Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
File: ulnZ9a887kQgFLc1lhxzuWkmDhk.mft (raw, json)
Hash identifier: TrYP2+3yby4yANd9pOh0fXma9cyyMS8aRPw1xKmC8wE=
Subject key identifier: 7B:05:49:53:DE:9A:AA:9A:73:48:85:D6:79:BD:95:44:84:0A:F3:38
Authority key identifier: BA:59:D9:F5:AF:3C:EE:44:20:14:B7:35:96:1C:73:B9:69:26:0E:19
Certificate issuer: /CN=ba59d9f5af3cee442014b735961c73b969260e19
Certificate serial: 01976D3E0EABCF20308BA7712A45CC745230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
Manifest number: 158A
Signing time: Sat 14 Jun 2025 07:01:12 +0000
Manifest this update: Sat 14 Jun 2025 07:01:12 +0000
Manifest next update: Sun 15 Jun 2025 07:01:12 +0000
Files and hashes: 1: ulnZ9a887kQgFLc1lhxzuWkmDhk.crl (hash: 5T3yzy/vEqC8hrRSqKi5otMUEQY/rrxIrBrEWg8tTi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:0e:ab:cf:20:30:8b:a7:71:2a:45:cc:74:52:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba59d9f5af3cee442014b735961c73b969260e19
Validity
Not Before: Jun 14 07:01:12 2025 GMT
Not After : Jun 15 07:01:12 2025 GMT
Subject: CN=7b054953de9aaa9a734885d679bd9544840af338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b0:5f:d8:aa:5c:e9:30:31:13:20:22:74:35:
00:fb:bc:0b:3d:35:a4:b1:3d:78:d4:af:6f:aa:f9:
aa:1e:eb:32:c0:cd:aa:64:c4:37:ff:55:fd:66:e7:
9e:b1:e2:3f:bc:6e:1c:ef:c3:1a:29:9f:20:82:af:
3a:cc:08:63:a2:af:40:42:da:16:ef:5f:6d:2c:3f:
59:1b:5a:21:9a:3c:8c:1f:81:87:2c:a5:0a:80:e1:
a1:e9:5a:dd:0f:80:ff:a2:b7:eb:61:55:fb:1e:8b:
16:23:3e:fa:8e:74:41:33:6b:68:d7:18:5c:23:13:
0d:7e:16:b9:e8:7e:63:33:a1:b7:7e:5e:e2:0d:7f:
86:fc:0f:dc:55:11:5b:0a:85:e3:ee:86:57:d4:cb:
01:2b:a0:51:22:47:16:01:c6:04:4e:bb:e9:06:24:
4b:a0:37:20:ad:17:2d:9b:32:b4:e2:b6:76:0c:fd:
0d:bb:f5:8c:7f:38:29:02:11:b8:7d:95:50:4a:73:
55:03:43:77:38:65:f2:c6:4d:fd:7d:d2:79:eb:9a:
f2:ac:f4:ac:51:82:a8:17:35:60:d7:f9:d0:ff:84:
48:98:ae:24:7b:90:ca:6e:09:67:cd:e2:97:f5:41:
b2:04:07:97:e0:44:83:68:fe:ec:fe:b7:7e:dd:b6:
fa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:05:49:53:DE:9A:AA:9A:73:48:85:D6:79:BD:95:44:84:0A:F3:38
X509v3 Authority Key Identifier:
keyid:BA:59:D9:F5:AF:3C:EE:44:20:14:B7:35:96:1C:73:B9:69:26:0E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:55:74:12:43:05:33:d0:f7:a3:b6:20:ed:f0:46:c8:0f:5d:
ba:0b:9a:7d:52:53:37:b7:cd:4b:5f:f9:6d:f0:0d:69:a6:83:
8e:94:5d:d1:29:3a:87:12:47:00:5a:b9:7e:9d:df:a5:fc:7d:
c0:6e:41:8b:83:5c:8d:54:d9:ec:73:0e:94:c9:f1:0b:12:35:
d6:c4:27:97:19:91:27:5c:c6:bc:6e:98:82:ea:e3:d4:f6:03:
2a:29:44:0f:7b:f9:3f:91:5f:96:34:48:f3:de:f2:9b:31:cb:
48:36:fd:58:7e:c9:1b:eb:f1:ba:c9:1e:58:43:e8:43:fc:85:
59:e5:1b:ae:93:a6:16:17:55:aa:c5:a5:3c:c0:a4:ee:05:e1:
4a:ec:e6:72:d1:89:04:02:e7:d9:f8:3b:6a:e1:f1:57:66:36:
fc:a6:4c:30:0e:14:2e:3d:d9:e9:d8:b4:11:ac:d9:fc:f7:5a:
e1:61:6b:c8:12:9d:42:a5:fd:d3:ea:8f:fb:ff:fe:2b:e9:ef:
1f:39:dd:ba:68:cf:ef:65:25:ce:6d:d3:dd:57:30:96:43:b9:
9e:4b:a9:4a:81:53:2a:ac:1b:fb:79:42:a4:44:c1:f1:1d:1d:
0b:cd:52:94:ce:ca:77:8f:5a:db:86:a9:4c:7c:22:b7:32:43:
e8:12:f7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:23:43 2025 by rpki-client