Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
File: ubjmb62BRkWYT9TqrTE7b-AFibc.mft (raw, json)
Hash identifier: FyfRDpb7OYL0qjgJv37XwQaBR+Vh6hazTHg1lVRjSKA=
Subject key identifier: 43:4F:91:23:41:50:EB:57:E1:DA:4A:F5:6D:F8:00:EF:A4:43:20:49
Authority key identifier: B9:B8:E6:6F:AD:81:46:45:98:4F:D4:EA:AD:31:3B:6F:E0:05:89:B7
Certificate issuer: /CN=b9b8e66fad814645984fd4eaad313b6fe00589b7
Certificate serial: 0197488D1C36892BFD3FB5F128C3AC1F5936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
Manifest number: 0A00
Signing time: Sat 07 Jun 2025 04:01:36 +0000
Manifest this update: Sat 07 Jun 2025 04:01:36 +0000
Manifest next update: Sun 08 Jun 2025 04:01:36 +0000
Files and hashes: 1: ubjmb62BRkWYT9TqrTE7b-AFibc.crl (hash: 0QvTQUJQSsQPM/M2k9nIFpO7bo+9OJeUttL1sQM1tgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:1c:36:89:2b:fd:3f:b5:f1:28:c3:ac:1f:59:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b8e66fad814645984fd4eaad313b6fe00589b7
Validity
Not Before: Jun 7 04:01:36 2025 GMT
Not After : Jun 8 04:01:36 2025 GMT
Subject: CN=434f91234150eb57e1da4af56df800efa4432049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:17:72:d5:74:43:43:02:77:22:ca:79:90:47:
96:7b:a7:5c:fd:e1:cc:e6:be:f2:f3:ad:3e:0f:cc:
75:43:44:16:d1:77:ba:78:c5:2d:5e:5d:f6:67:0a:
03:5d:b7:19:3c:cb:7e:f1:0a:91:b0:e2:db:77:49:
13:85:57:bf:d1:6f:ae:b5:63:1d:c9:ee:da:5e:33:
4b:6f:d0:66:cb:b3:c0:44:9f:31:20:72:83:23:6d:
e0:a3:06:0a:72:ca:f0:1a:f3:24:cd:10:60:76:33:
ee:d1:85:1b:0c:bc:f1:d9:8f:f4:e2:35:04:44:b9:
02:1b:c2:f1:c3:7d:32:8e:ea:5c:99:54:c4:ae:66:
0a:85:0d:59:ec:f6:ba:2d:38:23:eb:55:38:1d:d1:
74:b4:c3:79:4f:4f:42:8e:90:26:95:47:d8:2a:70:
30:bf:8a:b7:cc:27:8b:77:da:a9:ce:9d:ff:cc:db:
65:98:47:e5:54:16:9a:c2:4d:0d:36:4f:50:da:44:
36:76:32:88:7c:ba:48:6d:5f:0f:6c:92:56:90:a6:
21:5e:32:4a:4f:18:92:31:09:f6:ce:5c:d0:9f:03:
85:2c:8a:47:a3:aa:49:d2:f5:3f:85:60:39:91:08:
fd:c9:73:32:f0:dc:ae:86:f3:a6:04:9b:0c:90:c2:
2d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4F:91:23:41:50:EB:57:E1:DA:4A:F5:6D:F8:00:EF:A4:43:20:49
X509v3 Authority Key Identifier:
keyid:B9:B8:E6:6F:AD:81:46:45:98:4F:D4:EA:AD:31:3B:6F:E0:05:89:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:5b:89:7f:c2:05:0b:62:ce:2e:3e:b5:bb:67:05:17:ca:35:
b0:e5:a5:26:59:c6:a7:61:f6:ba:b0:ec:c8:28:8a:af:55:fe:
d2:fc:c9:06:d2:3b:ba:1e:1d:94:b8:e5:d3:46:2c:a4:96:3c:
cc:60:22:8d:84:26:76:2d:37:a2:f8:21:fd:3f:96:b0:f1:99:
21:93:ef:fd:05:b5:6d:ea:b0:d2:17:6f:3e:40:5e:6c:cb:9c:
ef:74:27:4f:79:27:c6:88:8b:43:5d:64:79:08:db:17:e9:cb:
e2:0e:f1:51:7b:57:39:03:d4:05:36:61:8c:a1:12:fe:61:5d:
87:24:a5:5e:5e:47:52:87:fb:5b:1b:e3:fe:e8:1a:25:6a:76:
c8:74:45:ce:47:ab:cc:6c:b2:44:34:7e:48:99:7c:89:1c:0c:
1a:36:7b:13:35:40:48:f6:76:fe:57:24:be:a3:91:ce:68:da:
48:d6:fa:76:63:c0:75:86:1c:a6:64:82:3a:2b:d4:bd:df:b9:
f7:41:08:57:20:79:10:73:5b:bd:cc:83:30:be:cc:9a:6d:7d:
56:51:dd:6b:77:57:b0:6f:9f:53:df:ea:75:68:12:66:ec:b7:
b6:4c:5b:6b:9b:de:5d:09:28:f8:94:1b:e0:ec:1c:4f:46:44:
1e:73:a4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:33:40 2025 by rpki-client