Manifest number: 0517
Signing time: Sun 08 Jun 2025 00:00:38 +0000
Manifest this update: Sun 08 Jun 2025 00:00:38 +0000
Manifest next update: Mon 09 Jun 2025 00:00:38 +0000
Files and hashes: 1: uIF3qaNGnbOs8QqY9sA5MeNVFfo.crl (hash: ZyCzSj2O2ZDl3TZGvcVIU3d/eivh+0o5ZrzDx/D8dzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/23c0a9-68b1-40fd-a1e7-eb0885b9003e/1/uIF3qaNGnbOs8QqY9sA5MeNVFfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/23c0a9-68b1-40fd-a1e7-eb0885b9003e/1/uIF3qaNGnbOs8QqY9sA5MeNVFfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uIF3qaNGnbOs8QqY9sA5MeNVFfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:da:85:6a:e1:1e:5e:5f:af:20:67:5d:10:a5:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b88177a9a3469db3acf10a98f6c03931e35515fa
Validity
Not Before: Jun 8 00:00:38 2025 GMT
Not After : Jun 9 00:00:38 2025 GMT
Subject: CN=a689149736337614921c47615d1206e6f3093263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:57:b4:8f:d3:2f:bc:0c:53:4f:32:b0:27:19:
a7:54:17:6a:ff:bc:63:29:be:7c:8a:a9:5d:61:6a:
94:88:93:06:b6:bc:8a:a3:3d:e5:22:8e:9f:d5:5e:
4f:34:24:d4:a8:34:f5:fd:7d:91:76:ac:d0:17:be:
d8:c5:65:61:d6:99:80:86:e6:16:0f:48:01:93:61:
8c:61:13:57:89:01:39:89:f6:e0:8c:2d:98:2e:71:
9d:6a:d4:6d:d5:13:56:08:f2:3e:c2:e4:86:cd:04:
5d:d1:05:ba:48:4e:78:a3:b4:95:77:ea:5b:5f:0c:
13:0d:d0:bc:8b:d8:3e:1c:fa:28:05:70:57:3b:05:
9a:fb:84:af:d1:43:e2:fc:d4:f8:c6:c8:a7:70:e3:
f1:de:0b:b8:fa:60:36:02:a0:f6:1f:fb:50:da:cb:
3f:0a:85:aa:88:b6:b6:66:98:54:62:51:4e:f9:fb:
04:1d:34:f9:42:8c:53:71:1b:44:50:39:ce:2c:8e:
84:0b:05:5e:a8:2b:a0:b0:1e:d0:ca:2a:df:6b:f0:
c2:9d:cb:79:56:1f:09:19:5c:2a:38:b9:ee:75:d9:
78:1b:a9:61:37:96:22:e3:a3:68:1e:30:60:c5:be:
d2:f4:0d:1d:d7:d4:f0:6d:4a:e9:47:a3:ec:0d:fd:
b0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:89:14:97:36:33:76:14:92:1C:47:61:5D:12:06:E6:F3:09:32:63
X509v3 Authority Key Identifier:
keyid:B8:81:77:A9:A3:46:9D:B3:AC:F1:0A:98:F6:C0:39:31:E3:55:15:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uIF3qaNGnbOs8QqY9sA5MeNVFfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23c0a9-68b1-40fd-a1e7-eb0885b9003e/1/uIF3qaNGnbOs8QqY9sA5MeNVFfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23c0a9-68b1-40fd-a1e7-eb0885b9003e/1/uIF3qaNGnbOs8QqY9sA5MeNVFfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:7d:41:25:94:00:40:bb:66:52:f4:f5:7a:b3:60:a9:e7:07:
14:d2:bc:71:14:31:85:e0:d1:f1:77:71:a0:4f:05:0d:52:0e:
fe:09:c2:ee:62:f1:aa:d3:01:0e:50:85:75:1f:96:c4:79:0c:
ae:23:08:4c:56:29:4f:8c:37:c9:53:d3:53:b1:de:1d:42:92:
ea:19:1c:fa:ad:19:e0:9a:52:69:c1:09:1a:59:57:d4:fa:d2:
8d:93:10:64:29:3d:e6:fb:a6:a2:03:d1:ed:0b:c3:cc:14:e8:
09:e3:1b:9b:16:6b:aa:a0:48:fb:1e:ae:ac:a9:a1:a1:c2:81:
1b:f2:95:40:cc:e9:43:b6:a3:16:cd:4b:a3:32:be:83:d7:7f:
98:7c:e5:6f:ee:ba:fa:14:1c:72:42:2f:13:3b:4a:d9:f0:f5:
50:77:10:e1:34:40:d7:ef:ff:f5:27:e4:09:6e:bd:a3:4d:8d:
ce:51:62:e6:78:df:e1:ec:91:6b:72:df:5a:e5:43:4b:9d:a4:
ae:63:e2:d4:25:9b:02:a3:c4:39:3f:3f:03:2a:75:2b:6e:08:
11:b3:5c:e2:d9:09:09:32:e7:0c:48:38:43:3a:57:15:a2:29:
c3:a5:53:f2:d1:bc:9d:b5:a2:74:ef:b8:ff:5b:6b:c9:f0:9a:
01:d0:45:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:39:30 2025 by rpki-client