
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
File: uXhT3Vdz8qawcYefW567Dm9Ofao.mft (raw, json)
Hash identifier: 7neQxlEBa5g7OyG7+mcHjWlh9rDzJ9DA7UoVeQ0EBtM=
Subject key identifier: C1:90:E4:15:0F:11:A1:63:99:DE:D4:B4:47:6A:4B:35:60:F5:DA:C3
Authority key identifier: B9:78:53:DD:57:73:F2:A6:B0:71:87:9F:5B:9E:BB:0E:6F:4E:7D:AA
Certificate issuer: /CN=b97853dd5773f2a6b071879f5b9ebb0e6f4e7daa
Certificate serial: 01974AE8D24048BF0D7AF015F3CE4BA51A3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
Manifest number: 150F
Signing time: Sat 07 Jun 2025 15:01:01 +0000
Manifest this update: Sat 07 Jun 2025 15:01:01 +0000
Manifest next update: Sun 08 Jun 2025 15:01:01 +0000
Files and hashes: 1: uXhT3Vdz8qawcYefW567Dm9Ofao.crl (hash: n+tXbBLoU0bN5A9vwtSDKuY5zCSolNYgkMJGd7uHaIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:d2:40:48:bf:0d:7a:f0:15:f3:ce:4b:a5:1a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97853dd5773f2a6b071879f5b9ebb0e6f4e7daa
Validity
Not Before: Jun 7 15:01:01 2025 GMT
Not After : Jun 8 15:01:01 2025 GMT
Subject: CN=c190e4150f11a16399ded4b4476a4b3560f5dac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5e:61:6d:9b:fd:58:85:43:e1:6c:7c:78:da:
b3:1b:a9:a6:37:85:a2:d5:7e:c1:ff:c7:8d:a2:3f:
5d:cb:2e:b3:2f:f6:5f:89:38:91:79:e7:df:4a:0c:
21:9e:f0:2b:49:77:d7:99:82:79:cd:9b:f6:65:40:
82:ca:8d:97:83:a3:81:ff:da:1a:ff:70:6c:d1:60:
41:22:7f:c2:cb:dc:31:b4:5f:1f:6d:3d:d7:ca:1e:
03:22:78:0e:1a:cb:9f:29:f5:3e:d4:52:d6:5a:09:
3c:2d:82:01:97:f3:b9:da:f9:1c:1f:b3:0a:0a:d8:
5b:b0:be:fe:c5:17:40:28:b6:fa:52:50:3e:5f:f9:
d3:77:05:94:73:93:15:58:16:43:1c:9a:1a:57:24:
05:fa:0d:4d:28:b3:e1:9d:9f:a1:79:5a:ed:51:a6:
be:34:36:b6:52:ff:42:95:85:9a:95:d5:f5:46:7b:
ed:a6:14:fe:32:33:a7:87:49:80:fa:19:16:43:c6:
f8:be:1d:00:2f:0b:01:76:33:b0:67:30:4c:09:42:
5e:40:4e:40:e5:74:55:e7:81:ad:ed:72:7d:3b:16:
03:d4:69:8b:3f:df:61:b0:e9:54:b3:27:68:29:2a:
57:84:64:c1:9f:1f:f3:a7:fe:a4:53:ac:95:5f:e7:
79:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:90:E4:15:0F:11:A1:63:99:DE:D4:B4:47:6A:4B:35:60:F5:DA:C3
X509v3 Authority Key Identifier:
keyid:B9:78:53:DD:57:73:F2:A6:B0:71:87:9F:5B:9E:BB:0E:6F:4E:7D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:da:a4:d2:6b:4c:46:9e:77:ff:99:2e:31:b6:14:f2:0f:0d:
e2:8c:aa:c0:f3:54:cc:c5:49:32:16:d5:d2:32:42:59:db:ac:
1d:43:e0:20:5d:ee:19:fb:ba:7a:a5:e7:83:95:1e:69:5b:95:
9e:ab:83:e2:e4:ee:92:af:1c:b9:ba:5d:1b:96:86:ff:dd:83:
31:98:a4:ba:6f:d0:b8:f4:0e:f6:19:4c:19:1c:1e:1d:f9:d3:
bb:98:79:58:30:32:0f:09:1c:e1:11:cd:bf:07:ac:cc:86:88:
a9:f9:c6:27:5e:30:f6:71:c1:e5:f9:8e:47:6f:ca:50:0d:06:
10:43:69:e8:43:82:c5:84:f1:9f:c5:52:a5:c0:44:38:cd:f7:
d8:e4:ce:86:6f:a2:9f:a0:68:6b:23:af:5d:ec:37:b4:00:87:
03:6e:8d:6e:44:ce:75:3a:30:87:46:ac:0f:86:93:f8:65:4a:
43:ce:6c:76:5e:94:79:5b:f5:e5:bf:19:e4:8c:c4:ed:52:04:
cc:f8:dc:73:a1:12:79:19:7e:85:0c:e2:a6:56:53:f7:a9:d5:
05:43:81:b5:23:3c:50:a8:15:8f:35:94:cc:59:f6:ac:58:6b:
93:d8:99:21:cb:94:8d:60:5c:b1:f2:f6:78:de:21:cb:09:5d:
1b:9d:4d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:14:26 2025 by rpki-client