Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.mft
File: uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.mft (raw, json)
Hash identifier: xl+0WRZSvJA3TSuSvrKES3fgK+xGTG1Z+8symVRPkDw=
Subject key identifier: 60:1F:FD:40:33:D9:0D:67:E6:56:DD:BD:3E:C9:C9:92:FC:12:C3:17
Authority key identifier: B9:43:D7:E4:4D:37:AC:59:10:02:63:19:F1:0C:DD:73:96:7D:97:CA
Certificate issuer: /CN=b943d7e44d37ac5910026319f10cdd73967d97ca
Certificate serial: 01968B4AAD526990F265A416B226F8AE64E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.mft
Manifest number: 14FF
Signing time: Thu 01 May 2025 10:00:49 +0000
Manifest this update: Thu 01 May 2025 10:00:49 +0000
Manifest next update: Fri 02 May 2025 10:00:49 +0000
Files and hashes: 1: uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.crl (hash: uwjmKkcvz0gkkkF3iQLn13jpQQRIGcqo/oFi/ag4b8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:4a:ad:52:69:90:f2:65:a4:16:b2:26:f8:ae:64:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b943d7e44d37ac5910026319f10cdd73967d97ca
Validity
Not Before: May 1 10:00:49 2025 GMT
Not After : May 2 10:00:49 2025 GMT
Subject: CN=601ffd4033d90d67e656ddbd3ec9c992fc12c317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:42:78:db:4d:53:08:df:02:e6:d4:93:ac:5e:
9a:f5:a1:fd:dd:f8:cd:c5:e4:2c:63:e7:88:89:b7:
b8:3c:5a:1f:12:61:30:23:bb:cb:f7:f6:76:07:aa:
99:87:31:14:fb:e4:71:7d:37:77:08:73:32:63:e0:
d0:48:69:60:b7:e7:ab:39:60:1c:e8:3f:8f:19:74:
59:8c:0d:35:70:e1:0f:54:59:16:3f:81:f3:b9:55:
11:75:7f:7d:43:16:b1:4d:32:f0:1b:bb:a8:ce:be:
91:12:7e:b4:82:a9:76:ac:dc:2d:c1:15:9a:3e:ff:
79:4f:85:3a:f7:61:30:1f:38:9c:d7:78:c7:17:cf:
07:ea:d8:19:0d:13:7d:60:33:2a:82:29:fd:2a:1d:
85:63:6a:fb:8a:5d:6c:b5:d6:f3:c3:e4:c1:58:ee:
44:cc:8c:75:75:7a:4d:ce:f9:22:d6:47:c2:0d:4b:
5d:ae:34:69:a5:f7:2b:d6:33:de:de:e9:39:59:ee:
70:cb:9f:ad:95:96:28:35:36:a0:0a:cd:fa:14:84:
da:84:32:9f:0c:90:c0:62:54:f3:f0:c7:eb:8c:5f:
70:1a:85:d6:4a:fa:45:8a:a3:40:3c:42:c7:3a:e5:
e8:0d:43:c2:ed:f9:be:f9:22:61:a8:70:17:57:e5:
c8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1F:FD:40:33:D9:0D:67:E6:56:DD:BD:3E:C9:C9:92:FC:12:C3:17
X509v3 Authority Key Identifier:
keyid:B9:43:D7:E4:4D:37:AC:59:10:02:63:19:F1:0C:DD:73:96:7D:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f9:ad:59:ce:fd:1f:90:85:01:7f:da:56:87:4e:e1:d0:25:
e4:65:07:f3:53:54:9d:69:5f:71:5b:97:b3:5f:44:ef:bd:0f:
63:06:a6:82:a8:24:6d:ea:90:bf:da:75:17:e2:11:e0:77:f5:
25:ed:1f:09:e8:8a:7f:c4:b2:7a:65:e8:39:6e:ff:ef:cb:7e:
53:f8:26:4e:11:dd:2d:6c:6a:62:a8:f2:f4:3c:2d:3d:43:c5:
01:a7:f7:87:81:95:f1:d8:39:ab:45:03:e1:95:93:bd:22:ec:
a2:4a:cb:66:06:6a:51:3d:8c:97:ac:83:df:42:46:23:45:d3:
87:dc:d7:75:de:61:25:f6:32:06:5e:0c:3c:1a:ca:35:78:2c:
cf:0d:8e:2f:25:42:db:de:4e:0b:b3:e6:86:d6:c0:7c:9d:d3:
58:b4:76:16:90:49:50:f4:13:f0:c4:58:b6:a6:8d:97:55:8a:
f4:7a:a9:46:3e:e1:c7:51:ac:9d:e7:00:c6:0d:85:33:48:3b:
33:0a:d4:69:77:12:f5:51:8a:fd:ff:93:63:52:c6:66:23:7b:
c1:d2:47:09:53:43:f8:2b:0b:99:b3:94:4c:8f:5b:1b:be:1d:
17:6a:13:c1:b9:c0:a3:17:1b:2c:00:e9:c4:0e:c9:db:4f:24:
aa:de:08:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaLSq1SaZDyZaQWsib4rmTgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NDNkN2U0NGQzN2FjNTkxMDAyNjMxOWYxMGNkZDczOTY3
ZDk3Y2EwHhcNMjUwNTAxMTAwMDQ5WhcNMjUwNTAyMTAwMDQ5WjAzMTEwLwYDVQQD
Eyg2MDFmZmQ0MDMzZDkwZDY3ZTY1NmRkYmQzZWM5Yzk5MmZjMTJjMzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEJ4201TCN8C5tSTrF6a9aH93fjN
xeQsY+eIibe4PFofEmEwI7vL9/Z2B6qZhzEU++RxfTd3CHMyY+DQSGlgt+erOWAc
6D+PGXRZjA01cOEPVFkWP4HzuVURdX99QxaxTTLwG7uozr6REn60gql2rNwtwRWa
Pv95T4U692EwHzic13jHF88H6tgZDRN9YDMqgin9Kh2FY2r7il1stdbzw+TBWO5E
zIx1dXpNzvki1kfCDUtdrjRppfcr1jPe3uk5We5wy5+tlZYoNTagCs36FITahDKf
DJDAYlTz8MfrjF9wGoXWSvpFiqNAPELHOuXoDUPC7fm++SJhqHAXV+XIFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAf/UAz2Q1n5lbdvT7JyZL8EsMXMB8GA1UdIwQY
MBaAFLlD1+RNN6xZEAJjGfEM3XOWfZfKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVVQWDVFMDNyRmtRQW1NWjhRemRjNVo5bDhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zZjMwODAtYzE5MC00ZGE2LThhYjQt
MDgzZTdlNWZkNmE1LzEvdVVQWDVFMDNyRmtRQW1NWjhRemRjNVo5bDhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8zZjMwODAtYzE5MC00ZGE2LThhYjQtMDgzZTdlNWZkNmE1
LzEvdVVQWDVFMDNyRmtRQW1NWjhRemRjNVo5bDhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANfmtWc79
H5CFAX/aVodO4dAl5GUH81NUnWlfcVuXs19E770PYwamgqgkbeqQv9p1F+IR4Hf1
Je0fCeiKf8SyemXoOW7/78t+U/gmThHdLWxqYqjy9DwtPUPFAaf3h4GV8dg5q0UD
4ZWTvSLsokrLZgZqUT2Ml6yD30JGI0XTh9zXdd5hJfYyBl4MPBrKNXgszw2OLyVC
295OC7PmhtbAfJ3TWLR2FpBJUPQT8MRYtqaNl1WK9HqpRj7hx1GsnecAxg2FM0g7
MwrUaXcS9VGK/f+TY1LGZiN7wdJHCVND+CsLmbOUTI9bG74dF2oTwbnAoxcbLADp
xA7J208kqt4IQQ==
-----END CERTIFICATE-----
Generated at Thu May 1 13:58:27 2025 by rpki-client