Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
File: ubjmb62BRkWYT9TqrTE7b-AFibc.mft (raw, json)
Hash identifier: V1u+777y6QUXqAQwzPHDOQVoetnSo8INnPv6qkMxh6A=
Subject key identifier: 68:E9:20:5A:D4:31:E0:C5:5B:C9:B6:3D:E0:51:ED:EA:DA:25:6A:FD
Authority key identifier: B9:B8:E6:6F:AD:81:46:45:98:4F:D4:EA:AD:31:3B:6F:E0:05:89:B7
Certificate issuer: /CN=b9b8e66fad814645984fd4eaad313b6fe00589b7
Certificate serial: 0196857FC273FD982EE86C335D190F7F12C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
Manifest number: 099B
Signing time: Wed 30 Apr 2025 07:01:04 +0000
Manifest this update: Wed 30 Apr 2025 07:01:04 +0000
Manifest next update: Thu 01 May 2025 07:01:04 +0000
Files and hashes: 1: ubjmb62BRkWYT9TqrTE7b-AFibc.crl (hash: CR3EnxLEdIJ9QO3OB7QTev7jc20tyBqbXLTz/+8lJNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:7f:c2:73:fd:98:2e:e8:6c:33:5d:19:0f:7f:12:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b8e66fad814645984fd4eaad313b6fe00589b7
Validity
Not Before: Apr 30 07:01:04 2025 GMT
Not After : May 1 07:01:04 2025 GMT
Subject: CN=68e9205ad431e0c55bc9b63de051edeada256afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a6:47:75:fa:36:01:8b:c0:ee:d4:62:60:02:
bc:f1:17:09:65:fb:97:d9:96:4c:ce:dc:63:cd:39:
87:0d:09:5d:d8:3a:37:dd:07:51:bc:73:a6:f3:ce:
f0:13:bd:3a:8f:84:27:0d:a6:23:98:1e:0a:1b:6e:
14:37:30:2c:cc:26:02:62:77:dc:32:fa:64:1b:e8:
bb:33:02:e8:a1:5c:ac:cb:07:95:ca:9f:a8:d2:a2:
ec:f7:5d:3f:cd:57:6a:93:e5:f0:e7:93:0a:38:c4:
46:e7:8f:d4:76:7a:12:ac:1d:2e:8e:b3:35:e2:8e:
7c:cd:62:f2:cc:70:a8:5e:16:7a:54:b3:74:97:22:
00:d0:34:88:89:d4:de:09:e1:84:2b:5f:b1:4c:88:
60:b7:53:e8:0a:75:72:77:08:e4:ef:9e:a0:29:a5:
f9:fa:8b:3e:3d:c5:2a:a0:f4:6e:ee:20:83:3a:9d:
60:7e:fb:5e:4c:e1:e3:8b:c3:3a:57:26:68:f7:cf:
9e:4b:8f:05:f8:7e:ac:e8:1b:78:3b:4f:f1:16:e8:
09:df:b0:57:74:4e:59:f2:6a:2e:95:42:09:44:c9:
13:b1:25:1c:fa:f8:2b:09:f9:02:7b:e2:a6:41:25:
18:b1:4e:17:44:21:1f:0d:96:b7:b4:70:3d:11:7d:
fb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E9:20:5A:D4:31:E0:C5:5B:C9:B6:3D:E0:51:ED:EA:DA:25:6A:FD
X509v3 Authority Key Identifier:
keyid:B9:B8:E6:6F:AD:81:46:45:98:4F:D4:EA:AD:31:3B:6F:E0:05:89:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d5:84:0b:cf:52:54:49:2d:53:91:f2:30:5f:28:9f:7c:4e:
75:b6:65:94:76:bb:4a:3b:a6:11:94:31:36:ca:6f:04:69:0c:
ea:4d:24:e6:52:93:6c:d5:11:87:50:e0:b4:ce:7d:27:39:b6:
76:28:47:e7:39:41:f4:0a:af:bc:c2:d9:5a:82:63:c3:a8:03:
ad:1f:79:76:b6:66:3a:b2:0c:4f:eb:77:d1:58:f8:b6:40:e5:
43:ae:71:bc:f7:ae:16:c7:df:e0:dc:f2:f9:7e:99:eb:cf:c2:
68:10:1b:d5:c7:0e:cd:c2:f5:28:34:5c:55:a2:ff:99:2e:6a:
8e:a9:aa:05:e0:59:6d:76:b4:86:b3:17:6f:71:66:6a:e9:ef:
b9:23:5f:9f:75:06:81:d6:bc:3c:bc:fb:1d:6a:6d:5d:e2:12:
39:94:28:a2:cf:c3:36:00:3e:ed:82:8d:08:f3:7e:63:17:78:
f8:c9:4a:8f:98:ff:17:63:5b:1d:b7:af:c8:63:85:07:79:73:
27:7e:66:b6:16:00:cb:f3:29:c1:06:58:c6:c5:bc:30:b1:fd:
19:d4:d5:b3:ef:5d:bb:0f:57:d5:6c:b2:e7:89:90:93:f1:c5:
fe:6e:6b:02:5e:b6:45:b9:5f:76:d3:35:d2:16:42:7f:f8:4b:
9a:6d:a9:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaFf8Jz/Zgu6GwzXRkPfxLJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YjhlNjZmYWQ4MTQ2NDU5ODRmZDRlYWFkMzEzYjZmZTAw
NTg5YjcwHhcNMjUwNDMwMDcwMTA0WhcNMjUwNTAxMDcwMTA0WjAzMTEwLwYDVQQD
Eyg2OGU5MjA1YWQ0MzFlMGM1NWJjOWI2M2RlMDUxZWRlYWRhMjU2YWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaZHdfo2AYvA7tRiYAK88RcJZfuX
2ZZMztxjzTmHDQld2Do33QdRvHOm887wE706j4QnDaYjmB4KG24UNzAszCYCYnfc
MvpkG+i7MwLooVysyweVyp+o0qLs910/zVdqk+Xw55MKOMRG54/UdnoSrB0ujrM1
4o58zWLyzHCoXhZ6VLN0lyIA0DSIidTeCeGEK1+xTIhgt1PoCnVydwjk756gKaX5
+os+PcUqoPRu7iCDOp1gfvteTOHji8M6VyZo98+eS48F+H6s6Bt4O0/xFugJ37BX
dE5Z8moulUIJRMkTsSUc+vgrCfkCe+KmQSUYsU4XRCEfDZa3tHA9EX37/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjpIFrUMeDFW8m2PeBR7eraJWr9MB8GA1UdIwQY
MBaAFLm45m+tgUZFmE/U6q0xO2/gBYm3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWJqbWI2MkJSa1dZVDlUcXJURTdiLUFGaWJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8wMjQ1ZWItY2FhMi00MDYzLWJkZWYt
MmE2MWM0ZTNlMDU3LzEvdWJqbWI2MkJSa1dZVDlUcXJURTdiLUFGaWJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8wMjQ1ZWItY2FhMi00MDYzLWJkZWYtMmE2MWM0ZTNlMDU3
LzEvdWJqbWI2MkJSa1dZVDlUcXJURTdiLUFGaWJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA9WEC89S
VEktU5HyMF8on3xOdbZllHa7SjumEZQxNspvBGkM6k0k5lKTbNURh1DgtM59Jzm2
dihH5zlB9AqvvMLZWoJjw6gDrR95drZmOrIMT+t30Vj4tkDlQ65xvPeuFsff4Nzy
+X6Z68/CaBAb1ccOzcL1KDRcVaL/mS5qjqmqBeBZbXa0hrMXb3FmaunvuSNfn3UG
gda8PLz7HWptXeISOZQoos/DNgA+7YKNCPN+Yxd4+MlKj5j/F2NbHbevyGOFB3lz
J35mthYAy/MpwQZYxsW8MLH9GdTVs+9duw9X1Wyy54mQk/HF/m5rAl62RblfdtM1
0hZCf/hLmm2psw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 09:36:14 2025 by rpki-client