Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
File: UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft (raw, json)
Hash identifier: LBDOlUgWzVNNF/z3OZ8FsSAAm5nMN9/dGW/tnMsX+iU=
Subject key identifier: 2F:7B:1E:19:D5:98:56:56:51:8D:26:AC:43:EB:F1:E8:BD:2C:2B:F4
Authority key identifier: 51:C3:CC:54:41:4F:B4:42:BE:39:D6:E1:A4:AF:72:4C:FF:EE:EE:FF
Certificate issuer: /CN=51c3cc54414fb442be39d6e1a4af724cffeeeeff
Certificate serial: 01964D7DCF9D643470AE47B0193DAE781DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UcPMVEFPtEK-OdbhpK9yTP_u7v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
Manifest number: 13FF
Signing time: Sat 19 Apr 2025 10:00:12 +0000
Manifest this update: Sat 19 Apr 2025 10:00:12 +0000
Manifest next update: Sun 20 Apr 2025 10:00:12 +0000
Files and hashes: 1: UcPMVEFPtEK-OdbhpK9yTP_u7v8.crl (hash: 9znh6z6WYx1o0jyU6+NuKOmwYwTGY1lUly4yBs3YXKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UcPMVEFPtEK-OdbhpK9yTP_u7v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 10:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7d:cf:9d:64:34:70:ae:47:b0:19:3d:ae:78:1d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51c3cc54414fb442be39d6e1a4af724cffeeeeff
Validity
Not Before: Apr 19 10:00:12 2025 GMT
Not After : Apr 20 10:00:12 2025 GMT
Subject: CN=2f7b1e19d5985656518d26ac43ebf1e8bd2c2bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:94:c3:cd:2b:37:11:20:dc:a5:b8:11:6a:33:
86:e0:2e:09:2c:a6:0e:e8:4e:25:28:95:0e:f7:56:
d8:5a:63:f6:0d:81:b7:f4:0a:58:3d:3d:a4:3e:6a:
a6:86:92:ac:a3:28:f6:28:42:4e:4f:df:cb:a2:e1:
84:1a:09:a4:e9:5e:47:2b:58:23:7e:ac:43:82:2c:
5f:0e:15:01:e6:5c:95:b0:13:e9:15:3e:7e:30:72:
03:a0:c2:6b:92:79:26:8a:bc:c8:0f:35:08:40:69:
75:f9:3c:20:de:b1:44:1e:ac:c7:cc:03:4e:6a:01:
d6:39:4b:55:cb:6d:cc:0a:83:fa:15:e9:98:4e:60:
13:73:48:89:03:ad:03:54:f7:4d:40:96:0e:86:ed:
1b:f2:69:d5:af:42:b5:49:57:ff:92:c9:a0:70:df:
83:3e:e9:5e:84:48:8f:ee:ac:04:af:74:66:09:85:
e0:27:1d:82:3e:9b:af:ba:c2:3d:aa:82:a4:56:03:
41:0c:5b:bf:9c:9f:22:1b:12:fa:14:5b:f2:40:8c:
68:89:68:73:fe:81:e9:65:16:6a:54:2b:c3:45:3f:
da:f1:a9:94:5e:89:a5:50:d3:8e:1e:e9:a0:d8:89:
f9:53:98:40:4c:09:12:e0:9b:13:24:86:1b:58:bc:
13:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7B:1E:19:D5:98:56:56:51:8D:26:AC:43:EB:F1:E8:BD:2C:2B:F4
X509v3 Authority Key Identifier:
keyid:51:C3:CC:54:41:4F:B4:42:BE:39:D6:E1:A4:AF:72:4C:FF:EE:EE:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UcPMVEFPtEK-OdbhpK9yTP_u7v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:64:34:10:80:1b:e6:cc:84:5f:5e:e2:3f:1c:46:24:d4:de:
e3:9a:3a:a9:e7:11:63:58:5e:f1:61:9d:33:7a:d6:d9:f9:cb:
d4:ac:04:c5:eb:d9:32:64:de:f8:11:d5:d3:38:c2:f7:4c:74:
82:0b:12:d7:6f:ae:ae:7d:40:89:37:a0:f1:47:1d:a3:9f:7f:
e0:46:b3:f9:54:ef:d7:4e:08:c0:5b:c5:bb:26:1f:cf:4a:a3:
35:22:ff:e7:bb:42:72:5b:0a:5e:0d:91:91:32:cf:c6:0f:20:
93:5d:41:ec:df:d6:bd:99:df:1d:d5:84:74:f8:a9:4f:38:a1:
7c:44:61:5c:0b:f5:0c:32:59:5f:0b:4e:b4:5b:85:58:97:cb:
5a:16:4d:82:bd:d5:ad:2b:fe:9d:50:d8:41:66:c5:10:1a:7a:
f3:79:e4:06:10:0a:42:5f:5d:4e:47:85:0c:84:0c:9f:12:bc:
5f:01:a4:fe:00:1c:f3:ed:1f:b3:e0:ec:2f:e1:49:c5:41:37:
4d:62:c3:7d:d2:9c:40:12:53:6c:f8:6a:58:ae:40:01:f1:71:
f4:63:ec:ca:df:f5:ba:d9:c2:30:8f:fd:e5:70:6e:cf:49:2a:
6a:21:de:51:12:b6:04:4e:64:0d:43:60:46:02:28:2e:9f:0b:
91:59:c7:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNfc+dZDRwrkewGT2ueB3cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYzNjYzU0NDE0ZmI0NDJiZTM5ZDZlMWE0YWY3MjRjZmZl
ZWVlZmYwHhcNMjUwNDE5MTAwMDEyWhcNMjUwNDIwMTAwMDEyWjAzMTEwLwYDVQQD
EygyZjdiMWUxOWQ1OTg1NjU2NTE4ZDI2YWM0M2ViZjFlOGJkMmMyYmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZTDzSs3ESDcpbgRajOG4C4JLKYO
6E4lKJUO91bYWmP2DYG39ApYPT2kPmqmhpKsoyj2KEJOT9/LouGEGgmk6V5HK1gj
fqxDgixfDhUB5lyVsBPpFT5+MHIDoMJrknkmirzIDzUIQGl1+Twg3rFEHqzHzANO
agHWOUtVy23MCoP6FemYTmATc0iJA60DVPdNQJYOhu0b8mnVr0K1SVf/ksmgcN+D
PulehEiP7qwEr3RmCYXgJx2CPpuvusI9qoKkVgNBDFu/nJ8iGxL6FFvyQIxoiWhz
/oHpZRZqVCvDRT/a8amUXomlUNOOHumg2In5U5hATAkS4JsTJIYbWLwTiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC97HhnVmFZWUY0mrEPr8ei9LCv0MB8GA1UdIwQY
MBaAFFHDzFRBT7RCvjnW4aSvckz/7u7/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWNQTVZFRlB0RUstT2RiaHBLOXlUUF91N3Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9hNzM5MDAtYjM0Zi00ZmZjLTllMzkt
MjMxNWNkOWI5ZmEyLzEvVWNQTVZFRlB0RUstT2RiaHBLOXlUUF91N3Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9hNzM5MDAtYjM0Zi00ZmZjLTllMzktMjMxNWNkOWI5ZmEy
LzEvVWNQTVZFRlB0RUstT2RiaHBLOXlUUF91N3Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlmQ0EIAb
5syEX17iPxxGJNTe45o6qecRY1he8WGdM3rW2fnL1KwExevZMmTe+BHV0zjC90x0
ggsS12+urn1AiTeg8Ucdo59/4Eaz+VTv104IwFvFuyYfz0qjNSL/57tCclsKXg2R
kTLPxg8gk11B7N/WvZnfHdWEdPipTzihfERhXAv1DDJZXwtOtFuFWJfLWhZNgr3V
rSv+nVDYQWbFEBp683nkBhAKQl9dTkeFDIQMnxK8XwGk/gAc8+0fs+DsL+FJxUE3
TWLDfdKcQBJTbPhqWK5AAfFx9GPsyt/1utnCMI/95XBuz0kqaiHeURK2BE5kDUNg
RgIoLp8LkVnHjg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:10:35 2025 by rpki-client