Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
File: UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft (raw, json)
Hash identifier: 3vW7UzA6BHz/vZ96Sx0toQYzaNGNMEvKuoLhaWAXZTs=
Subject key identifier: 60:11:F5:F1:13:CD:44:94:64:24:BB:EE:AB:9F:9F:11:AF:B0:7A:06
Authority key identifier: 50:1B:52:02:A0:ED:46:F6:41:1E:1E:DA:7C:7B:59:DD:8C:C6:CD:87
Certificate issuer: /CN=501b5202a0ed46f6411e1eda7c7b59dd8cc6cd87
Certificate serial: 019768BBF7643E9783596E2327B7871ACC33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
Manifest number: 12DF
Signing time: Fri 13 Jun 2025 10:00:38 +0000
Manifest this update: Fri 13 Jun 2025 10:00:38 +0000
Manifest next update: Sat 14 Jun 2025 10:00:38 +0000
Files and hashes: 1: UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl (hash: uS+IHNLyLMmF6XXqzOchnKBlbOd9RwfaecUzkY5tNDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:f7:64:3e:97:83:59:6e:23:27:b7:87:1a:cc:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501b5202a0ed46f6411e1eda7c7b59dd8cc6cd87
Validity
Not Before: Jun 13 10:00:38 2025 GMT
Not After : Jun 14 10:00:38 2025 GMT
Subject: CN=6011f5f113cd44946424bbeeab9f9f11afb07a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:89:38:57:45:55:0d:39:ef:65:a3:72:c5:8b:
39:82:a1:fc:a6:89:f5:f5:c8:3d:c0:7c:d2:00:0f:
c4:27:1a:00:5c:5e:6c:8b:27:2b:5a:4c:a2:c1:26:
ae:e4:c5:e7:83:b6:f1:5c:45:8a:aa:c7:23:0f:97:
8f:c0:4a:53:3a:8b:a6:df:4b:5f:c7:5c:08:fc:cf:
f0:05:03:bc:46:27:af:50:71:10:bf:7e:01:b8:e3:
f8:7c:f9:e2:74:47:50:2d:c9:18:f4:57:d5:9e:89:
f4:4d:a4:e1:ec:cb:bf:04:a3:0c:90:09:01:37:cf:
f4:3b:40:e9:18:65:4c:6a:ed:63:b0:e7:5d:5b:e4:
81:76:d4:3c:73:3c:5c:01:7c:c8:23:dc:ff:31:91:
20:38:0f:43:c1:9f:41:5b:8f:51:28:eb:d1:fc:6b:
cc:6e:98:82:c2:0a:8d:ce:f6:e4:08:8f:49:b3:68:
a8:22:7f:91:b1:12:c4:18:f1:ff:da:3f:49:d7:25:
4a:7b:9b:83:38:37:cb:04:07:0c:be:d6:d2:12:e7:
3d:92:a9:66:22:6b:56:b4:ea:81:55:5a:2c:bc:66:
f2:c6:f1:16:c0:93:fd:f1:4c:ad:ae:be:18:28:06:
00:56:a9:75:49:6b:f5:81:5f:38:1f:20:1c:1e:35:
5c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:11:F5:F1:13:CD:44:94:64:24:BB:EE:AB:9F:9F:11:AF:B0:7A:06
X509v3 Authority Key Identifier:
keyid:50:1B:52:02:A0:ED:46:F6:41:1E:1E:DA:7C:7B:59:DD:8C:C6:CD:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:03:d3:86:5e:fb:90:ec:d0:26:af:e1:02:37:6a:3b:59:d4:
97:00:fc:16:04:86:0d:b5:58:97:a7:a7:85:a9:d1:f1:0b:38:
f2:d0:fd:82:6b:fc:45:68:32:cb:b7:da:5d:2a:5f:7a:1a:c8:
88:df:ce:ee:79:ce:60:7f:b9:4a:07:b3:d0:ea:c7:83:92:04:
57:dc:9a:18:d2:27:24:76:78:7a:31:a3:4f:a2:af:b7:1e:fc:
b0:bb:80:28:44:a6:4b:84:e6:1f:00:05:4f:ea:2f:79:05:63:
11:0e:23:dc:46:49:fe:84:ba:ca:2d:fe:d5:36:4d:0f:ae:b8:
57:a5:fc:24:91:65:14:ae:01:51:32:08:3f:1b:78:ad:65:8d:
f8:0d:da:8f:b7:52:e7:f3:ee:35:22:66:8a:c9:8e:d4:bb:9b:
2f:3b:c1:21:51:54:94:f5:66:74:29:65:aa:37:b8:fe:17:32:
4a:9f:6f:fe:be:66:8c:8e:3c:33:20:01:6a:2d:00:34:08:9f:
a6:ac:74:bd:e4:a7:12:19:7e:01:38:d0:89:7e:a3:6d:c0:f0:
84:57:eb:b5:2f:9e:2c:9f:75:62:2e:47:15:76:c7:81:bf:48:
4e:e0:7e:cf:0b:9f:75:ff:7c:5f:05:06:3b:3c:dd:2d:52:b3:
ba:39:eb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:54 2025 by rpki-client