Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
File: uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft (raw, json)
Hash identifier: 5muvuje5NiGBlwa2jQnbs7pF33btB/16cycDrcgcTDc=
Subject key identifier: 9D:9C:86:93:AF:1F:9C:40:2A:8D:4F:08:45:30:5C:64:01:EA:52:64
Authority key identifier: B8:4B:63:05:86:58:A5:9E:CB:BF:44:39:5B:F1:6F:78:0D:C9:29:CC
Certificate issuer: /CN=b84b63058658a59ecbbf44395bf16f780dc929cc
Certificate serial: 0197586DE4A34E3C6A76B78D1A29A2AE3BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
Manifest number: 1582
Signing time: Tue 10 Jun 2025 06:01:26 +0000
Manifest this update: Tue 10 Jun 2025 06:01:26 +0000
Manifest next update: Wed 11 Jun 2025 06:01:26 +0000
Files and hashes: 1: uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl (hash: oT51yRNriLu8rHapruDRJxBqfzVAPYUlZFk/2ewqCRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 06:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6d:e4:a3:4e:3c:6a:76:b7:8d:1a:29:a2:ae:3b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b84b63058658a59ecbbf44395bf16f780dc929cc
Validity
Not Before: Jun 10 06:01:26 2025 GMT
Not After : Jun 11 06:01:26 2025 GMT
Subject: CN=9d9c8693af1f9c402a8d4f0845305c6401ea5264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:66:73:09:b1:4e:29:79:5b:4a:14:d9:74:ac:
dc:81:fe:77:2b:3b:c7:30:90:33:ef:75:2e:9c:71:
1c:8b:52:31:9f:d8:d9:c9:ec:17:e7:4b:83:92:6d:
22:b6:9a:25:bd:65:be:6e:55:90:fb:90:62:8e:12:
36:c4:d1:04:b2:c5:70:42:55:ef:79:f0:37:ba:82:
73:6f:5b:82:b7:a3:37:3e:9f:f9:92:35:69:d3:60:
39:82:e0:0d:bd:b3:7b:bf:1b:33:4f:1f:0a:06:e3:
ab:62:ac:9b:5a:0e:76:8e:b2:8f:6e:a4:5b:cc:82:
10:af:4a:a6:ca:c4:df:d8:5d:4d:53:c0:57:d4:0c:
f5:e2:c3:27:e5:ce:e4:1b:ec:4e:b6:95:f3:98:f1:
69:c5:1d:d7:69:dd:2f:4b:c2:b6:63:54:05:27:ab:
b6:27:f9:4e:0d:63:f3:11:0d:ce:c1:08:e5:44:09:
63:9a:c4:a1:ff:1d:d1:ce:68:85:67:12:8c:28:86:
9e:de:55:68:a5:e9:f0:a5:3b:15:79:c3:c3:6e:6e:
c3:dd:5f:1e:2e:90:6d:52:a5:0a:62:fc:97:6b:1d:
63:fb:1c:00:d6:24:13:c0:04:35:97:e3:37:3c:aa:
d2:bd:d5:88:78:69:4c:19:28:dc:33:b9:6a:88:6f:
14:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9C:86:93:AF:1F:9C:40:2A:8D:4F:08:45:30:5C:64:01:EA:52:64
X509v3 Authority Key Identifier:
keyid:B8:4B:63:05:86:58:A5:9E:CB:BF:44:39:5B:F1:6F:78:0D:C9:29:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:0d:86:0b:e7:dc:b3:6a:5f:3a:18:3c:9a:99:be:40:a6:ca:
1d:0c:4c:d1:cf:5b:03:e2:43:2f:f2:81:87:fa:28:c5:59:1f:
bb:43:e6:32:09:76:b3:1e:37:0c:01:a3:02:02:fd:e6:5f:3b:
1b:cd:ea:d7:8b:5d:ee:9c:64:0c:5a:3c:99:49:92:39:16:8e:
47:ba:d5:0e:89:c4:f8:46:db:2f:b2:5c:7d:cc:41:3c:16:77:
fe:fb:d7:b0:86:b7:ad:77:36:a2:f6:39:18:d1:6f:92:ff:d2:
a1:6d:10:ad:c8:74:f4:3e:d9:8b:66:86:20:ae:cb:13:86:35:
2b:51:7c:ad:e8:d1:23:ee:e8:68:2f:27:ad:e4:d2:4f:4b:35:
23:1a:72:e8:2c:c5:54:b5:2e:c9:08:13:75:46:99:cd:80:12:
78:07:cb:dd:23:d1:2e:20:d7:9f:15:f9:bf:6c:2e:0b:b3:cb:
15:87:5d:9c:da:62:36:50:59:a6:0a:83:51:15:f4:23:34:53:
79:2b:5f:b3:60:5a:e1:6c:85:15:20:dd:80:94:57:64:9d:27:
ee:d0:1d:d2:5f:0c:eb:e2:4d:3e:09:83:38:14:40:96:fd:72:
ea:46:38:be:50:37:4b:0d:ea:35:51:dc:15:bd:84:ec:06:ec:
5a:0b:4c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 15:49:51 2025 by rpki-client