Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft
File: uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft (raw, json)
Hash identifier: wI6/WHyJ53R4rYgDkhVYMXsq0bhRElyZLQJD6BAVKos=
Subject key identifier: 3F:E0:D7:1C:A9:44:2E:24:17:FC:FD:52:9C:41:FD:94:41:72:A8:E5
Authority key identifier: B8:15:25:AE:1A:5A:FC:EF:19:3F:5A:40:17:7B:F2:73:88:83:10:78
Certificate issuer: /CN=b81525ae1a5afcef193f5a40177bf27388831078
Certificate serial: 0196B521FDEA30452959936369224229C246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft
Manifest number: 024B
Signing time: Fri 09 May 2025 13:00:25 +0000
Manifest this update: Fri 09 May 2025 13:00:25 +0000
Manifest next update: Sat 10 May 2025 13:00:25 +0000
Files and hashes: 1: uBUlrhpa_O8ZP1pAF3vyc4iDEHg.crl (hash: 1Z7H7noPVulY7lVAtNBmMlO3hM2xHWIxXl9IGWgxMDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:21:fd:ea:30:45:29:59:93:63:69:22:42:29:c2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81525ae1a5afcef193f5a40177bf27388831078
Validity
Not Before: May 9 13:00:25 2025 GMT
Not After : May 10 13:00:25 2025 GMT
Subject: CN=3fe0d71ca9442e2417fcfd529c41fd944172a8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ab:92:89:ed:61:31:fe:64:8a:87:81:1e:27:
c1:56:ca:0d:3d:33:f0:e4:10:99:49:49:85:62:c8:
f4:ff:aa:d8:e3:b1:c1:f8:df:7e:53:9d:40:71:88:
de:c2:7c:c1:b1:33:ff:bf:e3:7a:d9:f1:fb:0e:f9:
5c:66:62:e7:e0:e1:40:0a:ef:f1:28:41:1f:c4:03:
cb:c6:56:52:b1:0b:2f:1e:8f:c9:f2:ac:75:56:ee:
af:74:49:6b:c0:4e:f9:8d:c0:6f:24:a7:b8:c9:54:
6c:8d:70:0c:6e:d4:f4:90:24:e4:2e:92:8f:2c:f8:
60:23:23:66:1f:e2:ce:c3:af:c9:c5:0e:6f:fb:91:
6e:9c:be:10:6e:2d:ac:f7:0a:ba:d0:14:03:a9:c2:
72:4f:9f:f5:1f:c0:85:7b:93:97:80:bf:70:12:a8:
cd:7e:f0:c0:b3:95:30:bc:29:54:20:a1:90:44:3a:
74:67:83:6c:a4:85:f3:e8:9e:d3:43:ca:b6:f7:90:
19:87:c9:62:c8:e3:75:16:04:39:df:d7:de:9e:38:
af:80:7f:fd:d8:8b:c0:c8:b3:5c:e3:61:18:73:be:
a3:c0:d1:9b:4d:bd:d5:1a:79:12:9c:59:81:c7:c3:
74:1f:1c:ef:13:6c:81:ef:2e:01:63:fe:f2:91:e0:
06:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E0:D7:1C:A9:44:2E:24:17:FC:FD:52:9C:41:FD:94:41:72:A8:E5
X509v3 Authority Key Identifier:
keyid:B8:15:25:AE:1A:5A:FC:EF:19:3F:5A:40:17:7B:F2:73:88:83:10:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:20:e3:38:cb:c3:8e:31:1a:af:cd:51:77:e0:24:0c:0e:93:
5a:9d:15:be:37:2c:9a:25:89:0d:02:e3:aa:fe:72:91:c0:13:
80:ac:29:bf:07:f1:b9:bc:ca:c8:63:6f:11:c0:c9:14:df:63:
8c:f8:d9:35:fb:b0:86:90:7a:96:8f:a3:ee:61:28:8a:ba:da:
8b:77:65:9a:5d:71:96:d1:94:89:3d:60:e2:08:47:de:b8:80:
0e:da:ee:a7:54:08:f1:fd:21:9a:fc:a5:8d:0c:c0:8f:27:06:
18:4a:72:f9:dd:5e:7b:1f:cd:2f:da:da:e7:34:43:ed:e8:d9:
5d:be:9b:05:3b:9b:c2:54:c7:30:f2:8e:aa:c8:56:13:63:32:
44:92:79:87:1f:8a:0e:45:15:f3:8a:fe:8b:3f:09:ad:7e:6b:
7a:54:3a:91:d3:94:b7:00:3b:90:95:41:30:1a:71:cb:e6:53:
26:9d:4c:9e:8a:8e:2e:bc:cd:0d:9f:2b:26:84:05:eb:a9:9c:
fe:aa:fc:31:9d:bb:5e:ab:ca:22:bf:b7:f8:75:68:bd:d3:11:
74:2d:02:98:bd:1f:d6:86:f8:75:46:97:68:15:54:ab:8d:60:
5c:36:38:3f:64:de:f2:f3:f0:d5:d5:9a:87:13:4b:8f:17:07:
04:90:c0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 21:12:20 2025 by rpki-client