Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
File: Ul0cSVWy778Anp5Bsecupt_4JLM.mft (raw, json)
Hash identifier: 8SLKCDUuJXdGdDWNFZLsMpHXL1QuBpcD5OR+QDu0rLc=
Subject key identifier: 1F:46:8F:AB:1A:44:B2:76:7E:59:D5:61:47:67:3F:8F:F4:C2:4B:58
Authority key identifier: 52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3
Certificate issuer: /CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
Certificate serial: 019645C53F2E440E3BF5C06767C853DA5EE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
Manifest number: 0687
Signing time: Thu 17 Apr 2025 22:01:16 +0000
Manifest this update: Thu 17 Apr 2025 22:01:16 +0000
Manifest next update: Fri 18 Apr 2025 22:01:16 +0000
Files and hashes: 1: Ul0cSVWy778Anp5Bsecupt_4JLM.crl (hash: b64zzR6EI700+6Evf6GEBxYxCre43YCVZY/hb6+/aks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:c5:3f:2e:44:0e:3b:f5:c0:67:67:c8:53:da:5e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
Validity
Not Before: Apr 17 22:01:16 2025 GMT
Not After : Apr 18 22:01:16 2025 GMT
Subject: CN=1f468fab1a44b2767e59d56147673f8ff4c24b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d2:82:b7:9c:a1:9e:16:7e:02:02:7e:59:e4:
43:90:6f:3c:8e:f0:b3:60:43:1c:dc:92:f1:00:7f:
18:52:88:38:45:5e:87:a9:df:e0:73:f3:14:5a:35:
07:5f:e2:54:ce:98:fc:bf:1c:87:f9:93:15:50:12:
cf:0d:7a:9c:08:7e:86:3a:61:f5:31:4f:cd:40:d8:
4e:87:2f:0d:44:0d:6f:9a:44:39:d5:48:b7:d5:30:
cd:3d:b5:bd:fa:a3:81:d2:c9:3b:f3:30:e0:02:2b:
89:34:df:8d:17:ee:26:43:1f:30:48:4d:51:95:50:
a3:14:0b:a4:5b:fc:b1:5d:62:58:e3:d5:a2:4d:36:
bc:3c:61:27:2e:15:29:a9:d5:31:39:b0:a8:62:a5:
9d:c2:4f:a0:e5:56:ea:5d:7d:9e:01:d0:d5:f9:b5:
6a:ca:a3:e6:23:5a:d9:15:20:53:17:13:30:49:3b:
e1:11:67:88:6b:5c:dc:55:d7:41:23:39:d6:55:b3:
cd:06:f6:46:2e:ef:8b:c2:f1:e3:88:55:5e:05:3a:
3f:ab:84:58:5b:66:99:9d:31:36:1a:22:06:3b:08:
8f:c7:0a:95:35:0b:ea:d9:bc:6d:d0:d8:16:78:2f:
68:f5:bc:32:c2:1e:03:12:5c:c0:46:41:8d:92:06:
53:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:46:8F:AB:1A:44:B2:76:7E:59:D5:61:47:67:3F:8F:F4:C2:4B:58
X509v3 Authority Key Identifier:
keyid:52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2e:ae:93:9a:b4:a4:91:e6:ef:52:07:57:70:c9:e1:2e:2e:
e5:09:22:c6:8b:7b:80:25:a3:c3:a6:d9:3f:b7:00:f0:b8:37:
ba:69:35:52:c8:2a:b4:ae:bc:73:bc:70:67:a6:0c:4e:25:1e:
c2:8e:02:0c:82:1a:29:f5:de:ef:4a:52:53:d2:7e:13:fd:60:
59:f2:a1:88:b4:80:23:c3:55:cd:a2:0b:68:b8:74:47:71:25:
17:97:5f:0e:da:f5:c9:9a:d2:00:56:45:3f:6a:24:18:92:da:
6b:ba:d4:11:2a:b0:b6:bc:c3:0d:20:26:c0:fe:4a:2d:8e:c3:
37:60:e5:9f:21:cc:19:ea:98:97:4c:e8:83:e9:ee:d9:5a:aa:
90:67:4d:4d:32:1a:29:3d:a7:64:be:43:dc:60:37:22:6a:55:
cd:fd:b5:cb:7f:33:5f:06:4e:fb:62:04:43:8d:2a:83:77:9f:
69:c5:8b:7a:88:b6:34:ab:a6:95:c1:16:e3:10:6e:9f:74:b9:
8a:72:66:6f:09:cc:da:a7:6a:db:73:fb:2a:db:08:c2:97:2c:
65:1f:00:e1:2b:c6:df:a9:0a:79:9c:0f:6d:08:2b:1b:13:9e:
dc:05:6f:0c:83:ba:0a:4c:85:79:28:38:bb:d9:67:18:da:32:
61:02:cd:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZFxT8uRA479cBnZ8hT2l7pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNWQxYzQ5NTViMmVmYmYwMDllOWU0MWIxZTcyZWE2ZGZm
ODI0YjMwHhcNMjUwNDE3MjIwMTE2WhcNMjUwNDE4MjIwMTE2WjAzMTEwLwYDVQQD
EygxZjQ2OGZhYjFhNDRiMjc2N2U1OWQ1NjE0NzY3M2Y4ZmY0YzI0YjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdKCt5yhnhZ+AgJ+WeRDkG88jvCz
YEMc3JLxAH8YUog4RV6Hqd/gc/MUWjUHX+JUzpj8vxyH+ZMVUBLPDXqcCH6GOmH1
MU/NQNhOhy8NRA1vmkQ51Ui31TDNPbW9+qOB0sk78zDgAiuJNN+NF+4mQx8wSE1R
lVCjFAukW/yxXWJY49WiTTa8PGEnLhUpqdUxObCoYqWdwk+g5VbqXX2eAdDV+bVq
yqPmI1rZFSBTFxMwSTvhEWeIa1zcVddBIznWVbPNBvZGLu+LwvHjiFVeBTo/q4RY
W2aZnTE2GiIGOwiPxwqVNQvq2bxt0NgWeC9o9bwywh4DElzARkGNkgZTKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9Gj6saRLJ2flnVYUdnP4/0wktYMB8GA1UdIwQY
MBaAFFJdHElVsu+/AJ6eQbHnLqbf+CSzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWwwY1NWV3k3NzhBbnA1QnNlY3VwdF80SkxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84MTk1YjMtYzQ3NS00Y2E0LWI0MmQt
NjYyN2E0ZWI1OTYzLzEvVWwwY1NWV3k3NzhBbnA1QnNlY3VwdF80SkxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi84MTk1YjMtYzQ3NS00Y2E0LWI0MmQtNjYyN2E0ZWI1OTYz
LzEvVWwwY1NWV3k3NzhBbnA1QnNlY3VwdF80SkxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHS6uk5q0
pJHm71IHV3DJ4S4u5Qkixot7gCWjw6bZP7cA8Lg3umk1UsgqtK68c7xwZ6YMTiUe
wo4CDIIaKfXe70pSU9J+E/1gWfKhiLSAI8NVzaILaLh0R3ElF5dfDtr1yZrSAFZF
P2okGJLaa7rUESqwtrzDDSAmwP5KLY7DN2DlnyHMGeqYl0zog+nu2VqqkGdNTTIa
KT2nZL5D3GA3ImpVzf21y38zXwZO+2IEQ40qg3efacWLeoi2NKumlcEW4xBun3S5
inJmbwnM2qdq23P7KtsIwpcsZR8A4SvG36kKeZwPbQgrGxOe3AVvDIO6CkyFeSg4
u9lnGNoyYQLNsQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:37:42 2025 by rpki-client