Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.mft
File: U3YJ5EhhINufF7bT10v4VfJxV18.mft (raw, json)
Hash identifier: /1n57MXjgqty/EY9evLClBp+MDcxe6bgFta0+Vx7hD4=
Subject key identifier: ED:21:65:C3:4F:87:30:6E:05:2F:3E:DF:5E:28:F3:84:26:95:F8:1B
Authority key identifier: 53:76:09:E4:48:61:20:DB:9F:17:B6:D3:D7:4B:F8:55:F2:71:57:5F
Certificate issuer: /CN=537609e4486120db9f17b6d3d74bf855f271575f
Certificate serial: 019748550FFE744815B412A88B8BF1C2DCE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3YJ5EhhINufF7bT10v4VfJxV18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.mft
Manifest number: 0BFA
Signing time: Sat 07 Jun 2025 03:00:23 +0000
Manifest this update: Sat 07 Jun 2025 03:00:23 +0000
Manifest next update: Sun 08 Jun 2025 03:00:23 +0000
Files and hashes: 1: U3YJ5EhhINufF7bT10v4VfJxV18.crl (hash: uPFBYTs4VXznSOLCl45yPruEBnyEWLqgV9KewXL8oi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3YJ5EhhINufF7bT10v4VfJxV18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:0f:fe:74:48:15:b4:12:a8:8b:8b:f1:c2:dc:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=537609e4486120db9f17b6d3d74bf855f271575f
Validity
Not Before: Jun 7 03:00:23 2025 GMT
Not After : Jun 8 03:00:23 2025 GMT
Subject: CN=ed2165c34f87306e052f3edf5e28f3842695f81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:12:16:b5:b2:8f:43:27:e6:e8:ca:19:02:b1:
ef:e3:f8:86:c7:de:72:99:4a:5d:81:22:e8:34:6a:
55:9b:c1:d6:09:68:8c:00:1c:84:a0:22:42:9a:b3:
51:24:a9:6c:a5:b3:32:12:60:59:9d:ec:6f:38:c0:
bc:53:71:cd:cb:b9:33:85:98:5d:07:3c:bd:7d:7c:
f5:44:a0:f3:06:75:6c:e0:93:83:e3:ab:ba:30:d2:
67:1c:31:da:0c:4a:d2:42:cb:ba:e7:ca:43:79:ed:
79:27:91:94:d7:a1:08:05:40:47:77:2e:65:b5:1e:
a1:f8:2f:7c:4e:8d:22:27:ec:51:5f:3b:39:a8:39:
2b:80:06:f8:9e:18:86:9e:48:f2:4c:92:1d:15:b4:
87:2d:9c:c2:58:9a:d9:76:37:93:59:a0:09:93:b4:
e1:b0:b7:a8:8b:c8:5e:74:7f:c4:91:41:8a:fe:02:
ad:21:47:8e:b9:8f:b9:77:04:bb:0f:59:5b:8d:94:
2f:14:b4:13:19:e9:25:57:4a:7b:03:4a:b1:cc:9e:
04:1c:87:ec:43:aa:69:7c:81:f9:3b:3b:04:5b:28:
11:9f:e8:42:03:1c:25:23:cb:d9:66:d5:98:49:37:
e8:de:4c:3b:3a:11:cf:56:7b:23:a8:6e:42:8b:ff:
f9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:21:65:C3:4F:87:30:6E:05:2F:3E:DF:5E:28:F3:84:26:95:F8:1B
X509v3 Authority Key Identifier:
keyid:53:76:09:E4:48:61:20:DB:9F:17:B6:D3:D7:4B:F8:55:F2:71:57:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3YJ5EhhINufF7bT10v4VfJxV18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:a5:22:cd:d9:73:b6:0d:24:aa:68:59:80:1e:e5:7a:75:b4:
66:b0:3f:13:8d:9a:dd:15:f2:88:a5:ea:a0:c1:19:c0:e1:b9:
dc:1a:a5:07:f5:69:03:11:0b:5a:5a:f1:91:9c:69:55:ea:fa:
f1:d0:81:12:19:e6:31:d1:5a:b5:57:70:e3:33:00:15:d8:ca:
c0:59:73:3a:cc:97:5f:c5:27:89:51:c2:7b:aa:5b:d3:f8:c6:
96:a5:4f:cd:99:88:b1:7c:6d:03:f6:2b:f5:fe:a7:47:dd:80:
d0:31:20:52:5f:65:c8:6c:8a:52:9c:e2:ed:bd:47:1b:7b:b9:
d6:b6:bd:e0:94:32:60:dd:30:49:86:74:a5:d3:24:97:05:3f:
22:99:0d:ee:9f:26:23:96:36:45:cf:ba:92:22:5d:57:de:bb:
5e:13:56:bd:d8:11:9f:4c:42:53:56:df:ee:26:56:9d:96:62:
f4:4f:88:82:37:52:3a:7c:bb:05:51:0f:c0:86:d1:93:88:1c:
a6:f9:83:dc:27:82:35:bf:38:03:74:d0:77:76:1f:63:f1:54:
a3:3e:68:3d:c9:d3:37:f9:b0:d3:c6:bd:fc:bf:cd:cb:80:21:
72:73:50:31:ed:d9:73:cf:67:cc:2f:c6:09:cb:42:e8:f5:f3:
78:bd:90:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:42:27 2025 by rpki-client