Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft
File: uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft (raw, json)
Hash identifier: f+MjJHg9X2QxIFrcnaPePjKtwdIo21aSI7MBRlLiX2A=
Subject key identifier: 52:8A:2C:B9:96:6B:6E:14:49:DC:7E:20:60:6E:47:10:5C:75:04:C0
Authority key identifier: B8:15:25:AE:1A:5A:FC:EF:19:3F:5A:40:17:7B:F2:73:88:83:10:78
Certificate issuer: /CN=b81525ae1a5afcef193f5a40177bf27388831078
Certificate serial: 01965E3B293AEEA318BC3848E1A33D094B76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft
Manifest number: 021E
Signing time: Tue 22 Apr 2025 16:00:57 +0000
Manifest this update: Tue 22 Apr 2025 16:00:57 +0000
Manifest next update: Wed 23 Apr 2025 16:00:57 +0000
Files and hashes: 1: uBUlrhpa_O8ZP1pAF3vyc4iDEHg.crl (hash: 7tJb57mIBQqywYbmmSkCWuYurcgZkO8qsM1nTuewEEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:3b:29:3a:ee:a3:18:bc:38:48:e1:a3:3d:09:4b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81525ae1a5afcef193f5a40177bf27388831078
Validity
Not Before: Apr 22 16:00:57 2025 GMT
Not After : Apr 23 16:00:57 2025 GMT
Subject: CN=528a2cb9966b6e1449dc7e20606e47105c7504c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:be:ce:b5:f5:c6:ae:e9:81:60:c7:b0:c5:60:
2d:31:e4:1b:b8:c1:eb:0a:ed:aa:dc:a6:64:dc:13:
80:62:96:c2:18:03:91:84:96:41:5a:87:5b:5d:44:
a2:06:2e:0e:bd:ca:b1:54:d7:8c:b3:07:e0:02:ab:
d6:13:be:3c:53:25:4c:52:1d:7b:ce:1d:c1:80:09:
d6:e4:5f:4c:4b:f8:e7:9c:f3:7a:d3:83:f2:65:d6:
05:df:38:fc:53:d1:f4:ab:fb:a7:56:bd:ea:97:5d:
c7:4d:75:01:37:30:d2:82:52:68:70:39:d9:3c:24:
7c:a4:ad:9e:26:0e:25:f7:46:45:34:06:47:99:73:
86:60:30:a5:91:05:25:94:e1:9c:fa:24:45:40:50:
29:b1:ee:e4:cc:26:0b:bc:15:92:a0:50:3c:78:0a:
bf:b2:aa:20:54:e3:76:d4:60:86:f3:95:df:41:a5:
c2:6d:af:42:21:a0:df:48:2d:5c:2a:28:a7:d0:ec:
7a:8d:e0:53:36:5d:c0:e0:8f:8b:59:49:59:55:4f:
dd:a9:10:de:6a:fa:d7:31:66:28:29:bc:29:e6:6b:
d4:65:fe:6d:ea:97:62:0b:82:40:a7:5f:ea:bd:5a:
3e:1d:dc:cf:44:f0:95:38:04:86:95:6d:26:68:60:
01:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8A:2C:B9:96:6B:6E:14:49:DC:7E:20:60:6E:47:10:5C:75:04:C0
X509v3 Authority Key Identifier:
keyid:B8:15:25:AE:1A:5A:FC:EF:19:3F:5A:40:17:7B:F2:73:88:83:10:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:cd:ab:1a:16:c7:03:e9:87:32:88:4b:de:0b:c1:25:43:32:
17:cf:e6:38:44:46:f9:a7:4e:f2:fb:20:f8:25:1d:a9:b8:fd:
90:1a:48:92:7f:61:c2:7e:14:c1:af:5e:0b:f3:58:55:df:f6:
d8:78:eb:1b:18:13:c6:b2:2f:69:16:a2:6f:30:c4:00:72:51:
71:17:b0:90:50:e6:ca:42:db:c0:23:03:d7:ac:fd:20:15:e8:
88:2c:d4:8c:0e:bc:71:1e:a8:d5:2a:0c:f6:fb:f0:78:17:5b:
ba:3f:51:11:c6:c1:e8:d5:25:16:40:7b:f6:0f:2b:57:a6:19:
dd:68:0a:b8:28:d7:a9:25:a3:60:fb:80:7d:4f:0b:3a:c6:14:
2c:24:79:b4:39:28:2a:d4:af:99:48:6b:cc:f7:ab:02:bf:e5:
1f:3c:c9:5d:bd:6a:48:79:45:d9:c8:3e:25:8c:40:d6:01:11:
92:ba:6e:61:3c:58:4b:29:d0:f4:05:d7:58:2c:19:bf:7c:ad:
d8:83:39:74:9c:08:0b:3d:7b:64:74:9b:d8:47:cb:1f:ae:a8:
b9:fd:9d:82:8b:9f:2a:fa:b6:0a:e3:5a:19:cb:e8:fe:c1:e2:
fe:ce:a7:1d:33:0a:4b:d5:05:03:e6:63:ae:0f:7c:a8:7d:0d:
9c:10:09:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:10:07 2025 by rpki-client