
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
File: UOaW5uJbSSu34HyzKbtDVLERpoE.mft (raw, json)
Hash identifier: My9Lt41/xkJsUBmkZ639KEZaSQhWGiMwGiht0+5pomI=
Subject key identifier: F9:B2:04:9F:F9:4B:2B:5A:D3:8F:1B:7C:35:B5:59:04:2D:CD:65:D5
Authority key identifier: 50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
Certificate issuer: /CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Certificate serial: 019748FA450ADD28770DB11324A5D391A947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
Manifest number: 085C
Signing time: Sat 07 Jun 2025 06:00:50 +0000
Manifest this update: Sat 07 Jun 2025 06:00:50 +0000
Manifest next update: Sun 08 Jun 2025 06:00:50 +0000
Files and hashes: 1: UOaW5uJbSSu34HyzKbtDVLERpoE.crl (hash: aEuf5/cwGh6YXcKEg9AX2ODMQQsmI++zqnhnmJgE5hI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:45:0a:dd:28:77:0d:b1:13:24:a5:d3:91:a9:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Validity
Not Before: Jun 7 06:00:50 2025 GMT
Not After : Jun 8 06:00:50 2025 GMT
Subject: CN=f9b2049ff94b2b5ad38f1b7c35b559042dcd65d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:47:18:25:95:80:6b:8f:e8:95:2b:1e:f7:43:
c7:4f:14:5c:98:ba:e8:47:5b:16:b5:65:74:81:14:
be:21:2e:70:2a:e5:23:ad:16:ee:05:c1:fb:32:2b:
86:8a:89:7b:a7:d5:5d:2c:9e:e9:1b:7b:0d:3f:f2:
8c:00:2a:56:7d:a8:7c:d4:07:1e:e2:d4:f7:ac:4a:
6b:83:b6:0c:4a:b2:cf:c7:8a:99:02:1e:5f:77:41:
63:9c:38:42:f9:1a:b0:82:24:af:d5:aa:00:64:d5:
d4:a4:90:e0:75:31:a6:05:a7:c5:86:2b:00:03:39:
b4:96:9f:2b:7b:42:3c:4f:89:40:12:21:b8:18:43:
30:66:ad:8e:f4:94:fb:ad:85:0a:ce:a7:86:a1:84:
4c:1b:db:8e:e0:c7:e3:42:53:32:6c:fb:d8:53:31:
c5:2b:84:be:b4:e9:e6:33:3c:db:ca:48:54:fe:ff:
b6:56:af:c7:ab:f3:6e:22:fc:6d:3f:ee:52:05:76:
c1:2c:89:15:4b:3a:ca:9f:1d:c5:71:09:32:d7:ac:
b7:4c:1e:ec:b9:6a:66:d1:50:61:e2:0d:65:5f:4d:
a2:d3:18:20:88:43:31:d5:c9:b2:3b:38:8f:04:d5:
9c:49:05:14:b4:24:f2:10:89:58:7e:5c:1e:0e:3a:
f2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B2:04:9F:F9:4B:2B:5A:D3:8F:1B:7C:35:B5:59:04:2D:CD:65:D5
X509v3 Authority Key Identifier:
keyid:50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:de:07:d6:2d:d7:65:2c:40:84:2e:ab:4e:fc:e9:fb:80:f8:
45:bd:0d:f1:19:14:66:21:08:c5:3c:04:fe:45:d5:23:69:c6:
fb:5d:f7:02:bd:d2:13:92:1d:8b:81:41:40:c1:de:bc:5f:e2:
55:c6:a4:53:30:de:8c:7e:4b:a4:ea:13:69:8e:54:c5:1e:87:
ac:fc:98:de:bb:90:89:95:6a:83:8c:f1:f8:2a:52:fe:5f:e9:
4d:ef:1c:99:e3:45:8c:0e:2e:ab:4e:e5:d6:21:c5:28:df:c5:
74:3e:49:cf:d0:2d:a9:2d:8e:50:97:fc:d8:2b:1f:9e:23:4b:
94:66:b3:8e:db:c3:b2:ec:19:fc:40:99:81:bf:54:0e:af:af:
32:85:a2:cd:46:2c:b8:0c:b2:5d:cb:06:2d:bb:f1:67:9b:e0:
06:b0:b9:c0:b0:3a:08:ff:a2:f6:9d:89:6d:a8:fc:b2:2b:93:
99:2a:1f:7d:ea:a2:db:a5:c9:64:f7:41:21:62:38:43:88:3e:
4d:af:4b:74:b7:d1:c3:24:e8:15:f5:2b:cc:b9:ae:23:6b:7d:
e0:8f:d9:76:78:17:b6:52:5c:ba:2e:1c:9c:90:70:0a:37:f3:
0c:90:98:30:c4:25:f7:4f:0a:23:9c:4f:a7:9c:4c:56:b6:db:
4d:5e:16:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+kUK3Sh3DbETJKXTkalHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZTY5NmU2ZTI1YjQ5MmJiN2UwN2NiMzI5YmI0MzU0YjEx
MWE2ODEwHhcNMjUwNjA3MDYwMDUwWhcNMjUwNjA4MDYwMDUwWjAzMTEwLwYDVQQD
EyhmOWIyMDQ5ZmY5NGIyYjVhZDM4ZjFiN2MzNWI1NTkwNDJkY2Q2NWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEcYJZWAa4/olSse90PHTxRcmLro
R1sWtWV0gRS+IS5wKuUjrRbuBcH7MiuGiol7p9VdLJ7pG3sNP/KMACpWfah81Ace
4tT3rEprg7YMSrLPx4qZAh5fd0FjnDhC+RqwgiSv1aoAZNXUpJDgdTGmBafFhisA
Azm0lp8re0I8T4lAEiG4GEMwZq2O9JT7rYUKzqeGoYRMG9uO4MfjQlMybPvYUzHF
K4S+tOnmMzzbykhU/v+2Vq/Hq/NuIvxtP+5SBXbBLIkVSzrKnx3FcQky16y3TB7s
uWpm0VBh4g1lX02i0xggiEMx1cmyOziPBNWcSQUUtCTyEIlYflweDjryEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmyBJ/5Syta048bfDW1WQQtzWXVMB8GA1UdIwQY
MBaAFFDmlubiW0krt+B8sym7Q1SxEaaBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU9hVzV1SmJTU3UzNEh5ektidERWTEVScG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kYWRmM2ItYzg2Ny00MTYzLTg3Njgt
NjE0MWQ5OTYzNGI1LzEvVU9hVzV1SmJTU3UzNEh5ektidERWTEVScG9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9kYWRmM2ItYzg2Ny00MTYzLTg3NjgtNjE0MWQ5OTYzNGI1
LzEvVU9hVzV1SmJTU3UzNEh5ektidERWTEVScG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW94H1i3X
ZSxAhC6rTvzp+4D4Rb0N8RkUZiEIxTwE/kXVI2nG+133Ar3SE5Idi4FBQMHevF/i
VcakUzDejH5LpOoTaY5UxR6HrPyY3ruQiZVqg4zx+CpS/l/pTe8cmeNFjA4uq07l
1iHFKN/FdD5Jz9AtqS2OUJf82CsfniNLlGazjtvDsuwZ/ECZgb9UDq+vMoWizUYs
uAyyXcsGLbvxZ5vgBrC5wLA6CP+i9p2Jbaj8siuTmSoffeqi26XJZPdBIWI4Q4g+
Ta9LdLfRwyToFfUrzLmuI2t94I/ZdngXtlJcui4cnJBwCjfzDJCYMMQl908KI5xP
p5xMVrbbTV4WlQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:31:14 2025 by rpki-client