Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
File: ux1P6zEebC28c9UE_ISQzCFUY4k.mft (raw, json)
Hash identifier: aueSCFfe+x9M9vP79R2gwlkroQI1gqfrNRx5ZZyHVyc=
Subject key identifier: 45:50:A9:FE:BA:3A:32:1E:87:5E:1C:C4:08:0C:5F:AB:A4:1D:35:28
Authority key identifier: BB:1D:4F:EB:31:1E:6C:2D:BC:73:D5:04:FC:84:90:CC:21:54:63:89
Certificate issuer: /CN=bb1d4feb311e6c2dbc73d504fc8490cc21546389
Certificate serial: 01964C6C003D58E07C25FEC81F91F3DF7303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
Manifest number: 023B
Signing time: Sat 19 Apr 2025 05:01:08 +0000
Manifest this update: Sat 19 Apr 2025 05:01:08 +0000
Manifest next update: Sun 20 Apr 2025 05:01:08 +0000
Files and hashes: 1: ux1P6zEebC28c9UE_ISQzCFUY4k.crl (hash: UkQyCqsv4o1IRS9UJRGe1tJjiNZBExqrRPWa0PggfsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6c:00:3d:58:e0:7c:25:fe:c8:1f:91:f3:df:73:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb1d4feb311e6c2dbc73d504fc8490cc21546389
Validity
Not Before: Apr 19 05:01:08 2025 GMT
Not After : Apr 20 05:01:08 2025 GMT
Subject: CN=4550a9feba3a321e875e1cc4080c5faba41d3528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:58:cf:1a:87:9a:4d:5c:db:ba:66:62:99:c6:
72:fe:00:e6:36:39:1b:f4:d9:32:83:07:00:f1:44:
0b:df:dc:cc:4b:fd:f9:72:83:3e:32:4f:39:c2:79:
28:0d:01:88:05:bf:0d:a3:ad:e6:1c:53:fd:92:f5:
95:81:ff:a6:71:ff:8c:1a:1f:8e:38:6c:38:16:4b:
aa:dc:92:bb:b6:80:5b:56:84:b2:83:be:45:4a:07:
d6:29:54:12:52:dc:97:c1:e3:b3:de:55:e0:90:d4:
97:ad:e0:44:c4:e2:25:77:76:dd:9c:7b:dc:db:48:
7b:0e:6b:08:30:bf:f6:52:64:52:0d:63:57:ee:f9:
d5:a1:c5:c6:21:2c:ec:73:97:80:10:97:e8:e4:6d:
6f:89:92:88:dd:f8:05:20:54:41:38:ab:94:b3:81:
38:9a:a7:8b:87:5f:0c:bf:66:01:b0:0e:08:17:9e:
1d:8a:ae:3c:03:fb:23:24:84:ca:ec:56:87:0d:fc:
ab:3c:a9:1a:50:44:15:ee:38:52:43:05:ce:ed:39:
5d:11:0b:18:5e:81:26:12:cc:50:11:f6:8c:42:3b:
7c:2d:fd:a4:c7:62:bd:76:b9:25:10:ef:1f:5e:dc:
e4:6e:f9:30:eb:1f:71:7f:8e:78:a1:5b:ed:73:3b:
31:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:50:A9:FE:BA:3A:32:1E:87:5E:1C:C4:08:0C:5F:AB:A4:1D:35:28
X509v3 Authority Key Identifier:
keyid:BB:1D:4F:EB:31:1E:6C:2D:BC:73:D5:04:FC:84:90:CC:21:54:63:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:73:13:cb:e0:c4:33:78:ef:47:c5:8c:75:71:9f:7f:0d:01:
1a:5d:68:e7:34:82:59:38:0b:f9:33:4d:ad:d9:35:f1:d8:1f:
b3:cf:2a:e7:8a:66:67:95:f6:bb:7c:cd:11:c1:12:ac:0f:2d:
60:cd:45:a9:32:cc:5e:6a:81:e9:b7:0a:40:9c:54:3e:e0:23:
6b:7a:71:5d:3e:21:91:cc:1c:32:87:e2:6b:f5:5a:c8:31:45:
e2:aa:14:d9:11:8b:ac:3e:03:9e:fa:0e:23:6e:a0:22:00:df:
52:c2:c9:38:cc:74:76:e8:f0:d5:c7:dc:68:10:18:46:10:df:
e9:84:3c:cd:5a:24:8a:d2:87:75:cc:f0:a8:cc:64:4d:a0:cd:
9a:3d:77:de:2b:f8:fe:e2:d2:c8:b3:4c:37:b8:cd:68:1b:7d:
ae:dd:f3:a3:28:d1:8c:c8:26:3b:1b:21:6f:cf:85:05:76:f2:
d9:22:a9:26:58:5b:96:27:66:e9:be:db:c6:b5:5e:54:50:4c:
d3:2e:07:70:1c:fb:d0:1d:bd:cf:df:e4:17:83:d8:eb:ce:bf:
71:8a:96:b2:df:16:0a:cc:87:c5:1b:e8:55:f3:b9:93:9b:f0:
32:ee:b9:af:b0:ec:d1:ef:69:0b:0b:25:44:9e:b4:c4:50:58:
1b:ea:73:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZMbAA9WOB8Jf7IH5Hz33MDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMWQ0ZmViMzExZTZjMmRiYzczZDUwNGZjODQ5MGNjMjE1
NDYzODkwHhcNMjUwNDE5MDUwMTA4WhcNMjUwNDIwMDUwMTA4WjAzMTEwLwYDVQQD
Eyg0NTUwYTlmZWJhM2EzMjFlODc1ZTFjYzQwODBjNWZhYmE0MWQzNTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApljPGoeaTVzbumZimcZy/gDmNjkb
9NkygwcA8UQL39zMS/35coM+Mk85wnkoDQGIBb8No63mHFP9kvWVgf+mcf+MGh+O
OGw4Fkuq3JK7toBbVoSyg75FSgfWKVQSUtyXweOz3lXgkNSXreBExOIld3bdnHvc
20h7DmsIML/2UmRSDWNX7vnVocXGISzsc5eAEJfo5G1viZKI3fgFIFRBOKuUs4E4
mqeLh18Mv2YBsA4IF54diq48A/sjJITK7FaHDfyrPKkaUEQV7jhSQwXO7TldEQsY
XoEmEsxQEfaMQjt8Lf2kx2K9drklEO8fXtzkbvkw6x9xf454oVvtczsx+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVQqf66OjIeh14cxAgMX6ukHTUoMB8GA1UdIwQY
MBaAFLsdT+sxHmwtvHPVBPyEkMwhVGOJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXgxUDZ6RWViQzI4YzlVRV9JU1F6Q0ZVWTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zZTJmMTMtNTI1MC00OWYyLWE0NzIt
NzcxYWI5ZmFkZjdmLzEvdXgxUDZ6RWViQzI4YzlVRV9JU1F6Q0ZVWTRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8zZTJmMTMtNTI1MC00OWYyLWE0NzItNzcxYWI5ZmFkZjdm
LzEvdXgxUDZ6RWViQzI4YzlVRV9JU1F6Q0ZVWTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuXMTy+DE
M3jvR8WMdXGffw0BGl1o5zSCWTgL+TNNrdk18dgfs88q54pmZ5X2u3zNEcESrA8t
YM1FqTLMXmqB6bcKQJxUPuAja3pxXT4hkcwcMofia/VayDFF4qoU2RGLrD4DnvoO
I26gIgDfUsLJOMx0dujw1cfcaBAYRhDf6YQ8zVokitKHdczwqMxkTaDNmj133iv4
/uLSyLNMN7jNaBt9rt3zoyjRjMgmOxshb8+FBXby2SKpJlhblidm6b7bxrVeVFBM
0y4HcBz70B29z9/kF4PY686/cYqWst8WCsyHxRvoVfO5k5vwMu65r7Ds0e9pCwsl
RJ60xFBYG+pzhw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:15:32 2025 by rpki-client