Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
File: UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft (raw, json)
Hash identifier: rvv4vCkeG9tcgDbazhHDxGph5rYYG31Kz+cCmDpF5+4=
Subject key identifier: 1F:B9:3F:F3:DC:CA:19:82:DB:27:80:4A:FF:BC:EE:A6:EC:15:46:C3
Authority key identifier: 50:10:39:75:6C:CF:31:F6:4A:88:34:43:E1:F1:73:28:34:D2:B8:B2
Certificate issuer: /CN=501039756ccf31f64a883443e1f1732834d2b8b2
Certificate serial: 01976BBD665EDEEBFCF8A453D7A5BCEC1BF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
Manifest number: 08F2
Signing time: Sat 14 Jun 2025 00:01:03 +0000
Manifest this update: Sat 14 Jun 2025 00:01:03 +0000
Manifest next update: Sun 15 Jun 2025 00:01:03 +0000
Files and hashes: 1: UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl (hash: abIMWz0yvrSnvb5gUIiMdWs6edKqbf8O1wP6yUG0wpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:66:5e:de:eb:fc:f8:a4:53:d7:a5:bc:ec:1b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501039756ccf31f64a883443e1f1732834d2b8b2
Validity
Not Before: Jun 14 00:01:03 2025 GMT
Not After : Jun 15 00:01:03 2025 GMT
Subject: CN=1fb93ff3dcca1982db27804affbceea6ec1546c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c7:70:53:05:fb:30:34:16:40:60:d8:70:48:
d8:a9:ab:86:d5:92:a4:e6:4e:93:0f:b7:0a:b6:74:
8d:4b:d4:73:c7:01:fc:5f:29:be:a4:0f:97:24:17:
ba:6f:ac:34:69:ce:66:47:81:f0:33:dd:71:64:b1:
9e:ab:31:eb:cd:1a:a7:6e:56:a8:39:5a:10:01:e8:
fb:3e:b5:cc:dc:ca:70:9e:6b:b7:1a:b0:15:74:ff:
84:70:0b:22:53:78:e0:d8:de:1b:8a:1c:43:1f:d9:
ec:1c:a8:5c:b4:28:ab:f3:20:4d:ac:9f:fc:f5:91:
f2:58:1c:7d:1e:fd:ba:1b:01:7e:48:00:76:23:43:
48:a0:e3:d1:81:61:7c:85:5e:65:f3:d2:6e:d8:32:
38:f5:1a:68:d4:aa:97:de:2c:dd:30:3c:1e:4d:a0:
7f:3d:b8:54:5c:b4:86:95:4e:50:e1:61:9e:8d:60:
60:57:9d:59:73:15:da:5d:a5:63:6b:fc:eb:c3:cc:
7e:0b:5d:5b:3b:42:08:5d:f7:ce:12:4f:89:b5:ae:
48:16:46:63:e5:08:89:62:7c:eb:c7:04:17:b2:82:
7d:3b:fc:6b:33:fd:a8:be:3b:72:99:bb:c6:9e:44:
77:ef:74:b6:b6:1c:f1:e3:c1:fd:59:fc:7b:ba:0b:
8b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B9:3F:F3:DC:CA:19:82:DB:27:80:4A:FF:BC:EE:A6:EC:15:46:C3
X509v3 Authority Key Identifier:
keyid:50:10:39:75:6C:CF:31:F6:4A:88:34:43:E1:F1:73:28:34:D2:B8:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:8b:bb:42:84:31:61:a0:c8:be:ff:95:13:dd:56:3c:23:1a:
27:26:8f:ed:46:53:6f:13:17:04:c1:81:7f:ef:de:43:b8:f3:
db:6a:11:d6:50:10:0b:8a:25:04:42:15:4d:e6:fb:e0:7a:7b:
12:fc:5a:53:e7:45:c6:57:12:ec:49:82:eb:29:82:51:43:a5:
57:0f:c5:3a:3d:54:f2:7d:78:f0:42:60:d2:00:7d:ed:c0:ec:
b7:1c:ee:41:31:a3:8e:de:2a:13:78:73:11:97:66:ba:ef:9b:
a6:e6:0c:43:2a:57:c0:81:18:35:f1:07:4e:90:68:cc:0b:cd:
df:0f:b5:23:4f:fc:7a:42:9e:6e:42:c1:ac:a3:59:68:d7:1f:
80:b3:40:5a:ea:a7:e3:c6:b0:ff:e7:f0:2d:3f:32:a6:de:97:
3e:22:6e:0f:52:6a:05:4c:e6:a1:8a:03:fb:f0:17:a2:b5:27:
b4:bc:fe:04:d6:fa:09:7a:9c:f5:d2:7c:d1:58:a5:fb:4a:e7:
41:1d:d6:84:8a:ac:22:f2:c2:fd:4f:bd:9a:6b:95:16:b1:d9:
50:c6:29:76:a4:40:c4:99:7f:f3:6f:3b:e9:a1:2f:81:32:fa:
e8:76:dc:de:29:6b:3c:85:a3:ed:2c:69:6b:6b:b7:0d:84:38:
63:ef:e4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:10:52 2025 by rpki-client