Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
File: kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft (raw, json)
Hash identifier: YpCHyA6e5EBX4OJjqmbcRVz7/pjmgR5YN86ji26VLCU=
Subject key identifier: EC:85:E2:B8:66:99:59:8C:32:C9:EC:99:D7:79:B6:AB:0C:A2:39:96
Authority key identifier: 91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63
Certificate issuer: /CN=9143c5f48c77a79c985f5e5362e082ad54e23063
Certificate serial: 019677FAED174B0E0FC81839AE770991C3F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
Manifest number: 0BF5
Signing time: Sun 27 Apr 2025 16:00:55 +0000
Manifest this update: Sun 27 Apr 2025 16:00:55 +0000
Manifest next update: Mon 28 Apr 2025 16:00:55 +0000
Files and hashes: 1: kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl (hash: NpJoCKoDGrK2dAhKeDkULRwH0Vtmf4pXZI8/J8Gv0rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:ed:17:4b:0e:0f:c8:18:39:ae:77:09:91:c3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9143c5f48c77a79c985f5e5362e082ad54e23063
Validity
Not Before: Apr 27 16:00:55 2025 GMT
Not After : Apr 28 16:00:55 2025 GMT
Subject: CN=ec85e2b86699598c32c9ec99d779b6ab0ca23996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:75:71:c6:2f:ef:00:3e:61:39:86:ec:bd:18:
ed:fd:a5:16:b7:cb:d9:5c:7e:6b:fd:32:c4:4a:46:
09:ec:b3:5a:60:e7:36:b1:24:58:f8:0d:8f:3a:e3:
4d:bd:5f:7a:e8:e2:75:b7:93:c1:35:72:5b:5a:d1:
bc:ed:5b:e2:ac:24:c3:ff:2f:7b:82:73:3f:1a:40:
41:16:6b:0c:da:82:9f:43:af:60:78:75:3d:cf:8e:
41:d8:ce:09:26:37:fc:63:1a:dc:b5:f7:34:ae:ed:
7f:f2:70:58:6f:7f:00:f5:84:33:c9:a4:4b:95:e9:
cc:db:80:33:13:b7:b2:2e:4c:a1:67:f1:a0:76:23:
ff:75:72:b8:ba:d3:fb:6b:27:2e:a0:c2:be:ad:e6:
46:4e:8d:c1:f7:40:ef:24:d2:0d:6f:2b:5a:ef:67:
c9:f3:85:c2:42:b8:2e:8a:e3:e7:97:19:2d:1e:5c:
e5:fa:e5:7a:75:0f:53:a4:af:cf:3e:e6:3c:cb:25:
e2:70:77:4c:1b:2b:69:83:96:ac:89:f1:47:b7:d9:
33:06:0f:14:2c:49:f6:ae:01:b8:12:5d:97:0a:d1:
ec:db:7a:40:ed:9f:17:ab:39:34:9f:6c:4c:75:69:
a9:a6:5b:b7:39:80:0f:1e:3a:e6:9e:0a:4f:1d:7f:
d3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:85:E2:B8:66:99:59:8C:32:C9:EC:99:D7:79:B6:AB:0C:A2:39:96
X509v3 Authority Key Identifier:
keyid:91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:39:f0:01:41:8b:43:63:57:0f:c2:c6:42:79:4b:b6:80:fc:
db:a1:89:86:a8:43:ff:6f:5e:54:d6:e1:d5:9f:98:e8:cf:86:
cc:41:29:6b:f2:38:ec:3c:a9:24:dc:25:fb:a7:9e:8d:f5:b5:
3b:03:bc:b4:2e:28:c1:11:bf:51:df:fa:a0:36:1d:32:7c:d2:
b3:8f:97:eb:7c:f9:0a:e9:d8:71:b7:00:e6:fd:1a:33:e3:dd:
19:45:da:de:fc:75:1d:a1:60:83:82:90:58:ad:65:61:4a:f8:
a3:1c:af:8a:25:2f:7e:a3:41:b7:80:1e:16:25:7c:74:38:8c:
13:91:34:e4:ee:ca:6a:fb:54:ac:03:b3:11:5c:35:b4:51:26:
34:d4:a0:b4:88:85:9e:97:95:92:f1:b6:1d:4c:b0:48:95:c7:
22:e4:a6:51:d5:fd:aa:f0:e1:1f:d9:0a:5b:cd:dd:ae:4a:4e:
cc:8f:5b:2e:f3:36:7d:a2:9f:64:de:e6:8d:08:49:f5:13:e4:
1b:85:40:91:51:3c:55:88:48:98:09:f6:b2:81:cf:40:f8:12:
86:ab:86:cd:48:09:dd:80:75:a2:7c:e8:eb:3c:ba:65:65:7e:
d9:82:e5:3f:d1:8d:e2:48:8c:68:bb:d0:64:14:32:ba:d6:90:
7e:7f:e0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:36:07 2025 by rpki-client