Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
File: u5O3SkaFwcFKueGSF6qxQWNBEdY.mft (raw, json)
Hash identifier: intPZltgXJ5OR6BzqhaepSzzkT72F4MVvjpYm8jho2o=
Subject key identifier: B4:97:C8:0A:D1:AE:BC:42:1A:77:07:F6:6B:AD:D5:42:B7:78:50:85
Authority key identifier: BB:93:B7:4A:46:85:C1:C1:4A:B9:E1:92:17:AA:B1:41:63:41:11:D6
Certificate issuer: /CN=bb93b74a4685c1c14ab9e19217aab141634111d6
Certificate serial: 019677562DD34FC34825CC98578FBDF0F6D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5O3SkaFwcFKueGSF6qxQWNBEdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
Manifest number: 0EB7
Signing time: Sun 27 Apr 2025 13:00:58 +0000
Manifest this update: Sun 27 Apr 2025 13:00:58 +0000
Manifest next update: Mon 28 Apr 2025 13:00:58 +0000
Files and hashes: 1: u5O3SkaFwcFKueGSF6qxQWNBEdY.crl (hash: NKf9svPMvoXqp4TghMllbdegJGwlF8IsbcL2RVZxs/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5O3SkaFwcFKueGSF6qxQWNBEdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:56:2d:d3:4f:c3:48:25:cc:98:57:8f:bd:f0:f6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb93b74a4685c1c14ab9e19217aab141634111d6
Validity
Not Before: Apr 27 13:00:58 2025 GMT
Not After : Apr 28 13:00:58 2025 GMT
Subject: CN=b497c80ad1aebc421a7707f66badd542b7785085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:91:73:87:e9:b6:f8:49:07:b4:5e:f8:e4:a9:
2d:3d:ea:0b:ae:cb:1e:59:e8:0d:1b:85:53:47:e8:
26:a0:64:e9:f9:de:ec:ac:0c:94:a4:0b:60:4a:16:
38:bc:b6:ac:b9:2b:82:98:f8:95:6e:98:9e:28:e0:
43:f6:a1:34:1d:96:65:16:bf:d9:dc:f2:69:56:e1:
a1:6a:2f:98:5e:e0:46:0a:e6:f7:de:2b:01:6f:9f:
69:28:3a:70:2f:82:b1:59:f8:2a:1d:58:f4:05:1b:
9d:13:5b:73:42:b1:71:22:01:7b:81:55:bb:a0:22:
7f:ea:cb:f5:ad:a5:13:38:c0:85:13:ce:bf:82:09:
74:90:a8:92:b0:63:2a:5b:af:71:77:e7:1a:96:3b:
b2:e6:5f:c5:5b:cc:b2:9d:30:f5:0c:fc:86:34:1f:
4e:50:f1:07:c0:2d:fb:87:0f:1d:b7:45:10:38:84:
eb:c6:73:ed:9c:bc:74:bc:42:63:0e:05:35:0d:ee:
99:f9:56:77:46:b8:bd:72:80:23:67:d0:15:25:39:
0f:23:4b:b5:e5:73:89:24:06:26:e7:53:77:17:11:
0c:f1:9e:5d:3f:4e:d9:92:8a:4b:78:dc:b7:df:b2:
b6:fb:04:d9:f7:10:c8:88:f7:b2:8d:70:2a:8b:11:
5c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:97:C8:0A:D1:AE:BC:42:1A:77:07:F6:6B:AD:D5:42:B7:78:50:85
X509v3 Authority Key Identifier:
keyid:BB:93:B7:4A:46:85:C1:C1:4A:B9:E1:92:17:AA:B1:41:63:41:11:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5O3SkaFwcFKueGSF6qxQWNBEdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:22:16:7f:aa:1c:00:3c:60:ec:5e:fb:08:f6:87:02:e8:1b:
2d:dc:9c:be:04:21:b5:1e:4c:a7:f3:af:e0:0a:e8:3e:83:63:
7a:1a:6d:96:e5:6e:6b:86:9f:77:2e:12:01:cb:40:da:34:38:
90:4b:d6:55:f6:f5:4e:cf:f5:f2:8f:f8:1b:8b:83:46:59:0a:
8c:85:b8:5a:b5:96:98:6e:b6:d3:44:9a:72:53:92:e3:cc:66:
bf:f3:c3:81:7c:7a:7c:59:6c:01:74:20:5c:13:8d:e3:26:b4:
1e:d7:11:3c:fd:57:73:ca:5e:e0:91:87:d5:da:e1:98:43:d8:
6d:b4:d5:84:00:35:c8:fa:73:08:ba:d8:65:4a:0a:3d:ed:9e:
2d:ea:74:01:b9:92:bf:26:c2:d9:de:4e:7e:54:22:19:b9:ef:
1e:8d:1c:71:d8:a8:26:9b:28:b2:b4:7e:f0:61:6d:93:79:84:
6f:24:42:23:57:0e:7e:3c:63:44:48:cc:d3:09:1c:5f:bf:ca:
3a:9e:8e:fe:8e:ad:33:79:e5:37:8f:bf:fe:f2:87:59:58:56:
d0:f2:a8:d6:4d:3a:65:b3:c9:e3:d9:1a:5c:71:4a:1b:f7:5e:
9a:fc:e9:5b:ca:62:dd:af:be:86:0e:e9:c0:44:dc:e7:c5:8b:
fc:4b:11:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3Vi3TT8NIJcyYV4+98PbUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiOTNiNzRhNDY4NWMxYzE0YWI5ZTE5MjE3YWFiMTQxNjM0
MTExZDYwHhcNMjUwNDI3MTMwMDU4WhcNMjUwNDI4MTMwMDU4WjAzMTEwLwYDVQQD
EyhiNDk3YzgwYWQxYWViYzQyMWE3NzA3ZjY2YmFkZDU0MmI3Nzg1MDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJFzh+m2+EkHtF745KktPeoLrsse
WegNG4VTR+gmoGTp+d7srAyUpAtgShY4vLasuSuCmPiVbpieKOBD9qE0HZZlFr/Z
3PJpVuGhai+YXuBGCub33isBb59pKDpwL4KxWfgqHVj0BRudE1tzQrFxIgF7gVW7
oCJ/6sv1raUTOMCFE86/ggl0kKiSsGMqW69xd+caljuy5l/FW8yynTD1DPyGNB9O
UPEHwC37hw8dt0UQOITrxnPtnLx0vEJjDgU1De6Z+VZ3Rri9coAjZ9AVJTkPI0u1
5XOJJAYm51N3FxEM8Z5dP07ZkopLeNy337K2+wTZ9xDIiPeyjXAqixFczQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSXyArRrrxCGncH9mut1UK3eFCFMB8GA1UdIwQY
MBaAFLuTt0pGhcHBSrnhkheqsUFjQRHWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTVPM1NrYUZ3Y0ZLdWVHU0Y2cXhRV05CRWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9hZTkwODEtZjY1MS00MWY1LWIzYTIt
MzcwNmIxZmNkNmNiLzEvdTVPM1NrYUZ3Y0ZLdWVHU0Y2cXhRV05CRWRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9hZTkwODEtZjY1MS00MWY1LWIzYTItMzcwNmIxZmNkNmNi
LzEvdTVPM1NrYUZ3Y0ZLdWVHU0Y2cXhRV05CRWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCIWf6oc
ADxg7F77CPaHAugbLdycvgQhtR5Mp/Ov4AroPoNjehptluVua4afdy4SActA2jQ4
kEvWVfb1Ts/18o/4G4uDRlkKjIW4WrWWmG6200SaclOS48xmv/PDgXx6fFlsAXQg
XBON4ya0HtcRPP1Xc8pe4JGH1drhmEPYbbTVhAA1yPpzCLrYZUoKPe2eLep0AbmS
vybC2d5OflQiGbnvHo0ccdioJpsosrR+8GFtk3mEbyRCI1cOfjxjREjM0wkcX7/K
Op6O/o6tM3nlN4+//vKHWVhW0PKo1k06ZbPJ49kaXHFKG/demvzpW8pi3a++hg7p
wETc58WL/EsR+Q==
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:23:04 2025 by rpki-client