Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
File: UrDyNFHcBfp-z50etB3T0TdWRTs.mft (raw, json)
Hash identifier: McrO3R01/YGDaALNA1tgL5b78V/ywRmEKA4BbHWOjxY=
Subject key identifier: A1:AA:3A:EE:AC:70:3F:72:2D:FE:DA:3E:E8:B0:2A:88:1E:27:DE:AB
Authority key identifier: 52:B0:F2:34:51:DC:05:FA:7E:CF:9D:1E:B4:1D:D3:D1:37:56:45:3B
Certificate issuer: /CN=52b0f23451dc05fa7ecf9d1eb41dd3d13756453b
Certificate serial: 01958EBD0C0A86CB2B29C0EFBCC15B8EAAA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
Manifest number: 1494
Signing time: Thu 13 Mar 2025 09:01:48 +0000
Manifest this update: Thu 13 Mar 2025 09:01:48 +0000
Manifest next update: Fri 14 Mar 2025 09:01:48 +0000
Files and hashes: 1: UrDyNFHcBfp-z50etB3T0TdWRTs.crl (hash: juiOYs2+rreIKYPsBBchEODMUhsIRsDhLHcebuX+lKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:bd:0c:0a:86:cb:2b:29:c0:ef:bc:c1:5b:8e:aa:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b0f23451dc05fa7ecf9d1eb41dd3d13756453b
Validity
Not Before: Mar 13 09:01:48 2025 GMT
Not After : Mar 14 09:01:48 2025 GMT
Subject: CN=a1aa3aeeac703f722dfeda3ee8b02a881e27deab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:01:f9:b3:1e:29:64:3b:79:fc:2a:ea:f9:8a:
85:49:8d:37:75:88:6b:74:3c:fd:08:94:fc:2a:f6:
3f:da:8e:c7:bb:cd:1b:fc:a6:a6:d4:87:79:15:5e:
d6:62:15:a5:89:c7:87:60:5a:0d:8a:83:73:43:06:
29:4e:a4:31:12:fd:c6:59:04:d6:d1:4c:66:7f:ba:
6b:14:66:73:95:50:d4:02:43:23:98:5c:aa:97:af:
e2:57:86:3d:ef:60:9b:71:04:75:47:42:bc:20:28:
2f:67:b1:6a:eb:64:09:03:db:c3:27:bf:6f:ad:e0:
de:db:af:de:c0:74:e5:87:b1:ac:c6:de:83:98:23:
be:ce:5d:90:e1:eb:18:15:59:13:70:74:25:e0:8c:
7c:2e:29:8f:45:e3:1b:b3:3a:3f:ec:25:bb:fb:d4:
8a:32:18:04:6d:b0:33:ff:cd:11:39:0b:ed:95:04:
aa:55:11:dc:a1:64:d8:be:5e:6f:14:97:c1:97:78:
0d:a0:75:53:4d:fb:e6:f3:90:84:71:06:88:76:20:
ac:28:5c:77:13:7b:7b:d0:c2:e8:b6:af:e2:9c:01:
52:68:1e:64:e4:e2:79:5f:63:53:87:1d:49:37:a3:
60:ea:a8:5c:bf:c4:0f:77:b3:88:1c:70:2e:c4:da:
8f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AA:3A:EE:AC:70:3F:72:2D:FE:DA:3E:E8:B0:2A:88:1E:27:DE:AB
X509v3 Authority Key Identifier:
keyid:52:B0:F2:34:51:DC:05:FA:7E:CF:9D:1E:B4:1D:D3:D1:37:56:45:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e4:89:4b:c1:65:80:66:a6:32:e0:e6:a0:06:f5:ab:2c:3a:
44:e3:33:11:76:f5:1a:58:ea:2a:6f:a3:cb:e9:25:40:b7:9a:
57:f9:e3:30:6b:b6:9a:79:04:c3:0f:0b:43:97:31:70:69:38:
d2:82:71:54:00:7a:ba:78:31:f9:65:44:f6:10:c6:ca:86:5f:
d1:61:89:aa:d9:ea:5f:8b:90:24:99:d9:5f:9e:de:2f:4a:02:
dd:32:b9:12:f9:2f:1b:e2:e2:11:59:62:02:3b:d9:20:b1:7b:
8b:6f:5a:8f:d5:a7:4f:32:55:97:45:65:e0:a6:88:07:c2:4d:
34:6a:66:a7:c8:17:e8:1b:5f:96:0b:ca:cc:37:b2:ce:0b:c3:
2d:7c:7b:67:1a:2b:f4:cb:37:d3:35:1a:88:58:e9:60:be:d3:
9f:6f:23:f4:7e:e3:74:a3:d2:2a:72:34:d2:23:e7:bb:3a:ab:
2c:d8:50:16:2f:a3:9f:46:eb:75:0d:4c:30:63:66:fe:32:7f:
d7:1f:09:a9:0d:7e:3a:0d:9a:6d:e7:cf:24:3b:c7:5e:eb:e8:
b0:22:fb:09:15:02:a6:e6:2d:82:74:02:47:b7:70:c4:ef:fb:
c0:15:c7:13:c6:75:44:a9:41:81:f3:d2:a9:f7:8b:4e:95:e6:
ac:73:bf:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWOvQwKhssrKcDvvMFbjqqpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYjBmMjM0NTFkYzA1ZmE3ZWNmOWQxZWI0MWRkM2QxMzc1
NjQ1M2IwHhcNMjUwMzEzMDkwMTQ4WhcNMjUwMzE0MDkwMTQ4WjAzMTEwLwYDVQQD
EyhhMWFhM2FlZWFjNzAzZjcyMmRmZWRhM2VlOGIwMmE4ODFlMjdkZWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQH5sx4pZDt5/Crq+YqFSY03dYhr
dDz9CJT8KvY/2o7Hu80b/Kam1Id5FV7WYhWliceHYFoNioNzQwYpTqQxEv3GWQTW
0Uxmf7prFGZzlVDUAkMjmFyql6/iV4Y972CbcQR1R0K8ICgvZ7Fq62QJA9vDJ79v
reDe26/ewHTlh7Gsxt6DmCO+zl2Q4esYFVkTcHQl4Ix8LimPReMbszo/7CW7+9SK
MhgEbbAz/80ROQvtlQSqVRHcoWTYvl5vFJfBl3gNoHVTTfvm85CEcQaIdiCsKFx3
E3t70MLotq/inAFSaB5k5OJ5X2NThx1JN6Ng6qhcv8QPd7OIHHAuxNqP+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGqOu6scD9yLf7aPuiwKogeJ96rMB8GA1UdIwQY
MBaAFFKw8jRR3AX6fs+dHrQd09E3VkU7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXJEeU5GSGNCZnAtejUwZXRCM1QwVGRXUlRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81M2Q5MjQtNGRiZC00NTAxLWJmYjMt
ODQwZjA5ZWQ0OGQ1LzEvVXJEeU5GSGNCZnAtejUwZXRCM1QwVGRXUlRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC81M2Q5MjQtNGRiZC00NTAxLWJmYjMtODQwZjA5ZWQ0OGQ1
LzEvVXJEeU5GSGNCZnAtejUwZXRCM1QwVGRXUlRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWuSJS8Fl
gGamMuDmoAb1qyw6ROMzEXb1GljqKm+jy+klQLeaV/njMGu2mnkEww8LQ5cxcGk4
0oJxVAB6ungx+WVE9hDGyoZf0WGJqtnqX4uQJJnZX57eL0oC3TK5EvkvG+LiEVli
AjvZILF7i29aj9WnTzJVl0Vl4KaIB8JNNGpmp8gX6BtflgvKzDeyzgvDLXx7Zxor
9Ms30zUaiFjpYL7Tn28j9H7jdKPSKnI00iPnuzqrLNhQFi+jn0brdQ1MMGNm/jJ/
1x8JqQ1+Og2abefPJDvHXuvosCL7CRUCpuYtgnQCR7dwxO/7wBXHE8Z1RKlBgfPS
qfeLTpXmrHO/ig==
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:42:05 2025 by rpki-client