Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
File: ulnZ9a887kQgFLc1lhxzuWkmDhk.mft (raw, json)
Hash identifier: ZSMDFYEDFcryX6r+b3DWSDG8sID14w+rPvdx8W53Rak=
Subject key identifier: BB:D1:95:89:0F:DA:E5:D2:2A:0D:AD:53:46:7A:2F:A4:B3:79:A0:AF
Authority key identifier: BA:59:D9:F5:AF:3C:EE:44:20:14:B7:35:96:1C:73:B9:69:26:0E:19
Certificate issuer: /CN=ba59d9f5af3cee442014b735961c73b969260e19
Certificate serial: 019681A327759C71AC6AC48C206B5F4A7956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
Manifest number: 1510
Signing time: Tue 29 Apr 2025 13:01:15 +0000
Manifest this update: Tue 29 Apr 2025 13:01:15 +0000
Manifest next update: Wed 30 Apr 2025 13:01:15 +0000
Files and hashes: 1: ulnZ9a887kQgFLc1lhxzuWkmDhk.crl (hash: VyrFHoKxOHzJD59oN2is5Q7EBydynFsbOPEBW28rhE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a3:27:75:9c:71:ac:6a:c4:8c:20:6b:5f:4a:79:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba59d9f5af3cee442014b735961c73b969260e19
Validity
Not Before: Apr 29 13:01:15 2025 GMT
Not After : Apr 30 13:01:15 2025 GMT
Subject: CN=bbd195890fdae5d22a0dad53467a2fa4b379a0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a0:58:2c:13:f0:33:fc:2a:9f:b7:34:ca:3c:
ee:7e:f5:24:87:ff:c2:cf:f7:ea:25:8e:48:21:43:
ed:f6:7a:6a:cc:9d:8c:9e:b5:6f:07:f2:9d:7e:f2:
fc:10:9d:03:ff:85:03:a4:96:bc:5e:2c:21:3c:99:
c5:b3:13:60:16:f1:3b:3d:1a:1a:c1:8e:f1:3d:10:
1e:0d:01:7f:59:cf:7d:29:5f:a5:a4:76:eb:6b:13:
1a:15:26:3f:43:4a:88:19:09:de:48:01:44:89:a0:
9e:36:2f:5d:a1:bd:be:76:f7:23:ec:38:0b:26:04:
1a:88:05:04:d2:30:98:68:53:ce:44:94:6f:61:4c:
78:8f:37:13:93:88:f5:a2:1f:12:7d:ea:4f:54:cc:
33:8a:ee:be:40:a4:a1:82:60:92:bc:bd:9c:0f:f6:
93:0d:c9:cf:6a:66:ee:9c:16:a6:ef:1a:7a:3b:a8:
61:8a:c7:c8:7c:0d:04:e2:3d:a0:cc:47:92:23:0e:
ed:ab:d5:21:89:be:0c:e0:28:18:46:03:67:49:87:
7d:8a:52:d4:b0:b6:39:88:10:0b:e1:d2:ef:04:03:
a8:23:c6:ba:bd:6f:18:2d:b1:2a:d0:42:73:6e:93:
b8:52:e4:3f:a8:90:10:c2:d7:c2:f7:72:d5:52:10:
8c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D1:95:89:0F:DA:E5:D2:2A:0D:AD:53:46:7A:2F:A4:B3:79:A0:AF
X509v3 Authority Key Identifier:
keyid:BA:59:D9:F5:AF:3C:EE:44:20:14:B7:35:96:1C:73:B9:69:26:0E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f7:6d:1b:fb:41:88:fd:23:00:e1:dd:69:09:90:14:a2:5e:
ac:f7:a0:59:26:d0:09:fd:47:f5:25:14:61:bb:06:05:a3:47:
4e:11:b8:4e:40:49:16:ce:84:88:8f:cc:b5:c0:c7:e3:b1:b0:
bb:eb:87:5f:5d:26:0e:37:7a:7f:0d:3d:31:ad:3c:fc:33:ea:
89:41:2c:bb:e8:d2:ec:4c:78:41:7c:96:a6:44:8f:ab:4e:87:
17:ad:d1:6e:30:20:30:4c:bf:66:88:20:97:d0:4c:81:4f:d1:
fd:ff:0e:4d:ed:a3:34:c3:aa:e6:a1:df:dd:5d:3b:1a:2a:c4:
ee:5f:4e:c8:74:95:8e:aa:64:0f:6a:6d:3b:cd:97:97:b4:d1:
b0:3b:69:c7:da:51:bb:7e:19:13:31:22:30:de:c8:29:d6:3c:
b7:e0:0e:bd:65:c5:33:76:14:31:46:24:15:8a:fa:14:9e:1a:
a0:26:d5:6a:48:80:fa:03:2c:1a:66:2e:ee:06:81:40:a2:da:
2c:83:e1:d3:ab:55:fe:fc:c8:b0:47:ac:36:ea:c0:80:10:c0:
76:ce:ef:e0:33:28:59:a4:83:11:9a:1c:79:1e:e9:f3:c9:a4:
6d:56:2c:64:3e:ee:52:2a:10:49:7d:f4:a8:c8:98:3d:ec:77:
c0:f4:20:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:14:16 2025 by rpki-client