Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
File: uji5p2P2XAJ6o92th8GI2nikvZc.mft (raw, json)
Hash identifier: 7gZvL9X3Iu/DQN6wEJSdpm1KtWXNuq0z5093o0+tSiU=
Subject key identifier: DB:6B:F0:D5:F6:80:EC:C5:70:10:8E:8F:B3:BB:78:81:85:39:2A:FC
Authority key identifier: BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97
Certificate issuer: /CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97
Certificate serial: 019748F9E55CFE823C27355E31425D5DF9D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 06:00:26 +0000
Manifest this update: Sat 07 Jun 2025 06:00:26 +0000
Manifest next update: Sun 08 Jun 2025 06:00:26 +0000
Files and hashes: 1: uji5p2P2XAJ6o92th8GI2nikvZc.crl (hash: W9Xhqhe8KVPu6cl1CXx0MyOIQ6kcmsgstrg4otogPJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:e5:5c:fe:82:3c:27:35:5e:31:42:5d:5d:f9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97
Validity
Not Before: Jun 7 06:00:26 2025 GMT
Not After : Jun 8 06:00:26 2025 GMT
Subject: CN=db6bf0d5f680ecc570108e8fb3bb788185392afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0d:b0:81:e1:67:4b:1a:7a:23:84:2a:9e:45:
38:b0:9a:02:91:f9:d6:b8:b6:70:0e:a5:1c:3b:ec:
2c:f5:47:98:95:aa:97:ca:a3:cd:c6:57:6c:88:3d:
80:bb:c4:d4:6c:40:2c:c7:03:7e:fa:1c:a8:18:08:
a5:d5:2a:00:0a:3e:48:4c:dd:fb:53:d3:79:a3:b8:
9b:5c:c5:32:09:cf:bd:bf:ab:3d:32:99:86:69:cc:
a2:a8:86:aa:24:14:8e:fc:a4:4e:d3:c2:f0:ce:1f:
d9:ab:84:a6:21:ac:9b:a3:fb:bb:97:8a:8b:7a:13:
3b:74:51:38:f5:ef:c9:c3:7e:3a:a7:c7:7c:92:da:
19:c0:07:27:0c:07:8e:5d:bf:ee:a4:54:3d:17:2c:
29:0c:dd:72:4d:3e:4f:b6:e1:d7:43:09:f9:ac:15:
5c:b1:28:32:57:0d:cd:99:c2:71:0a:3b:31:59:fa:
72:8f:8d:e3:cc:f9:57:0d:c8:13:fe:76:22:a6:cf:
37:7e:d8:41:5d:b1:1c:df:53:b3:8b:c6:21:9a:48:
c0:5d:b1:e3:1e:9a:6c:b0:b4:8e:24:f8:55:d8:eb:
12:db:1e:a6:8c:2e:38:91:d2:fe:aa:28:7d:c8:55:
a6:64:cc:bf:0f:c8:68:c3:6a:2d:ae:d9:6f:d5:cc:
80:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6B:F0:D5:F6:80:EC:C5:70:10:8E:8F:B3:BB:78:81:85:39:2A:FC
X509v3 Authority Key Identifier:
keyid:BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:7d:62:7a:ec:7c:26:7f:8a:54:4d:92:ec:fd:8c:c7:f0:ca:
41:53:fc:b6:83:ff:3d:ae:1f:50:7a:53:ad:48:be:75:53:0b:
02:33:9c:e4:b5:33:b2:f5:21:c3:70:29:71:a6:14:36:73:59:
b8:96:c4:5c:f2:61:c2:1f:8b:24:16:4c:86:f1:00:2d:d5:33:
30:d2:8a:6a:2d:0e:9e:ff:b4:cd:ad:c9:2e:81:6e:28:d0:5c:
ce:6d:bf:01:b4:e1:3e:9e:8d:32:e9:67:8c:66:14:28:76:75:
72:17:d8:59:30:3b:1d:10:54:bb:7e:4b:4a:61:4b:93:91:cb:
23:eb:c2:54:df:41:cc:15:3d:52:1d:50:49:6e:4d:4a:70:ce:
81:c2:72:9b:c4:a7:ca:f5:9c:ba:c7:c6:ff:10:39:da:da:61:
11:d8:fd:01:9b:99:31:7b:8b:9b:fa:8d:5e:61:99:26:b6:88:
75:5c:bd:07:59:01:c5:dd:d0:ad:8d:9b:72:76:78:59:d3:6c:
8a:90:ec:d8:2e:a4:d1:5f:53:35:c5:0b:96:e1:75:7a:51:3d:
64:55:0d:f9:f3:ab:b0:c6:eb:88:3c:5f:d7:65:9d:7f:99:f2:
80:73:89:af:0c:d3:f5:b6:97:bc:b0:ff:4c:c4:94:86:9a:a5:
d2:26:6e:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+eVc/oI8JzVeMUJdXfnWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhMzhiOWE3NjNmNjVjMDI3YWEzZGRhZDg3YzE4OGRhNzhh
NGJkOTcwHhcNMjUwNjA3MDYwMDI2WhcNMjUwNjA4MDYwMDI2WjAzMTEwLwYDVQQD
EyhkYjZiZjBkNWY2ODBlY2M1NzAxMDhlOGZiM2JiNzg4MTg1MzkyYWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA2wgeFnSxp6I4QqnkU4sJoCkfnW
uLZwDqUcO+ws9UeYlaqXyqPNxldsiD2Au8TUbEAsxwN++hyoGAil1SoACj5ITN37
U9N5o7ibXMUyCc+9v6s9MpmGacyiqIaqJBSO/KRO08Lwzh/Zq4SmIaybo/u7l4qL
ehM7dFE49e/Jw346p8d8ktoZwAcnDAeOXb/upFQ9FywpDN1yTT5PtuHXQwn5rBVc
sSgyVw3NmcJxCjsxWfpyj43jzPlXDcgT/nYips83fthBXbEc31Ozi8YhmkjAXbHj
HppssLSOJPhV2OsS2x6mjC44kdL+qih9yFWmZMy/D8how2otrtlv1cyA3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtr8NX2gOzFcBCOj7O7eIGFOSr8MB8GA1UdIwQY
MBaAFLo4uadj9lwCeqPdrYfBiNp4pL2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWppNXAyUDJYQUo2bzkydGg4R0kybmlrdlpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8zZDY3MmQtNDY3NS00NjcxLTgxYzEt
NjBmN2Y4N2M3N2U2LzEvdWppNXAyUDJYQUo2bzkydGg4R0kybmlrdlpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8zZDY3MmQtNDY3NS00NjcxLTgxYzEtNjBmN2Y4N2M3N2U2
LzEvdWppNXAyUDJYQUo2bzkydGg4R0kybmlrdlpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ31ieux8
Jn+KVE2S7P2Mx/DKQVP8toP/Pa4fUHpTrUi+dVMLAjOc5LUzsvUhw3ApcaYUNnNZ
uJbEXPJhwh+LJBZMhvEALdUzMNKKai0Onv+0za3JLoFuKNBczm2/AbThPp6NMuln
jGYUKHZ1chfYWTA7HRBUu35LSmFLk5HLI+vCVN9BzBU9Uh1QSW5NSnDOgcJym8Sn
yvWcusfG/xA52tphEdj9AZuZMXuLm/qNXmGZJraIdVy9B1kBxd3QrY2bcnZ4WdNs
ipDs2C6k0V9TNcULluF1elE9ZFUN+fOrsMbriDxf12Wdf5nygHOJrwzT9baXvLD/
TMSUhpql0iZuAw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 10:46:57 2025 by rpki-client