Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/e19a3f-05ac-4dca-a895-8662c71186c6/1/UEwHY-3Lox64nwmD3djdGIkYwu4.mft
File: UEwHY-3Lox64nwmD3djdGIkYwu4.mft (raw, json)
Hash identifier: ubf52hq37mOmLBZv3YIDJXjuexzYzSK60p1MAAs2jD8=
Subject key identifier: 29:3D:A9:4F:A0:42:F5:FD:91:C6:1B:BB:93:F3:12:FF:B6:1D:54:A2
Authority key identifier: 50:4C:07:63:ED:CB:A3:1E:B8:9F:09:83:DD:D8:DD:18:89:18:C2:EE
Certificate issuer: /CN=504c0763edcba31eb89f0983ddd8dd188918c2ee
Certificate serial: 01976BF41EE85BB179C49217996C8A1065D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEwHY-3Lox64nwmD3djdGIkYwu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/e19a3f-05ac-4dca-a895-8662c71186c6/1/UEwHY-3Lox64nwmD3djdGIkYwu4.mft
Manifest number: 08B7
Signing time: Sat 14 Jun 2025 01:00:50 +0000
Manifest this update: Sat 14 Jun 2025 01:00:50 +0000
Manifest next update: Sun 15 Jun 2025 01:00:50 +0000
Files and hashes: 1: UEwHY-3Lox64nwmD3djdGIkYwu4.crl (hash: kHbIf6+eQIfP21dRY2Gatzw+jkgI1y37O5CNBI1Cufg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/e19a3f-05ac-4dca-a895-8662c71186c6/1/UEwHY-3Lox64nwmD3djdGIkYwu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/e19a3f-05ac-4dca-a895-8662c71186c6/1/UEwHY-3Lox64nwmD3djdGIkYwu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UEwHY-3Lox64nwmD3djdGIkYwu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:1e:e8:5b:b1:79:c4:92:17:99:6c:8a:10:65:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=504c0763edcba31eb89f0983ddd8dd188918c2ee
Validity
Not Before: Jun 14 01:00:50 2025 GMT
Not After : Jun 15 01:00:50 2025 GMT
Subject: CN=293da94fa042f5fd91c61bbb93f312ffb61d54a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:59:2a:39:12:d1:93:32:d6:b1:67:9c:e6:83:
e7:8c:22:49:05:ba:7b:52:08:8e:a3:95:61:e4:c5:
62:d8:db:4f:1d:f0:98:e3:60:ca:e6:e8:d1:bb:81:
47:8d:16:e0:0d:91:c4:75:fd:ce:f4:4d:3c:be:10:
9c:e6:6b:09:bb:2b:34:99:f3:1d:d2:2c:59:78:5c:
d7:06:b1:70:4f:25:82:ca:dc:d1:a4:fe:87:ff:ae:
db:18:44:f8:8a:af:34:c4:07:a9:ad:0b:a8:1b:81:
76:b6:fa:f4:b3:1d:69:3b:bb:15:bb:84:72:94:3f:
38:1f:58:ab:4b:b6:d5:46:7c:62:18:e1:fc:35:8b:
ac:37:b0:ea:a0:eb:bf:16:09:00:13:20:9f:69:fa:
41:66:c5:49:46:2d:8c:0a:f3:8c:86:d2:d5:55:1a:
dc:bd:ae:d1:08:e4:34:af:11:14:70:dc:c8:f6:76:
9a:96:f8:ca:4b:cb:76:1a:a8:56:ac:21:bb:ba:dd:
b5:35:d0:f7:69:8b:ec:1e:f5:4f:ab:bb:e8:0a:5b:
42:07:ac:04:f5:68:e3:3d:80:c5:f9:09:93:a6:4a:
f0:60:64:4d:7a:34:72:bb:67:b8:54:d9:b6:25:50:
a5:d2:cf:19:12:7a:34:f8:84:4c:3a:ef:22:9b:5c:
39:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3D:A9:4F:A0:42:F5:FD:91:C6:1B:BB:93:F3:12:FF:B6:1D:54:A2
X509v3 Authority Key Identifier:
keyid:50:4C:07:63:ED:CB:A3:1E:B8:9F:09:83:DD:D8:DD:18:89:18:C2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEwHY-3Lox64nwmD3djdGIkYwu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e19a3f-05ac-4dca-a895-8662c71186c6/1/UEwHY-3Lox64nwmD3djdGIkYwu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e19a3f-05ac-4dca-a895-8662c71186c6/1/UEwHY-3Lox64nwmD3djdGIkYwu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:16:9a:e8:54:01:2c:e3:a2:dc:e7:ea:51:c6:dd:22:53:f9:
17:5b:fe:5f:c6:dc:5a:4a:e8:e8:ca:99:b0:c1:45:5b:0a:48:
6d:56:e6:6a:bb:81:2e:4a:e3:ec:bb:37:8e:2c:eb:ad:2b:92:
ee:6e:f0:5a:45:78:3d:27:21:5b:a5:7b:15:0b:96:eb:60:a9:
25:28:58:fe:c0:c6:c5:1b:e9:2c:ce:43:3d:89:a7:cb:ef:e4:
96:0a:fc:67:7d:70:cd:22:e7:5c:a7:af:0b:9f:f6:53:69:78:
97:ee:3a:21:ba:ef:bc:1b:35:fe:b0:a3:91:06:48:ca:00:df:
4b:94:38:b1:79:3d:3a:5a:ed:72:92:6d:b2:49:79:87:d6:d0:
e8:0d:99:c7:65:90:9f:8e:4b:12:48:c1:4d:68:f4:85:b9:35:
91:b2:95:fa:e8:14:41:f4:2b:f1:eb:28:d2:69:fc:ee:93:12:
44:0a:f2:56:27:32:58:db:90:d3:f1:23:5e:ae:09:d7:8b:07:
1c:14:c4:a1:11:2e:43:23:d9:27:fe:e5:15:7d:25:96:82:3d:
93:3e:10:4d:b7:df:38:9b:28:a4:2e:45:0e:9d:4d:d6:6f:a4:
42:a4:6c:fa:66:2d:be:03:42:f7:23:51:33:83:da:ce:9c:d2:
77:5d:1b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:38:01 2025 by rpki-client