Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
File: ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft (raw, json)
Hash identifier: QRSODBdBabX4ldlKt0RD7opXCUM0YR7tvEzzLGkT7uQ=
Subject key identifier: 57:DD:50:EB:6A:36:46:A6:4D:17:9C:23:92:05:B0:B6:D4:F2:F4:1C
Authority key identifier: BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E
Certificate issuer: /CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e
Certificate serial: 01976929F198CC93A0FDC24AC8C4805307F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
Manifest number: 0F4A
Signing time: Fri 13 Jun 2025 12:00:45 +0000
Manifest this update: Fri 13 Jun 2025 12:00:45 +0000
Manifest next update: Sat 14 Jun 2025 12:00:45 +0000
Files and hashes: 1: ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl (hash: z0NpVS3oISv+i5y/1HarwBQMHI/0ak7wPsVC3u51XeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:f1:98:cc:93:a0:fd:c2:4a:c8:c4:80:53:07:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e
Validity
Not Before: Jun 13 12:00:45 2025 GMT
Not After : Jun 14 12:00:45 2025 GMT
Subject: CN=57dd50eb6a3646a64d179c239205b0b6d4f2f41c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:31:25:41:eb:2b:33:9e:a2:8e:13:23:af:d9:
cf:05:14:06:d7:bb:cd:6d:0a:55:64:cc:a6:16:28:
be:49:06:e7:cb:f5:ab:52:02:b5:3c:5f:cf:bb:2d:
93:e7:5f:df:8a:fb:e7:f8:e1:d6:57:31:4a:a3:53:
3b:5a:10:5f:06:1f:6b:68:7b:21:63:45:21:a9:53:
4e:9e:f9:64:93:c0:9e:ba:73:78:d5:82:20:16:f2:
fb:e6:04:e9:ab:1b:65:c6:85:24:50:d8:06:ab:29:
7c:b4:24:fb:63:2f:09:2d:4a:c7:9f:41:6e:3f:62:
13:86:3c:f6:a5:59:58:26:8d:e7:2f:8d:98:bb:c3:
0f:b9:78:1b:a4:8d:42:c9:aa:a5:7c:eb:c3:ce:5b:
e2:3e:bc:3c:89:45:05:5e:31:fe:68:7d:bc:ae:12:
53:7f:f4:e1:3c:68:e5:ab:31:b2:4f:a4:fb:a9:4b:
f7:ad:02:39:62:0f:54:fa:a7:3b:56:52:4f:6a:e1:
2c:9f:ac:28:bd:46:68:6f:07:22:9f:51:29:df:dd:
47:17:66:9a:f1:08:87:07:b0:b1:b5:e5:fb:57:b9:
5f:10:a6:f4:f1:11:9c:1d:ec:28:8f:71:c9:ad:bf:
f2:e0:e0:8b:84:3d:4c:c7:93:5a:85:6d:51:15:65:
2e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DD:50:EB:6A:36:46:A6:4D:17:9C:23:92:05:B0:B6:D4:F2:F4:1C
X509v3 Authority Key Identifier:
keyid:BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:54:10:21:12:0d:4b:d7:dc:c2:8d:30:55:a6:00:cc:14:16:
5d:bd:14:d1:6c:be:c7:b6:e0:bb:88:7f:3a:4c:48:1a:98:d4:
bd:a0:ba:42:c6:ab:89:fd:4d:53:4b:e7:0b:4f:8c:d2:5c:19:
a3:08:88:b7:a1:7d:e8:47:81:59:7b:af:de:ed:0c:bd:2c:69:
ba:20:f9:8a:1e:cf:03:1a:b0:42:af:e2:fd:ad:4e:36:34:70:
dd:90:f3:d4:8a:82:e9:72:6a:ca:d3:a7:cf:0a:ae:e9:87:35:
10:1b:0b:15:35:0e:dc:8a:19:54:77:a1:45:11:ea:f0:48:da:
f6:0e:83:d5:14:3b:19:17:94:0e:73:f6:23:eb:b7:78:06:fa:
f2:3c:1c:70:fb:36:26:f3:6e:d5:89:8a:f5:e6:f0:91:34:62:
b1:41:d1:51:d9:cb:24:c2:c8:0c:ae:3b:93:a4:b3:93:c0:04:
9c:65:c5:f4:cb:a4:4b:ad:ac:84:76:b3:25:47:ea:e7:24:a0:
b7:f3:98:e7:03:8a:55:1b:06:dd:f8:4e:aa:ae:e2:16:99:f2:
c7:55:cf:65:38:a3:15:a6:17:2d:f7:9a:99:18:fd:cf:3e:61:
e2:b5:08:49:60:12:71:15:01:24:f8:62:ca:b7:ea:1f:94:5e:
f6:ae:43:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:18:10 2025 by rpki-client