
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.mft
File: UC_eWr0nGEuqmtq3za-8w6VEGus.mft (raw, json)
Hash identifier: TRGgec4uEEG9KEN/RfQbXdV81kRTsytQXJYuBrSUTt4=
Subject key identifier: BD:DD:BA:00:6C:D0:A3:E5:C2:6B:7A:9D:69:49:3D:9F:A0:0A:A7:D5
Authority key identifier: 50:2F:DE:5A:BD:27:18:4B:AA:9A:DA:B7:CD:AF:BC:C3:A5:44:1A:EB
Certificate issuer: /CN=502fde5abd27184baa9adab7cdafbcc3a5441aeb
Certificate serial: 0197402E61E53A803D6274285DDB6AB5A1E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UC_eWr0nGEuqmtq3za-8w6VEGus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.mft
Manifest number: 12B0
Signing time: Thu 05 Jun 2025 13:01:10 +0000
Manifest this update: Thu 05 Jun 2025 13:01:10 +0000
Manifest next update: Fri 06 Jun 2025 13:01:10 +0000
Files and hashes: 1: UC_eWr0nGEuqmtq3za-8w6VEGus.crl (hash: ql54KxBHh7eNhl4frRk66UNbqOxSPj6tDZLqQscMiBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.mft
rsync://rpki.ripe.net/repository/DEFAULT/UC_eWr0nGEuqmtq3za-8w6VEGus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:40:2e:61:e5:3a:80:3d:62:74:28:5d:db:6a:b5:a1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=502fde5abd27184baa9adab7cdafbcc3a5441aeb
Validity
Not Before: Jun 5 13:01:10 2025 GMT
Not After : Jun 6 13:01:10 2025 GMT
Subject: CN=bdddba006cd0a3e5c26b7a9d69493d9fa00aa7d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:98:e4:e2:7a:21:d2:88:ce:b8:39:e3:f1:f9:
93:7a:c0:7d:d7:48:e9:e8:13:80:89:4a:77:b4:ef:
94:11:92:a8:a3:40:97:30:3e:77:29:3d:50:21:87:
00:90:5d:69:01:2e:bf:2f:26:45:5f:80:3e:61:cf:
c7:1f:cb:e5:f3:e6:01:0e:3c:b3:85:d6:d8:86:42:
7b:6b:8d:a2:7c:d4:e6:b8:28:5f:4f:be:45:e6:a6:
72:cb:22:51:77:f0:13:c9:a6:4d:5d:26:ca:35:41:
77:44:d4:27:fb:88:0e:ef:f4:32:96:25:02:d1:f7:
1d:9d:cc:fc:e3:a4:2c:7c:a4:ae:4a:48:9c:97:db:
5f:54:81:91:04:d0:a5:24:a6:13:11:2b:73:5c:54:
9b:cb:b7:36:15:31:03:e6:ae:a2:d9:f5:f9:85:51:
27:ee:3d:57:e0:98:da:cb:44:f9:ff:74:31:b8:5c:
f5:33:2a:c9:9f:c5:b1:fa:3b:d3:99:45:09:59:2f:
a5:ea:be:59:39:41:83:cf:b4:fe:30:b0:4a:aa:97:
31:14:9f:0a:42:0e:fb:93:7d:42:18:7a:6d:fa:68:
5e:18:c8:cc:86:39:ba:ca:22:6e:e3:98:08:7b:3e:
54:cd:20:cd:77:51:b1:35:e1:f3:ab:c7:66:25:b2:
24:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DD:BA:00:6C:D0:A3:E5:C2:6B:7A:9D:69:49:3D:9F:A0:0A:A7:D5
X509v3 Authority Key Identifier:
keyid:50:2F:DE:5A:BD:27:18:4B:AA:9A:DA:B7:CD:AF:BC:C3:A5:44:1A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UC_eWr0nGEuqmtq3za-8w6VEGus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b5:6a:16:36:17:c2:75:fd:69:2e:20:86:a4:32:e9:19:bf:
49:37:ad:ba:22:3f:15:5f:08:4f:fa:c0:8a:ad:ce:69:ab:41:
fc:61:4e:50:96:30:f9:ce:1b:84:7d:b5:a9:e7:49:ef:48:c7:
a4:0a:21:7f:02:78:f2:91:c9:11:62:03:b8:13:0d:74:d2:df:
7d:4d:83:aa:9b:88:ec:3a:3f:45:b1:dc:c7:17:4a:53:8d:29:
a6:7b:48:f4:a5:8a:c1:ff:73:ec:c0:0b:90:d0:5d:80:30:b3:
78:02:7f:64:a0:c5:fd:21:e3:4f:e8:ff:56:dc:ac:6c:ca:eb:
05:1f:a0:de:91:ab:28:ad:1f:3d:78:2b:aa:0d:09:0d:77:ca:
25:dd:c1:b8:c5:fb:a8:fc:5c:ad:3e:c2:6b:ab:9b:75:ea:54:
60:8e:ef:aa:0f:fc:fe:e4:3e:5a:79:dd:62:f4:0a:8c:c6:09:
30:4d:50:55:e5:86:39:50:6f:b0:29:2b:2d:54:92:82:0c:f7:
68:82:9a:87:96:27:05:aa:ec:05:fe:9c:9b:ca:4a:ee:91:0f:
f3:14:11:c8:84:c0:8a:55:30:b2:6a:32:3a:4c:b3:cc:b1:ee:
9e:02:76:6a:68:88:7a:26:c2:08:56:92:9c:85:96:01:c4:11:
dd:70:3f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:00:27 2025 by rpki-client