Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft
File: UJw4zD6qNVb6OaIvMNwbpINv6J8.mft (raw, json)
Hash identifier: icpj11YAtHjECM6Dv8/6SJuhT5J8iL5wFXUhQsfzTlk=
Subject key identifier: A9:49:EA:07:BF:35:E1:A0:5C:B3:A8:99:6C:99:9A:B9:42:A0:64:7B
Authority key identifier: 50:9C:38:CC:3E:AA:35:56:FA:39:A2:2F:30:DC:1B:A4:83:6F:E8:9F
Certificate issuer: /CN=509c38cc3eaa3556fa39a22f30dc1ba4836fe89f
Certificate serial: 01958C6042B853357F6C55A48C38F1D7FCBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJw4zD6qNVb6OaIvMNwbpINv6J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft
Manifest number: 1492
Signing time: Wed 12 Mar 2025 22:01:13 +0000
Manifest this update: Wed 12 Mar 2025 22:01:13 +0000
Manifest next update: Thu 13 Mar 2025 22:01:13 +0000
Files and hashes: 1: UJw4zD6qNVb6OaIvMNwbpINv6J8.crl (hash: r+0RydZIphc6EqQ7sEznYLhaoOqHKcIPVRD4fb6YIDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJw4zD6qNVb6OaIvMNwbpINv6J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:42:b8:53:35:7f:6c:55:a4:8c:38:f1:d7:fc:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509c38cc3eaa3556fa39a22f30dc1ba4836fe89f
Validity
Not Before: Mar 12 22:01:13 2025 GMT
Not After : Mar 13 22:01:13 2025 GMT
Subject: CN=a949ea07bf35e1a05cb3a8996c999ab942a0647b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:64:dc:8d:e3:fb:1b:67:59:d2:44:cc:4d:84:
bf:4b:f2:d6:84:df:08:77:e7:3f:7a:7e:18:ff:b8:
3c:b8:2f:fd:e3:f2:3c:c5:02:c7:77:b3:1d:31:a3:
8a:11:35:d1:e8:28:00:9e:0b:de:92:5a:28:04:0b:
1b:a0:07:e8:04:38:ac:ed:7c:b9:80:bf:d9:cf:47:
76:f9:9b:f5:d8:26:78:c7:08:dd:0e:0c:09:4e:14:
78:4d:38:7a:01:5e:a6:89:1d:ea:89:51:3d:ca:d3:
9e:7d:20:a7:94:25:db:c5:f1:6e:41:42:54:4d:7b:
de:e7:93:02:34:31:be:20:1b:2d:e5:b8:e3:03:cf:
6e:33:85:e7:9e:56:1d:71:3a:92:19:fc:6e:a8:41:
16:e4:5c:e4:cb:a5:f8:d2:22:58:83:7f:03:5c:b0:
13:e3:44:24:ab:ad:dd:46:50:69:ce:53:1b:92:7c:
5b:18:cb:a0:bd:c3:f1:95:51:88:de:16:a0:88:14:
90:6b:c4:3e:c7:9b:3f:a1:0e:38:ed:9f:fb:3f:5d:
31:64:9e:6d:86:a8:bd:a9:e4:a1:3a:9d:b6:19:33:
24:07:67:4d:47:e5:c3:1f:2d:12:cd:74:33:23:7f:
a4:51:59:9b:ad:a6:cb:d6:bb:a7:36:a3:83:38:79:
dd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:49:EA:07:BF:35:E1:A0:5C:B3:A8:99:6C:99:9A:B9:42:A0:64:7B
X509v3 Authority Key Identifier:
keyid:50:9C:38:CC:3E:AA:35:56:FA:39:A2:2F:30:DC:1B:A4:83:6F:E8:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJw4zD6qNVb6OaIvMNwbpINv6J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:af:a7:d6:6f:08:bc:15:f5:13:ce:b3:c2:8e:a0:25:a8:53:
1a:b9:37:99:78:b0:00:99:49:bd:ed:9a:19:2c:04:23:90:52:
5f:19:e2:18:16:a5:eb:76:85:57:13:5b:0c:97:b5:11:98:52:
b7:2f:84:c4:5b:ea:3b:4d:f1:33:a0:e7:19:08:a1:65:49:55:
31:fe:ec:74:57:8d:58:bb:ac:f0:53:f6:ad:00:52:a8:77:01:
58:84:b4:05:d6:4d:2d:91:d9:81:10:98:8f:b6:67:e7:b7:75:
c0:5a:87:c4:11:79:6e:de:60:67:b7:db:6c:0f:e8:b5:c1:d0:
9b:a4:8e:03:50:fe:4d:81:91:e8:89:d4:9a:b3:a6:8b:6d:9b:
68:81:4c:56:68:b9:ee:af:52:78:96:72:d6:96:21:80:5d:f2:
a0:ff:ea:23:4a:31:7f:41:27:2e:16:f4:37:3f:56:4f:77:52:
0d:17:00:67:df:47:81:c8:b0:22:a1:68:b2:12:61:7c:11:c1:
e9:15:79:d3:5a:b0:e3:78:49:cc:a3:8a:f0:a6:90:b5:c2:24:
a3:5f:00:4b:a0:67:4e:88:10:dc:47:86:92:55:d8:f9:00:f9:
21:60:93:eb:f3:68:c3:b0:1b:18:3e:7f:42:e1:19:43:f0:85:
50:43:da:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMYEK4UzV/bFWkjDjx1/y8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwOWMzOGNjM2VhYTM1NTZmYTM5YTIyZjMwZGMxYmE0ODM2
ZmU4OWYwHhcNMjUwMzEyMjIwMTEzWhcNMjUwMzEzMjIwMTEzWjAzMTEwLwYDVQQD
EyhhOTQ5ZWEwN2JmMzVlMWEwNWNiM2E4OTk2Yzk5OWFiOTQyYTA2NDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWTcjeP7G2dZ0kTMTYS/S/LWhN8I
d+c/en4Y/7g8uC/94/I8xQLHd7MdMaOKETXR6CgAngveklooBAsboAfoBDis7Xy5
gL/Zz0d2+Zv12CZ4xwjdDgwJThR4TTh6AV6miR3qiVE9ytOefSCnlCXbxfFuQUJU
TXve55MCNDG+IBst5bjjA89uM4XnnlYdcTqSGfxuqEEW5Fzky6X40iJYg38DXLAT
40Qkq63dRlBpzlMbknxbGMugvcPxlVGI3hagiBSQa8Q+x5s/oQ447Z/7P10xZJ5t
hqi9qeShOp22GTMkB2dNR+XDHy0SzXQzI3+kUVmbrabL1runNqODOHndKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKlJ6ge/NeGgXLOomWyZmrlCoGR7MB8GA1UdIwQY
MBaAFFCcOMw+qjVW+jmiLzDcG6SDb+ifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUp3NHpENnFOVmI2T2FJdk1Od2JwSU52Nko4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9mYjAwZWMtYmFiZC00MTcyLThkNGQt
MmE2NGY5OWJhZjVmLzEvVUp3NHpENnFOVmI2T2FJdk1Od2JwSU52Nko4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9mYjAwZWMtYmFiZC00MTcyLThkNGQtMmE2NGY5OWJhZjVm
LzEvVUp3NHpENnFOVmI2T2FJdk1Od2JwSU52Nko4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbK+n1m8I
vBX1E86zwo6gJahTGrk3mXiwAJlJve2aGSwEI5BSXxniGBal63aFVxNbDJe1EZhS
ty+ExFvqO03xM6DnGQihZUlVMf7sdFeNWLus8FP2rQBSqHcBWIS0BdZNLZHZgRCY
j7Zn57d1wFqHxBF5bt5gZ7fbbA/otcHQm6SOA1D+TYGR6InUmrOmi22baIFMVmi5
7q9SeJZy1pYhgF3yoP/qI0oxf0EnLhb0Nz9WT3dSDRcAZ99HgciwIqFoshJhfBHB
6RV501qw43hJzKOK8KaQtcIko18AS6BnTogQ3EeGklXY+QD5IWCT6/Now7AbGD5/
QuEZQ/CFUEPayA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:37 2025 by rpki-client