
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
File: Ul0cSVWy778Anp5Bsecupt_4JLM.mft (raw, json)
Hash identifier: Bc2uxplEXtETluGV19WsEdQeYjaLy4GHAEkIeXU4uu4=
Subject key identifier: 36:96:6A:3E:DA:DA:AB:C2:18:6D:9E:2D:3D:9C:85:6E:34:67:9E:47
Authority key identifier: 52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3
Certificate issuer: /CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
Certificate serial: 01974E5814B069920AD0A5F2DE5128230244
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
Manifest number: 0710
Signing time: Sun 08 Jun 2025 07:01:24 +0000
Manifest this update: Sun 08 Jun 2025 07:01:24 +0000
Manifest next update: Mon 09 Jun 2025 07:01:24 +0000
Files and hashes: 1: Ul0cSVWy778Anp5Bsecupt_4JLM.crl (hash: f1cN3XDJbNskN33QtqiT5ZDOlgy9njKOU9uyx6dpQ18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:58:14:b0:69:92:0a:d0:a5:f2:de:51:28:23:02:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
Validity
Not Before: Jun 8 07:01:24 2025 GMT
Not After : Jun 9 07:01:24 2025 GMT
Subject: CN=36966a3edadaabc2186d9e2d3d9c856e34679e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4e:8a:15:9e:54:58:88:69:0e:ed:57:60:a7:
1c:31:68:48:3a:38:ec:e8:47:84:94:3c:c5:23:32:
9b:c9:e2:84:05:b8:81:4b:9f:9f:0e:67:3d:67:bc:
27:92:41:99:50:55:12:f3:1a:a8:3d:9a:06:79:43:
0f:72:cd:66:13:92:6f:b9:6b:da:02:dc:31:e9:2a:
42:5b:72:b5:e9:4b:4c:9e:f5:aa:6f:f4:88:62:78:
9c:aa:62:95:f1:ec:94:47:2f:5b:f2:e4:5d:98:f0:
82:9e:c4:f0:d4:38:a1:6a:54:ee:a5:06:63:0b:a4:
61:d7:82:8d:f3:a5:42:51:a2:8a:8f:4d:20:62:96:
47:34:c2:73:02:94:5e:07:db:9c:29:b0:7a:bb:3e:
a8:de:43:7a:dc:0c:b6:5a:04:4f:11:a9:dd:ed:3a:
38:3d:5e:5a:d8:19:85:e2:bc:e5:29:88:71:76:e1:
a2:44:75:5c:7c:e0:7f:43:6d:7d:d6:98:82:9e:cd:
20:89:69:5c:0d:6b:db:2c:cb:fb:73:bc:50:bd:6a:
45:ef:b5:db:da:ef:7c:d4:68:63:79:ab:2a:63:41:
da:9b:61:3a:e7:27:dc:28:ca:33:b3:04:99:d4:5e:
61:bb:fd:a9:71:ca:f6:cf:c0:51:eb:5c:f6:2b:3a:
89:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:96:6A:3E:DA:DA:AB:C2:18:6D:9E:2D:3D:9C:85:6E:34:67:9E:47
X509v3 Authority Key Identifier:
keyid:52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:8a:9a:2e:a9:53:a8:c9:76:f3:b6:e0:65:71:fe:b8:33:20:
48:fc:61:65:d6:de:ff:17:9c:f3:63:95:68:99:ad:d2:8a:b3:
c2:0c:4d:37:9f:5e:c5:41:b7:d2:6f:90:62:17:f6:47:c1:b0:
8a:33:32:b2:05:9b:c0:16:12:04:d0:f7:a0:5d:c2:47:ac:c9:
1c:93:6b:b9:18:cf:3a:1e:c1:34:24:08:ab:85:96:22:17:44:
af:d4:a7:3a:c5:fd:cc:ae:0f:12:e5:6e:7d:7f:b1:e7:8c:d8:
66:d2:89:df:18:fb:87:63:89:87:89:7d:99:df:4a:f9:ad:d5:
46:bf:fb:fc:0a:b3:c3:72:21:19:70:c2:7d:8f:e9:2f:c8:95:
33:42:04:c0:9c:b7:79:4c:6f:f1:e5:7b:14:24:c5:5a:6e:98:
90:12:4d:72:b4:8c:5c:36:cd:c7:12:bf:a5:6b:bb:7b:40:19:
89:5b:ad:71:66:d1:31:4d:55:37:7d:ec:9f:76:c4:18:8c:51:
fe:58:c0:aa:0c:93:1c:d1:26:97:79:77:78:2c:e5:e0:f1:c0:
dd:0e:52:f2:32:01:4e:03:ec:ae:fd:4a:3f:fc:1f:1e:f5:71:
1c:75:97:97:3a:1d:66:b7:e2:c4:db:d9:f4:8c:b7:32:59:ee:
19:a3:3e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:54:36 2025 by rpki-client