Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
File: uUZ8BbpC7h85pkpT4dA0Azbl48M.mft (raw, json)
Hash identifier: QS4C2LSTu71/layqVfYKxyWxUxLfTmkM8NXVSHW10gY=
Subject key identifier: 0D:38:60:FA:C6:52:FC:E0:13:2B:3F:9C:B4:EB:55:4B:45:CE:D0:7B
Authority key identifier: B9:46:7C:05:BA:42:EE:1F:39:A6:4A:53:E1:D0:34:03:36:E5:E3:C3
Certificate issuer: /CN=b9467c05ba42ee1f39a64a53e1d0340336e5e3c3
Certificate serial: 01964AEB480382464996C8FD77D4195C8855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUZ8BbpC7h85pkpT4dA0Azbl48M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
Manifest number: 14F6
Signing time: Fri 18 Apr 2025 22:00:55 +0000
Manifest this update: Fri 18 Apr 2025 22:00:55 +0000
Manifest next update: Sat 19 Apr 2025 22:00:55 +0000
Files and hashes: 1: uUZ8BbpC7h85pkpT4dA0Azbl48M.crl (hash: HvrRTPN+v/QUjyptvb3OB4HJ2fOTrf6Lg3wguuZOTKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUZ8BbpC7h85pkpT4dA0Azbl48M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:eb:48:03:82:46:49:96:c8:fd:77:d4:19:5c:88:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9467c05ba42ee1f39a64a53e1d0340336e5e3c3
Validity
Not Before: Apr 18 22:00:55 2025 GMT
Not After : Apr 19 22:00:55 2025 GMT
Subject: CN=0d3860fac652fce0132b3f9cb4eb554b45ced07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:46:7d:bb:cc:a5:38:36:d9:ef:f5:8e:37:ee:
8c:22:23:70:ba:89:55:cf:40:fb:2f:9a:5c:c7:77:
27:e5:77:fe:05:40:89:6b:e6:70:04:a4:1e:a0:c4:
8f:a5:c9:44:7f:b4:eb:97:05:25:a4:81:a4:b4:dd:
76:2b:99:52:aa:52:18:78:b6:f8:6e:db:66:33:d0:
df:a2:8e:c2:7a:87:70:5d:e9:55:ef:35:64:98:fd:
8f:7f:ba:3f:b9:0f:9e:77:63:54:ab:9b:f4:c2:e3:
90:55:1d:3d:4d:37:54:8c:0e:d7:16:10:18:3d:e3:
63:fb:b5:7b:3e:32:0a:97:90:3f:5a:46:2b:45:e2:
e9:ce:33:20:41:9f:4d:51:d1:b1:c8:9f:eb:ca:76:
23:89:44:80:22:e7:8d:d4:95:49:ca:43:3e:cd:42:
08:2f:c4:3a:34:30:11:d4:ce:e8:bb:5c:8c:fb:d1:
93:02:8c:60:87:cf:ca:11:3d:69:b3:05:e9:aa:1b:
70:f4:aa:40:8e:fc:09:cd:8f:5c:0e:17:34:d1:17:
1b:fc:03:ff:6d:85:6e:91:61:92:d5:e8:fd:4d:ae:
42:a3:d6:7c:02:bf:79:83:f7:39:e4:98:53:cc:84:
0f:57:33:9a:c8:50:da:62:fc:b8:63:b4:0b:2b:e8:
bc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:38:60:FA:C6:52:FC:E0:13:2B:3F:9C:B4:EB:55:4B:45:CE:D0:7B
X509v3 Authority Key Identifier:
keyid:B9:46:7C:05:BA:42:EE:1F:39:A6:4A:53:E1:D0:34:03:36:E5:E3:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUZ8BbpC7h85pkpT4dA0Azbl48M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:18:9d:af:e2:98:8b:62:6a:bd:fb:78:30:b4:3b:6a:7a:c6:
da:5e:ae:45:e6:a2:af:49:81:cb:04:97:c6:15:63:55:d7:d8:
e0:14:77:80:f6:c0:08:8d:8e:6f:93:b9:d8:ce:95:9c:ba:21:
c1:da:78:93:54:4b:4d:22:83:09:43:60:75:69:55:51:f1:b8:
92:c0:21:61:72:39:67:a5:21:e0:63:5b:48:5e:c3:db:4f:8f:
8b:d5:a3:38:03:b8:d2:ff:25:f8:cf:c8:4f:ab:ee:37:7b:5a:
ec:03:7f:cb:63:12:ef:83:b3:41:6d:6a:1a:41:84:24:cb:9e:
54:89:3e:e4:a9:ee:81:98:41:64:f5:1d:a6:64:1b:39:cd:08:
e3:f0:6d:c6:0a:f9:0d:2b:7a:65:f8:c9:b8:b7:67:80:da:26:
b9:2c:55:a0:a1:dd:a3:bb:43:2c:34:f7:f4:65:14:ec:fe:84:
38:7f:16:da:e7:dd:5f:44:5a:b9:f6:ba:67:84:28:45:6c:65:
43:98:c6:66:ca:b8:ba:c3:06:bc:3f:ef:6e:dc:89:50:a1:d3:
45:27:67:0c:0d:0b:4b:6e:08:be:25:be:9e:1d:a2:b7:d3:fa:
38:74:a3:76:08:ff:77:ff:a2:43:1c:cc:e5:fc:43:cb:91:4e:
e3:dc:bd:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZK60gDgkZJlsj9d9QZXIhVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NDY3YzA1YmE0MmVlMWYzOWE2NGE1M2UxZDAzNDAzMzZl
NWUzYzMwHhcNMjUwNDE4MjIwMDU1WhcNMjUwNDE5MjIwMDU1WjAzMTEwLwYDVQQD
EygwZDM4NjBmYWM2NTJmY2UwMTMyYjNmOWNiNGViNTU0YjQ1Y2VkMDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kZ9u8ylODbZ7/WON+6MIiNwuolV
z0D7L5pcx3cn5Xf+BUCJa+ZwBKQeoMSPpclEf7TrlwUlpIGktN12K5lSqlIYeLb4
bttmM9Dfoo7CeodwXelV7zVkmP2Pf7o/uQ+ed2NUq5v0wuOQVR09TTdUjA7XFhAY
PeNj+7V7PjIKl5A/WkYrReLpzjMgQZ9NUdGxyJ/rynYjiUSAIueN1JVJykM+zUII
L8Q6NDAR1M7ou1yM+9GTAoxgh8/KET1pswXpqhtw9KpAjvwJzY9cDhc00Rcb/AP/
bYVukWGS1ej9Ta5Co9Z8Ar95g/c55JhTzIQPVzOayFDaYvy4Y7QLK+i81QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA04YPrGUvzgEys/nLTrVUtFztB7MB8GA1UdIwQY
MBaAFLlGfAW6Qu4fOaZKU+HQNAM25ePDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVVaOEJicEM3aDg1cGtwVDRkQTBBemJsNDhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82NTJjODgtYWJlNi00Nzk0LWI3YWUt
MzliZjc1MWUzMTBkLzEvdVVaOEJicEM3aDg1cGtwVDRkQTBBemJsNDhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC82NTJjODgtYWJlNi00Nzk0LWI3YWUtMzliZjc1MWUzMTBk
LzEvdVVaOEJicEM3aDg1cGtwVDRkQTBBemJsNDhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjxidr+KY
i2Jqvft4MLQ7anrG2l6uReair0mBywSXxhVjVdfY4BR3gPbACI2Ob5O52M6VnLoh
wdp4k1RLTSKDCUNgdWlVUfG4ksAhYXI5Z6Uh4GNbSF7D20+Pi9WjOAO40v8l+M/I
T6vuN3ta7AN/y2MS74OzQW1qGkGEJMueVIk+5KnugZhBZPUdpmQbOc0I4/Btxgr5
DSt6ZfjJuLdngNomuSxVoKHdo7tDLDT39GUU7P6EOH8W2ufdX0Raufa6Z4QoRWxl
Q5jGZsq4usMGvD/vbtyJUKHTRSdnDA0LS24IviW+nh2it9P6OHSjdgj/d/+iQxzM
5fxDy5FO49y90g==
-----END CERTIFICATE-----
Generated at Sat Apr 19 04:19:42 2025 by rpki-client