Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/06476b-3cb1-455f-bcd3-d1db9647179a/1/UlvgKcsyyovigKZJcDcY09iLtHU.mft
File: UlvgKcsyyovigKZJcDcY09iLtHU.mft (raw, json)
Hash identifier: IrwGtgUDi9Dz+1kHSUymyfPnMyeetaJPybv6YtRMXiI=
Subject key identifier: 4C:7E:B8:93:29:E9:A2:4A:C4:5C:10:D7:F0:32:2D:72:5F:DC:43:6C
Authority key identifier: 52:5B:E0:29:CB:32:CA:8B:E2:80:A6:49:70:37:18:D3:D8:8B:B4:75
Certificate issuer: /CN=525be029cb32ca8be280a649703718d3d88bb475
Certificate serial: 0197703EDF5531CE1FB66A3EFDF879C33179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlvgKcsyyovigKZJcDcY09iLtHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/06476b-3cb1-455f-bcd3-d1db9647179a/1/UlvgKcsyyovigKZJcDcY09iLtHU.mft
Manifest number: 0512
Signing time: Sat 14 Jun 2025 21:00:58 +0000
Manifest this update: Sat 14 Jun 2025 21:00:58 +0000
Manifest next update: Sun 15 Jun 2025 21:00:58 +0000
Files and hashes: 1: UlvgKcsyyovigKZJcDcY09iLtHU.crl (hash: Jo5httHslQMrSMa3RMK+eLHX3TavN/Wg9z4biVkoaSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/06476b-3cb1-455f-bcd3-d1db9647179a/1/UlvgKcsyyovigKZJcDcY09iLtHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/06476b-3cb1-455f-bcd3-d1db9647179a/1/UlvgKcsyyovigKZJcDcY09iLtHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UlvgKcsyyovigKZJcDcY09iLtHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:3e:df:55:31:ce:1f:b6:6a:3e:fd:f8:79:c3:31:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525be029cb32ca8be280a649703718d3d88bb475
Validity
Not Before: Jun 14 21:00:58 2025 GMT
Not After : Jun 15 21:00:58 2025 GMT
Subject: CN=4c7eb89329e9a24ac45c10d7f0322d725fdc436c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e3:02:4a:00:74:c1:c3:b9:80:1b:ef:a4:db:
28:93:b4:7c:66:fd:22:1b:78:56:db:23:be:13:b4:
e8:6a:2f:c8:ba:8b:e6:bf:21:d4:72:cb:be:bd:ed:
09:04:08:66:c7:c2:81:64:f9:5e:9f:08:bc:ef:80:
02:07:52:79:af:d6:af:e8:4b:be:82:31:46:88:7e:
3a:e0:61:62:ca:c7:0c:42:40:e0:67:4b:03:23:47:
19:ba:ef:3a:67:a8:b4:1a:68:a1:74:69:0c:6e:6a:
0d:35:33:f4:0c:07:7c:5a:b1:3f:1c:4e:20:51:7b:
bf:bd:c7:db:7f:92:b9:62:6e:d6:87:75:92:ae:3c:
fd:50:95:55:90:86:dd:23:04:06:71:f2:8b:b1:3a:
2e:b1:b6:17:22:e8:a2:96:2d:76:91:bc:77:f2:63:
cc:94:c1:29:e4:8c:c2:62:cd:95:d5:6c:78:31:af:
de:36:c6:2a:40:45:cf:8b:8e:95:95:72:f6:14:dd:
ab:44:be:30:f8:a4:72:ac:c8:86:9c:7c:b3:f3:0e:
09:c8:b9:06:0d:63:37:6d:8e:4e:35:6b:a1:25:72:
2e:c9:46:40:ae:56:f6:28:e8:e8:be:bc:0e:84:ec:
fc:e9:a3:12:f9:f5:39:5c:dd:84:e6:b7:60:39:f4:
39:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7E:B8:93:29:E9:A2:4A:C4:5C:10:D7:F0:32:2D:72:5F:DC:43:6C
X509v3 Authority Key Identifier:
keyid:52:5B:E0:29:CB:32:CA:8B:E2:80:A6:49:70:37:18:D3:D8:8B:B4:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlvgKcsyyovigKZJcDcY09iLtHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/06476b-3cb1-455f-bcd3-d1db9647179a/1/UlvgKcsyyovigKZJcDcY09iLtHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/06476b-3cb1-455f-bcd3-d1db9647179a/1/UlvgKcsyyovigKZJcDcY09iLtHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:cc:79:16:d5:f1:4f:69:c1:77:c6:04:b3:f0:c8:f5:99:21:
e9:ec:ff:89:8b:5d:69:03:e5:f9:17:1d:7e:3c:89:d2:b5:8b:
b4:b9:4b:c9:12:bb:f4:13:4d:51:02:a9:44:57:2a:97:2a:04:
d6:27:a8:bc:a3:d3:e6:09:ce:9c:c0:5a:41:c2:14:ad:dd:de:
3a:39:72:0c:a1:dc:1b:0e:a2:84:7b:b1:0b:2f:4e:ee:21:f2:
b4:49:33:c4:46:94:77:f0:d4:13:d8:29:82:cc:18:85:7b:dd:
aa:46:9b:31:6b:2c:15:f2:bd:b4:cd:00:7d:4f:13:ed:db:7d:
fb:88:55:a1:5f:d5:f3:e3:25:d6:9d:a7:43:fa:97:d0:f6:6f:
9c:b7:e3:27:65:17:32:dd:b0:cd:3c:a4:0c:33:25:a9:d3:55:
ae:17:e9:c3:d7:73:19:17:7b:8c:05:85:2c:c2:0d:22:11:f0:
ac:b2:bd:8b:0b:62:60:c8:d8:fe:64:76:80:c8:8b:17:6e:db:
6b:f7:83:e5:26:d7:32:ba:5f:02:2a:e9:a5:1b:b8:9d:06:28:
b8:9a:71:f4:21:d5:48:ed:81:49:68:db:4c:dd:13:dc:a0:3a:
d7:af:67:4a:99:20:bc:0a:cf:fa:3e:46:7d:ad:80:44:6e:b6:
e2:d5:62:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:31:56 2025 by rpki-client