
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
File: g-ULKlHI9a25N7IqkMcg9rBPKXM.mft (raw, json)
Hash identifier: VdNGLCAAT++2J1Ki/pKj7iHxuqpuURRLmJDxdCjtN2c=
Subject key identifier: 9C:63:85:A2:4C:EF:F4:61:87:EA:14:18:54:63:7E:CA:DA:9E:02:AF
Authority key identifier: 83:E5:0B:2A:51:C8:F5:AD:B9:37:B2:2A:90:C7:20:F6:B0:4F:29:73
Certificate issuer: /CN=83e50b2a51c8f5adb937b22a90c720f6b04f2973
Certificate serial: 01968DA726E6AF4121CD4D28C1DADE7A3510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
Manifest number: 132E
Signing time: Thu 01 May 2025 21:01:03 +0000
Manifest this update: Thu 01 May 2025 21:01:03 +0000
Manifest next update: Fri 02 May 2025 21:01:03 +0000
Files and hashes: 1: g-ULKlHI9a25N7IqkMcg9rBPKXM.crl (hash: ak3a+rxq/SRYf6m4Kx2pRl5giNuylG/erffA16YbZcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:a7:26:e6:af:41:21:cd:4d:28:c1:da:de:7a:35:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e50b2a51c8f5adb937b22a90c720f6b04f2973
Validity
Not Before: May 1 21:01:03 2025 GMT
Not After : May 2 21:01:03 2025 GMT
Subject: CN=9c6385a24ceff46187ea141854637ecada9e02af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:34:91:69:67:b0:bf:50:75:48:b0:55:bb:65:
8c:bd:12:3c:f3:cb:14:52:8c:bc:e2:7f:b3:5a:13:
68:b9:40:6c:d2:36:41:90:7d:10:8e:41:5f:fa:33:
d3:32:df:36:db:91:97:f2:1a:e0:ee:36:5d:43:83:
4e:37:78:4c:cc:e9:ed:4c:3c:9f:f1:fc:e9:41:d3:
bb:57:be:b3:d0:3c:81:9b:68:eb:66:fc:01:5c:bc:
9a:05:15:ad:1e:57:01:10:ef:50:64:96:c8:7d:91:
b9:d2:2e:65:e8:0e:22:73:a7:96:b0:14:6a:73:19:
01:4c:b8:5f:17:2e:8c:07:e2:da:95:d3:b5:91:67:
0f:21:15:7c:b0:95:67:87:ea:e3:ad:a1:66:33:a9:
51:ea:c0:eb:2c:b2:88:a9:4c:e1:2e:bd:5e:96:a9:
64:11:94:76:d8:90:8c:75:2c:f4:34:04:38:05:5a:
1c:13:c6:61:50:0a:1e:56:6d:b0:cb:fe:72:13:b5:
33:f2:ad:69:4f:00:82:14:b0:d7:4b:27:44:93:b8:
a4:d9:53:96:d0:84:9b:dc:b2:16:45:82:4b:35:f8:
3b:dc:ef:e0:1c:25:1c:b3:af:02:4d:31:e1:25:64:
ae:ff:b5:9f:d7:3b:60:24:f7:76:b7:22:81:01:15:
63:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:63:85:A2:4C:EF:F4:61:87:EA:14:18:54:63:7E:CA:DA:9E:02:AF
X509v3 Authority Key Identifier:
keyid:83:E5:0B:2A:51:C8:F5:AD:B9:37:B2:2A:90:C7:20:F6:B0:4F:29:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:94:f0:54:1c:3d:b5:51:44:07:51:75:8f:eb:83:5e:80:cc:
43:e0:e3:af:13:f6:70:63:3d:e2:21:5d:a6:65:1b:d6:63:2d:
cd:4a:7b:ce:b7:25:0a:3d:fe:9e:52:14:15:43:15:0c:28:e9:
9c:82:fa:56:a9:7b:12:ac:a7:1f:cc:4d:8f:3c:c2:69:1d:a1:
83:27:f9:97:42:94:53:40:27:a7:b8:3f:cb:43:2f:2a:03:59:
4e:b3:42:01:50:8a:5a:31:b9:b8:42:f8:15:db:2d:01:7b:e2:
e1:1c:14:bf:83:23:44:cd:ea:7f:70:f6:9d:d3:09:aa:9e:ec:
91:38:70:2c:06:17:cb:e7:bf:4a:f7:cb:ab:c2:4f:f8:6d:f6:
3a:a8:39:6b:62:ca:6b:bf:3c:b9:60:7c:b5:91:8b:a5:75:c3:
85:e9:93:d7:3b:34:68:ca:f6:61:8a:89:68:d2:8e:9e:55:e4:
a7:5f:04:fb:4b:78:15:a0:db:17:28:bb:26:4c:6e:65:f6:2e:
80:d7:8a:e9:1b:f7:c5:1d:4c:df:81:db:3a:fe:cc:b7:c9:c0:
b0:c9:ee:4c:4f:4f:2b:66:4d:71:e9:6a:d3:70:2a:06:5e:ea:
32:40:6b:0e:3b:ac:c1:0f:13:31:7d:a2:98:7f:53:d6:f5:bb:
b1:0b:24:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaNpybmr0EhzU0owdreejUQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZTUwYjJhNTFjOGY1YWRiOTM3YjIyYTkwYzcyMGY2YjA0
ZjI5NzMwHhcNMjUwNTAxMjEwMTAzWhcNMjUwNTAyMjEwMTAzWjAzMTEwLwYDVQQD
Eyg5YzYzODVhMjRjZWZmNDYxODdlYTE0MTg1NDYzN2VjYWRhOWUwMmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6DSRaWewv1B1SLBVu2WMvRI888sU
Uoy84n+zWhNouUBs0jZBkH0QjkFf+jPTMt8225GX8hrg7jZdQ4NON3hMzOntTDyf
8fzpQdO7V76z0DyBm2jrZvwBXLyaBRWtHlcBEO9QZJbIfZG50i5l6A4ic6eWsBRq
cxkBTLhfFy6MB+LaldO1kWcPIRV8sJVnh+rjraFmM6lR6sDrLLKIqUzhLr1elqlk
EZR22JCMdSz0NAQ4BVocE8ZhUAoeVm2wy/5yE7Uz8q1pTwCCFLDXSydEk7ik2VOW
0ISb3LIWRYJLNfg73O/gHCUcs68CTTHhJWSu/7Wf1ztgJPd2tyKBARVjfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxjhaJM7/Rhh+oUGFRjfsrangKvMB8GA1UdIwQY
MBaAFIPlCypRyPWtuTeyKpDHIPawTylzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZy1VTEtsSEk5YTI1TjdJcWtNY2c5ckJQS1hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jMTMwMjktN2EwZC00NGIyLWEzN2Et
YjgzOWQ5MjAyMTA2LzEvZy1VTEtsSEk5YTI1TjdJcWtNY2c5ckJQS1hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9jMTMwMjktN2EwZC00NGIyLWEzN2EtYjgzOWQ5MjAyMTA2
LzEvZy1VTEtsSEk5YTI1TjdJcWtNY2c5ckJQS1hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACJTwVBw9
tVFEB1F1j+uDXoDMQ+DjrxP2cGM94iFdpmUb1mMtzUp7zrclCj3+nlIUFUMVDCjp
nIL6Vql7EqynH8xNjzzCaR2hgyf5l0KUU0Anp7g/y0MvKgNZTrNCAVCKWjG5uEL4
FdstAXvi4RwUv4MjRM3qf3D2ndMJqp7skThwLAYXy+e/SvfLq8JP+G32Oqg5a2LK
a788uWB8tZGLpXXDhemT1zs0aMr2YYqJaNKOnlXkp18E+0t4FaDbFyi7JkxuZfYu
gNeK6Rv3xR1M34HbOv7Mt8nAsMnuTE9PK2ZNcelq03AqBl7qMkBrDjuswQ8TMX2i
mH9T1vW7sQsk9A==
-----END CERTIFICATE-----
Generated at Thu May 1 23:12:03 2025 by rpki-client