Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft
File: ULhDqNkbFYJOYOLNaJpvRR4lal4.mft (raw, json)
Hash identifier: LFkf7aBgJjG/zjzYdUBWbyCguHgvH5OZmf2g8DHKMbw=
Subject key identifier: 1D:3D:3A:D2:90:73:EE:80:AA:E1:F4:72:C9:D8:41:3A:62:BC:17:48
Authority key identifier: 50:B8:43:A8:D9:1B:15:82:4E:60:E2:CD:68:9A:6F:45:1E:25:6A:5E
Certificate issuer: /CN=50b843a8d91b15824e60e2cd689a6f451e256a5e
Certificate serial: 019768F2B5803C5D115F1848EAAF0CA4C766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULhDqNkbFYJOYOLNaJpvRR4lal4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft
Manifest number: 02FE
Signing time: Fri 13 Jun 2025 11:00:25 +0000
Manifest this update: Fri 13 Jun 2025 11:00:25 +0000
Manifest next update: Sat 14 Jun 2025 11:00:25 +0000
Files and hashes: 1: ULhDqNkbFYJOYOLNaJpvRR4lal4.crl (hash: s898N/uTiZ8LB22TvlZERo/fcSKxAfN2Qf8T3QuiQ8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ULhDqNkbFYJOYOLNaJpvRR4lal4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:b5:80:3c:5d:11:5f:18:48:ea:af:0c:a4:c7:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50b843a8d91b15824e60e2cd689a6f451e256a5e
Validity
Not Before: Jun 13 11:00:25 2025 GMT
Not After : Jun 14 11:00:25 2025 GMT
Subject: CN=1d3d3ad29073ee80aae1f472c9d8413a62bc1748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2a:b6:fd:e2:94:0c:46:d7:ab:9e:9a:ec:e4:
4d:a6:d4:f7:8a:71:12:fa:eb:59:d0:5d:c5:26:56:
31:77:f5:8c:da:51:4e:ca:f8:71:ac:a4:ba:ed:6b:
ad:72:32:86:69:f8:a4:7b:24:71:5a:b5:e8:03:93:
fe:45:ae:47:8c:f8:77:6a:44:ef:c3:62:05:40:88:
27:9d:e0:ec:bc:5b:1d:63:00:04:aa:d8:aa:6f:9b:
02:eb:02:c8:dc:7f:99:f5:1c:2b:04:3b:de:c2:7f:
a9:7e:ee:07:f7:b0:c3:d8:c5:19:46:e4:73:ed:9b:
45:3a:b7:0b:69:b0:a0:5d:e6:86:5f:13:11:6b:37:
8c:34:13:64:88:63:3b:0d:d6:48:76:ac:f3:a2:80:
cd:08:1c:b6:55:3a:a4:69:09:c9:3b:e2:d9:c0:5a:
66:18:17:43:27:93:37:8f:c9:b1:37:ce:a9:4f:2c:
78:62:73:16:6c:6e:aa:d1:db:66:75:fb:72:e4:9b:
c6:f5:d0:e3:dc:6e:7f:5c:f4:28:45:38:23:24:1b:
0b:fa:6b:61:20:8f:e2:8b:78:7c:a4:d2:4c:17:83:
4e:13:50:3b:b3:92:ed:03:3a:ca:01:9b:8c:bd:b3:
31:68:0c:37:1a:b5:6b:e5:fe:66:ab:de:ed:0e:3c:
e7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3D:3A:D2:90:73:EE:80:AA:E1:F4:72:C9:D8:41:3A:62:BC:17:48
X509v3 Authority Key Identifier:
keyid:50:B8:43:A8:D9:1B:15:82:4E:60:E2:CD:68:9A:6F:45:1E:25:6A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULhDqNkbFYJOYOLNaJpvRR4lal4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e4:ac:e9:9d:36:9e:a7:e8:64:c3:0b:d4:54:8b:c4:79:04:
fc:93:ce:c6:e8:5e:c5:fd:bc:ea:71:c2:93:42:ee:d1:b0:26:
8b:d5:dc:08:48:d8:3f:16:a7:d4:e2:c2:ce:f2:8e:7e:9a:69:
0b:dd:54:47:6f:78:53:b5:71:14:d8:70:00:0a:58:44:b8:de:
f5:18:db:8a:f1:6b:1b:ad:89:98:55:06:0f:52:bf:29:ef:a7:
fe:3f:e5:40:4f:76:80:40:2d:6e:db:cb:6d:51:b2:11:64:80:
53:2e:f7:29:26:b6:76:48:ef:e7:c6:87:9f:c8:5e:59:dc:b1:
e1:49:15:a5:5c:c9:b9:d3:c8:a3:d5:77:57:84:bb:30:33:4a:
40:a9:8a:2e:1c:ad:ba:a3:b9:e2:29:87:9e:26:1d:26:da:ff:
de:86:bf:f3:c3:f2:f6:1c:e0:50:ea:47:15:88:43:7b:52:87:
c2:a4:46:e1:b9:9f:0c:3a:d6:1f:69:30:b0:36:bf:f7:5b:c1:
83:d7:9b:fa:9e:11:50:fa:b5:11:ea:69:ec:3e:f6:e4:c3:4d:
14:74:fe:18:c6:0b:f7:91:bf:49:fb:19:76:47:b8:76:49:09:
51:7f:e5:bd:b9:56:6e:81:4e:d2:be:58:dd:57:fe:ab:5c:a2:
a2:03:eb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:27:24 2025 by rpki-client