Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
File: uUZ8BbpC7h85pkpT4dA0Azbl48M.mft (raw, json)
Hash identifier: /m7Y1NDlNt8shdRCNA13CEO3OUuBQrA2zi12hmHmT5g=
Subject key identifier: AF:DA:A6:DD:19:39:29:8A:71:E1:22:B8:6B:ED:FC:23:CE:D0:21:07
Authority key identifier: B9:46:7C:05:BA:42:EE:1F:39:A6:4A:53:E1:D0:34:03:36:E5:E3:C3
Certificate issuer: /CN=b9467c05ba42ee1f39a64a53e1d0340336e5e3c3
Certificate serial: 01976C991FF8CA5C025B3EB1A8D5C2847EB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUZ8BbpC7h85pkpT4dA0Azbl48M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 04:01:03 +0000
Manifest this update: Sat 14 Jun 2025 04:01:03 +0000
Manifest next update: Sun 15 Jun 2025 04:01:03 +0000
Files and hashes: 1: uUZ8BbpC7h85pkpT4dA0Azbl48M.crl (hash: hN+4CWSdkAm46+sbs6NfEP761+VFhUUvIMOCvKj6fVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUZ8BbpC7h85pkpT4dA0Azbl48M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:99:1f:f8:ca:5c:02:5b:3e:b1:a8:d5:c2:84:7e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9467c05ba42ee1f39a64a53e1d0340336e5e3c3
Validity
Not Before: Jun 14 04:01:03 2025 GMT
Not After : Jun 15 04:01:03 2025 GMT
Subject: CN=afdaa6dd1939298a71e122b86bedfc23ced02107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ab:e8:ea:81:a5:3c:f8:54:0c:da:e1:45:13:
44:54:f6:3e:96:69:9c:24:62:d5:7f:ed:ed:e8:ee:
6e:68:28:0a:97:b6:fb:a6:84:fd:53:4f:19:72:c0:
60:89:65:21:57:a6:f4:0b:89:d5:2d:68:8e:bf:64:
c5:ad:2b:75:e7:58:4e:c2:7a:81:26:db:5b:8d:b7:
2a:ad:5d:17:31:b2:f5:d0:92:e0:2c:41:99:49:1f:
f7:78:92:fa:e9:fd:b8:34:48:a9:51:1d:79:30:29:
6d:00:09:f8:78:99:05:45:7d:5b:6b:41:d3:78:9f:
51:e5:78:fd:67:e0:d3:5f:55:f6:f5:9f:91:85:2d:
fd:1b:79:96:d1:9a:c7:64:57:43:2b:41:ab:9e:df:
95:93:e9:48:3c:f9:c0:73:55:1e:9f:e7:ab:d0:7f:
ab:54:73:1e:fd:98:d2:3d:1d:26:bb:e5:8b:8a:c0:
e8:1e:97:ea:7c:d3:c1:e6:41:74:04:81:30:f0:55:
8b:68:01:d2:79:27:3e:37:e1:01:a3:5e:21:bd:53:
99:e1:75:24:c8:53:06:17:45:88:3a:67:c5:97:fc:
35:21:39:e9:e6:97:65:a1:ce:84:92:7c:9c:d2:f1:
b0:e6:d9:c2:14:a1:d2:70:d1:9a:09:52:9b:3c:af:
26:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DA:A6:DD:19:39:29:8A:71:E1:22:B8:6B:ED:FC:23:CE:D0:21:07
X509v3 Authority Key Identifier:
keyid:B9:46:7C:05:BA:42:EE:1F:39:A6:4A:53:E1:D0:34:03:36:E5:E3:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUZ8BbpC7h85pkpT4dA0Azbl48M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:16:f1:3a:1c:27:a9:77:9a:db:46:f0:ff:93:8a:2a:7b:da:
fd:e4:45:c6:9e:0c:90:ff:d0:1c:0d:1a:99:85:a6:0b:3b:24:
55:88:95:8c:b6:dd:c9:ce:27:bd:e5:0c:1d:d9:0b:83:ab:42:
e6:d2:41:03:f3:d3:4d:21:c9:af:09:00:60:fa:cc:7d:83:e6:
41:09:f2:5f:8f:cd:7f:be:40:92:bd:f9:13:1c:55:81:c7:34:
1d:38:7b:1a:7d:3f:73:cf:b1:df:83:df:a8:86:38:b0:c9:24:
fc:14:a9:a5:15:8c:a7:1f:0e:df:f5:9c:ba:34:7c:1e:4e:e7:
b9:8d:e0:30:ea:19:a6:65:79:18:e7:c2:bc:b5:d6:33:49:60:
86:b0:51:1b:38:da:f9:71:0e:10:04:15:45:91:c9:46:4b:8f:
29:eb:f7:01:14:14:c7:48:aa:bf:01:ce:af:f0:63:79:86:f0:
35:e8:3a:a3:c2:e1:47:c1:c2:4e:ef:07:ba:46:36:04:43:fd:
43:2d:92:c1:63:bb:2e:bc:73:14:2f:4e:82:2f:e5:ea:90:c3:
9b:28:4d:b4:42:0b:00:e4:58:de:b4:8c:c8:98:b4:e0:2c:14:
de:ec:8a:e7:a6:22:2d:a5:77:c2:d2:e8:42:2c:11:93:6e:6c:
10:6a:fa:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:18:35 2025 by rpki-client