Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft
File: uLhsyEeC6kEMbYfCzTv4agaqF7s.mft (raw, json)
Hash identifier: HWcR2Zn0U356DwhQ7IxFzbqhH94vKFD0Fx46UpTIlio=
Subject key identifier: 6F:E3:2A:CF:C5:77:20:08:EF:B5:68:99:18:3F:A0:4C:27:63:08:74
Authority key identifier: B8:B8:6C:C8:47:82:EA:41:0C:6D:87:C2:CD:3B:F8:6A:06:AA:17:BB
Certificate issuer: /CN=b8b86cc84782ea410c6d87c2cd3bf86a06aa17bb
Certificate serial: 019579B49E8B7D9F038DB55A80AEF0927695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLhsyEeC6kEMbYfCzTv4agaqF7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft
Manifest number: 0B1D
Signing time: Sun 09 Mar 2025 07:00:35 +0000
Manifest this update: Sun 09 Mar 2025 07:00:35 +0000
Manifest next update: Mon 10 Mar 2025 07:00:35 +0000
Files and hashes: 1: uLhsyEeC6kEMbYfCzTv4agaqF7s.crl (hash: b/TzMQ81SQwfC0APvat9VRHvGAdVo5Mjgl3F16Z1aCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uLhsyEeC6kEMbYfCzTv4agaqF7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:b4:9e:8b:7d:9f:03:8d:b5:5a:80:ae:f0:92:76:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8b86cc84782ea410c6d87c2cd3bf86a06aa17bb
Validity
Not Before: Mar 9 07:00:35 2025 GMT
Not After : Mar 10 07:00:35 2025 GMT
Subject: CN=6fe32acfc5772008efb56899183fa04c27630874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:48:b1:4f:bd:e0:fe:56:94:df:13:69:bd:e1:
d1:c1:94:b6:86:ce:1b:a1:f3:fd:a9:6e:b3:e6:0e:
9a:1e:bb:8f:fc:79:3e:34:38:c7:f2:e8:1c:48:fa:
ee:03:56:7f:a0:1e:62:9e:39:97:fa:b5:72:0d:a7:
a1:da:c6:f0:d9:4b:8c:cb:ae:87:26:07:2d:ad:ed:
d2:a2:de:68:04:ca:67:bf:2b:9f:ca:ce:86:1e:e4:
c9:b9:bd:33:02:83:f4:42:92:57:06:50:60:49:bf:
7c:6d:a4:83:a1:27:a7:5c:24:a1:8e:51:36:5e:ef:
11:33:a7:53:f5:b3:3d:da:69:f0:b6:a8:5c:cd:9a:
3d:6e:a2:64:38:30:5f:cd:20:54:85:a2:d9:76:09:
e1:09:77:6f:d5:f7:59:f9:e0:16:6c:21:bb:3c:51:
b5:56:94:c0:81:2e:e4:df:54:00:f6:73:3c:0e:a2:
c9:2b:5f:fc:27:e5:01:96:06:dc:58:8a:89:2d:16:
82:6f:54:80:cb:11:6a:b0:59:4b:d6:16:86:4e:d3:
71:e0:54:85:64:e9:77:fd:d9:93:f7:d8:bc:26:fc:
40:33:09:4e:f8:9b:9c:c1:85:05:2f:b4:0b:84:42:
ab:61:7a:b9:39:0d:9e:22:f8:96:25:97:b6:78:c2:
56:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E3:2A:CF:C5:77:20:08:EF:B5:68:99:18:3F:A0:4C:27:63:08:74
X509v3 Authority Key Identifier:
keyid:B8:B8:6C:C8:47:82:EA:41:0C:6D:87:C2:CD:3B:F8:6A:06:AA:17:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLhsyEeC6kEMbYfCzTv4agaqF7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:8c:5a:30:c2:d1:82:cd:87:71:c4:42:ff:20:4b:08:0f:54:
d9:a6:24:c0:96:1d:4e:e8:60:59:75:e7:fe:1e:fa:14:f1:da:
0a:fd:2f:28:3e:7e:29:d8:af:26:af:1f:68:fe:d2:50:ef:08:
dd:c9:ea:b0:21:2e:f2:6b:31:bb:c4:0a:c3:a0:72:09:99:54:
ce:24:9e:e0:43:80:64:22:88:70:b1:e7:f5:1e:5d:42:cc:5d:
3b:25:a1:6d:b1:27:db:66:b1:08:fa:d4:83:17:53:76:5b:c1:
6c:20:ff:8d:30:24:80:2f:bc:a9:30:a7:33:98:66:3f:aa:68:
ef:38:b1:26:d5:43:6c:fc:a0:92:6b:da:b4:78:bc:3e:fc:7f:
32:c6:bf:d8:e8:c4:98:5c:6d:f6:15:e9:af:be:48:32:fa:ed:
80:c7:85:09:8c:d2:5a:b7:bb:28:66:b4:45:c4:3f:45:e5:54:
8f:c5:82:ed:10:b5:65:48:4c:0c:6e:e4:e8:c4:bd:55:ec:5e:
1b:d4:7c:e9:0b:a2:92:12:17:22:36:cd:a0:e6:c9:f2:23:4b:
97:50:93:b8:d8:4a:00:4c:bf:e3:5f:69:88:90:d9:c0:73:4f:
5b:b2:da:cd:82:e7:56:da:66:26:24:b2:0f:56:e9:d4:ba:00:
d0:30:d9:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZV5tJ6LfZ8DjbVagK7wknaVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4Yjg2Y2M4NDc4MmVhNDEwYzZkODdjMmNkM2JmODZhMDZh
YTE3YmIwHhcNMjUwMzA5MDcwMDM1WhcNMjUwMzEwMDcwMDM1WjAzMTEwLwYDVQQD
Eyg2ZmUzMmFjZmM1NzcyMDA4ZWZiNTY4OTkxODNmYTA0YzI3NjMwODc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEixT73g/laU3xNpveHRwZS2hs4b
ofP9qW6z5g6aHruP/Hk+NDjH8ugcSPruA1Z/oB5injmX+rVyDaeh2sbw2UuMy66H
Jgctre3Sot5oBMpnvyufys6GHuTJub0zAoP0QpJXBlBgSb98baSDoSenXCShjlE2
Xu8RM6dT9bM92mnwtqhczZo9bqJkODBfzSBUhaLZdgnhCXdv1fdZ+eAWbCG7PFG1
VpTAgS7k31QA9nM8DqLJK1/8J+UBlgbcWIqJLRaCb1SAyxFqsFlL1haGTtNx4FSF
ZOl3/dmT99i8JvxAMwlO+JucwYUFL7QLhEKrYXq5OQ2eIviWJZe2eMJWCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/jKs/FdyAI77VomRg/oEwnYwh0MB8GA1UdIwQY
MBaAFLi4bMhHgupBDG2Hws07+GoGqhe7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUxoc3lFZUM2a0VNYllmQ3pUdjRhZ2FxRjdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS82MmFkMTktM2U5Zi00N2VjLTllZTct
Y2Y1MzFlYzIzMGQ4LzEvdUxoc3lFZUM2a0VNYllmQ3pUdjRhZ2FxRjdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS82MmFkMTktM2U5Zi00N2VjLTllZTctY2Y1MzFlYzIzMGQ4
LzEvdUxoc3lFZUM2a0VNYllmQ3pUdjRhZ2FxRjdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlIxaMMLR
gs2HccRC/yBLCA9U2aYkwJYdTuhgWXXn/h76FPHaCv0vKD5+KdivJq8faP7SUO8I
3cnqsCEu8msxu8QKw6ByCZlUziSe4EOAZCKIcLHn9R5dQsxdOyWhbbEn22axCPrU
gxdTdlvBbCD/jTAkgC+8qTCnM5hmP6po7zixJtVDbPygkmvatHi8Pvx/Msa/2OjE
mFxt9hXpr75IMvrtgMeFCYzSWre7KGa0RcQ/ReVUj8WC7RC1ZUhMDG7k6MS9Vexe
G9R86QuikhIXIjbNoObJ8iNLl1CTuNhKAEy/419piJDZwHNPW7LazYLnVtpmJiSy
D1bp1LoA0DDZkg==
-----END CERTIFICATE-----
Generated at Sun Mar 9 11:35:39 2025 by rpki-client