Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/6e02a9-08ad-4743-b538-f3029c39b66e/1/u-BbYYon9sEO-Zm8ltmqDL0UraU.mft
File: u-BbYYon9sEO-Zm8ltmqDL0UraU.mft (raw, json)
Hash identifier: YHv1VOS/zrLUwQa/KCtzg/cIMWFrBYv+NvtL/+Uljlo=
Subject key identifier: DB:55:6B:FC:72:E9:A0:FD:98:27:3B:7F:DD:C6:72:48:BE:57:B9:74
Authority key identifier: BB:E0:5B:61:8A:27:F6:C1:0E:F9:99:BC:96:D9:AA:0C:BD:14:AD:A5
Certificate issuer: /CN=bbe05b618a27f6c10ef999bc96d9aa0cbd14ada5
Certificate serial: 019751212DE9E2FC0299C9C8AFC31A2D2017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-BbYYon9sEO-Zm8ltmqDL0UraU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/6e02a9-08ad-4743-b538-f3029c39b66e/1/u-BbYYon9sEO-Zm8ltmqDL0UraU.mft
Manifest number: 0102
Signing time: Sun 08 Jun 2025 20:00:18 +0000
Manifest this update: Sun 08 Jun 2025 20:00:18 +0000
Manifest next update: Mon 09 Jun 2025 20:00:18 +0000
Files and hashes: 1: u-BbYYon9sEO-Zm8ltmqDL0UraU.crl (hash: nFzYW1vy486PlsfESuBwlhic8TDcAkoQ0hYx8MBTXI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/6e02a9-08ad-4743-b538-f3029c39b66e/1/u-BbYYon9sEO-Zm8ltmqDL0UraU.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/6e02a9-08ad-4743-b538-f3029c39b66e/1/u-BbYYon9sEO-Zm8ltmqDL0UraU.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-BbYYon9sEO-Zm8ltmqDL0UraU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 20:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:2d:e9:e2:fc:02:99:c9:c8:af:c3:1a:2d:20:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe05b618a27f6c10ef999bc96d9aa0cbd14ada5
Validity
Not Before: Jun 8 20:00:18 2025 GMT
Not After : Jun 9 20:00:18 2025 GMT
Subject: CN=db556bfc72e9a0fd98273b7fddc67248be57b974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:74:6a:49:ea:83:17:42:b9:95:15:db:dc:3e:
69:ea:4f:87:fb:91:43:ed:81:53:42:1c:3c:f3:69:
d3:c0:f5:7a:f6:95:4f:d7:a8:5c:0c:bb:ba:cb:39:
11:69:47:94:42:a3:85:1b:f1:c6:64:52:24:b3:90:
b5:69:c3:91:96:bd:85:ee:59:eb:48:85:07:a5:94:
31:5b:e3:40:e1:de:74:38:53:99:10:83:1d:2b:44:
ea:49:5b:b0:d4:88:f9:f6:33:e0:d1:24:ec:49:75:
85:86:02:c3:c2:c0:cc:94:d8:88:f4:f6:39:34:b2:
c9:b6:34:ab:d7:78:ba:77:0c:b6:6d:25:65:5d:bb:
50:b0:5d:d2:ad:93:aa:b3:80:4a:1c:a5:2b:89:a0:
15:a9:47:97:04:d7:13:8f:b6:5a:5e:85:54:d3:ce:
87:ff:90:6b:a0:ec:a5:3b:2a:dd:45:67:d8:4e:70:
dc:b3:28:c3:7a:39:65:61:30:0c:9d:40:d9:cf:c1:
29:ce:95:5d:d5:ee:7a:77:d5:05:c6:56:be:f6:1f:
41:de:e2:9b:19:b9:1c:13:35:6b:b9:6a:91:8b:0d:
88:df:d0:d2:d2:87:a3:e0:32:b0:68:ea:b2:8b:bc:
34:95:39:65:97:b6:99:d5:7b:3f:22:92:99:96:59:
c2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:55:6B:FC:72:E9:A0:FD:98:27:3B:7F:DD:C6:72:48:BE:57:B9:74
X509v3 Authority Key Identifier:
keyid:BB:E0:5B:61:8A:27:F6:C1:0E:F9:99:BC:96:D9:AA:0C:BD:14:AD:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-BbYYon9sEO-Zm8ltmqDL0UraU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/6e02a9-08ad-4743-b538-f3029c39b66e/1/u-BbYYon9sEO-Zm8ltmqDL0UraU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/6e02a9-08ad-4743-b538-f3029c39b66e/1/u-BbYYon9sEO-Zm8ltmqDL0UraU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:24:b3:0b:39:57:fc:26:a7:b1:26:51:2f:fe:7e:9d:ce:05:
ad:7a:31:cd:5d:c0:0c:30:34:57:19:ea:22:98:c8:ed:80:b5:
77:a3:9f:c1:3c:40:c8:f5:59:95:d7:61:52:57:10:fa:22:ed:
bc:9f:27:a5:2e:9a:b2:b9:1a:ba:4d:56:20:3a:4b:53:ac:31:
48:ed:90:37:12:a7:33:5b:c1:89:5c:b8:91:b7:01:ce:ec:d9:
02:75:b6:27:30:81:06:b4:2c:b3:de:7e:2e:2e:99:20:46:f6:
6d:e9:a3:af:0b:07:2b:bd:d0:85:7c:d1:71:79:47:ca:d3:51:
11:72:20:c9:80:8d:ce:0f:c2:50:5a:31:ce:b5:fb:c7:c7:da:
76:15:c2:14:77:b3:4d:c3:d6:f0:47:43:33:be:90:a7:36:13:
4b:f5:fa:7d:74:ec:92:d3:a8:03:e4:f1:f8:35:27:97:1e:02:
82:1a:9b:c9:66:74:3b:b2:0f:cd:3a:3e:58:d3:bd:6a:d9:1e:
33:2a:51:a6:f4:83:be:dc:cd:75:5c:61:d8:a4:9a:59:03:63:
30:ff:86:62:98:12:bb:e1:1d:c6:55:08:5c:8e:d0:62:58:0d:
74:43:40:b6:9c:bb:82:33:ca:a1:fa:62:aa:df:f8:2c:55:44:
c6:15:09:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdRIS3p4vwCmcnIr8MaLSAXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZTA1YjYxOGEyN2Y2YzEwZWY5OTliYzk2ZDlhYTBjYmQx
NGFkYTUwHhcNMjUwNjA4MjAwMDE4WhcNMjUwNjA5MjAwMDE4WjAzMTEwLwYDVQQD
EyhkYjU1NmJmYzcyZTlhMGZkOTgyNzNiN2ZkZGM2NzI0OGJlNTdiOTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XRqSeqDF0K5lRXb3D5p6k+H+5FD
7YFTQhw882nTwPV69pVP16hcDLu6yzkRaUeUQqOFG/HGZFIks5C1acORlr2F7lnr
SIUHpZQxW+NA4d50OFOZEIMdK0TqSVuw1Ij59jPg0STsSXWFhgLDwsDMlNiI9PY5
NLLJtjSr13i6dwy2bSVlXbtQsF3SrZOqs4BKHKUriaAVqUeXBNcTj7ZaXoVU086H
/5BroOylOyrdRWfYTnDcsyjDejllYTAMnUDZz8EpzpVd1e56d9UFxla+9h9B3uKb
GbkcEzVruWqRiw2I39DS0oej4DKwaOqyi7w0lTlll7aZ1Xs/IpKZllnCWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtVa/xy6aD9mCc7f93Gcki+V7l0MB8GA1UdIwQY
MBaAFLvgW2GKJ/bBDvmZvJbZqgy9FK2lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdS1CYllZb245c0VPLVptOGx0bXFETDBVcmFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS82ZTAyYTktMDhhZC00NzQzLWI1Mzgt
ZjMwMjljMzliNjZlLzEvdS1CYllZb245c0VPLVptOGx0bXFETDBVcmFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS82ZTAyYTktMDhhZC00NzQzLWI1MzgtZjMwMjljMzliNjZl
LzEvdS1CYllZb245c0VPLVptOGx0bXFETDBVcmFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiCSzCzlX
/CansSZRL/5+nc4FrXoxzV3ADDA0VxnqIpjI7YC1d6OfwTxAyPVZlddhUlcQ+iLt
vJ8npS6asrkauk1WIDpLU6wxSO2QNxKnM1vBiVy4kbcBzuzZAnW2JzCBBrQss95+
Li6ZIEb2bemjrwsHK73QhXzRcXlHytNREXIgyYCNzg/CUFoxzrX7x8fadhXCFHez
TcPW8EdDM76QpzYTS/X6fXTsktOoA+Tx+DUnlx4CghqbyWZ0O7IPzTo+WNO9atke
MypRpvSDvtzNdVxh2KSaWQNjMP+GYpgSu+EdxlUIXI7QYlgNdENAtpy7gjPKofpi
qt/4LFVExhUJuQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 04:54:46 2025 by rpki-client