Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.mft
File: uq9sCLyjCMHHiw7tjvMLSgRoEY4.mft (raw, json)
Hash identifier: 0jf73ZjIlqEzHuX3A2bwu/ddE7lWapgCM2sa5hTYAsg=
Subject key identifier: B7:24:57:4D:40:7B:E1:0B:C3:97:F0:36:36:28:0C:05:29:12:40:EA
Authority key identifier: BA:AF:6C:08:BC:A3:08:C1:C7:8B:0E:ED:8E:F3:0B:4A:04:68:11:8E
Certificate issuer: /CN=baaf6c08bca308c1c78b0eed8ef30b4a0468118e
Certificate serial: 01976C61FBC3747CA3B48C44D7CD8A5258B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uq9sCLyjCMHHiw7tjvMLSgRoEY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.mft
Manifest number: 0510
Signing time: Sat 14 Jun 2025 03:00:50 +0000
Manifest this update: Sat 14 Jun 2025 03:00:50 +0000
Manifest next update: Sun 15 Jun 2025 03:00:50 +0000
Files and hashes: 1: uq9sCLyjCMHHiw7tjvMLSgRoEY4.crl (hash: eOnkb5orMoplVCA7byHHiQXbs1zf3AbfrDFmVSpHrbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uq9sCLyjCMHHiw7tjvMLSgRoEY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:fb:c3:74:7c:a3:b4:8c:44:d7:cd:8a:52:58:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaf6c08bca308c1c78b0eed8ef30b4a0468118e
Validity
Not Before: Jun 14 03:00:50 2025 GMT
Not After : Jun 15 03:00:50 2025 GMT
Subject: CN=b724574d407be10bc397f03636280c05291240ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e8:a6:66:e6:30:40:c1:15:ac:ec:79:5e:8b:
58:ca:ce:aa:50:80:94:5b:78:ad:c8:fe:21:08:69:
12:5e:fe:8e:b3:30:a7:52:44:c9:e7:3e:47:c7:e4:
4e:db:7f:b6:95:86:75:2e:d5:d9:61:ff:58:f7:61:
73:d6:29:4b:3d:4a:35:1a:f6:5d:d0:7b:67:a1:68:
e2:69:00:ea:03:bf:7f:2d:23:bf:a8:43:db:c7:76:
75:03:81:e6:67:c5:e6:4c:58:23:16:98:a1:75:09:
bc:40:4a:2a:da:23:ba:75:78:fe:9d:bc:dc:9c:d1:
d3:35:67:75:95:34:97:d6:83:36:8e:32:10:54:b7:
6a:55:1e:fa:9c:2a:26:8c:b3:a9:ff:48:b9:5f:0b:
d2:39:d3:26:b3:df:56:e7:9e:07:be:30:1b:70:03:
a9:01:4e:74:65:54:42:6b:c0:c0:90:05:23:1b:bb:
1b:18:8f:5f:dc:9e:bc:de:22:dd:b6:da:ff:64:ca:
42:99:23:80:a1:0c:14:9a:22:44:ef:ce:99:54:38:
68:4f:5e:e7:33:2c:33:ca:10:ae:bf:9e:cf:e7:a8:
b9:09:a1:2f:ed:6c:be:5e:4e:30:13:10:9d:40:40:
ff:a4:b0:30:bf:06:a4:e6:11:a3:1f:09:35:17:5d:
d3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:24:57:4D:40:7B:E1:0B:C3:97:F0:36:36:28:0C:05:29:12:40:EA
X509v3 Authority Key Identifier:
keyid:BA:AF:6C:08:BC:A3:08:C1:C7:8B:0E:ED:8E:F3:0B:4A:04:68:11:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uq9sCLyjCMHHiw7tjvMLSgRoEY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:dd:e0:43:9d:9f:6d:6f:df:e4:b0:0d:30:9a:00:27:14:f7:
d7:9f:21:36:d6:c5:63:e5:11:8a:a8:fb:ba:1e:1a:53:a9:a5:
4a:eb:30:b1:82:96:51:fc:32:2f:00:55:2f:94:14:99:2c:d1:
79:e2:6f:57:7a:3f:9e:f0:dc:a7:53:ee:2a:6e:c5:43:09:1a:
11:46:5f:5f:0e:69:f8:78:37:55:91:1f:bb:8e:47:fa:bf:6a:
13:8b:68:fd:56:17:3e:b6:6b:47:f0:de:5a:4c:42:c0:e1:86:
61:de:e1:56:b9:93:06:49:5e:a7:65:8f:d0:0b:fc:cd:8f:f5:
5d:c5:a7:8e:51:03:8c:f1:08:ad:a2:5b:f7:e6:36:c4:89:c7:
86:14:45:27:65:64:29:3c:96:79:d8:62:6a:92:65:32:84:18:
f8:0b:96:46:47:07:41:fa:d0:5d:98:b1:97:3b:13:c5:ce:ae:
de:08:86:6d:dc:6e:c6:4c:e7:93:5f:0a:1b:e0:f8:64:8a:34:
39:5f:02:d1:0e:f2:5e:15:b6:26:2d:dd:da:ea:a7:7b:7c:15:
e3:72:3c:10:8e:3f:66:d2:bc:a1:d0:b9:d7:af:77:08:fc:ee:
e6:9a:e7:91:01:60:6a:e2:22:9e:4d:9e:0a:ab:1f:b4:e0:57:
95:ce:69:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsYfvDdHyjtIxE182KUli1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYWY2YzA4YmNhMzA4YzFjNzhiMGVlZDhlZjMwYjRhMDQ2
ODExOGUwHhcNMjUwNjE0MDMwMDUwWhcNMjUwNjE1MDMwMDUwWjAzMTEwLwYDVQQD
EyhiNzI0NTc0ZDQwN2JlMTBiYzM5N2YwMzYzNjI4MGMwNTI5MTI0MGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+imZuYwQMEVrOx5XotYys6qUICU
W3ityP4hCGkSXv6OszCnUkTJ5z5Hx+RO23+2lYZ1LtXZYf9Y92Fz1ilLPUo1GvZd
0HtnoWjiaQDqA79/LSO/qEPbx3Z1A4HmZ8XmTFgjFpihdQm8QEoq2iO6dXj+nbzc
nNHTNWd1lTSX1oM2jjIQVLdqVR76nComjLOp/0i5XwvSOdMms99W554HvjAbcAOp
AU50ZVRCa8DAkAUjG7sbGI9f3J683iLdttr/ZMpCmSOAoQwUmiJE786ZVDhoT17n
MywzyhCuv57P56i5CaEv7Wy+Xk4wExCdQED/pLAwvwak5hGjHwk1F13TxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLckV01Ae+ELw5fwNjYoDAUpEkDqMB8GA1UdIwQY
MBaAFLqvbAi8owjBx4sO7Y7zC0oEaBGOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXE5c0NMeWpDTUhIaXc3dGp2TUxTZ1JvRVk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80YWE1NzAtNTVmZS00Yjk0LWJjNTkt
YjQ5OTNiMjMyZTZjLzEvdXE5c0NMeWpDTUhIaXc3dGp2TUxTZ1JvRVk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS80YWE1NzAtNTVmZS00Yjk0LWJjNTktYjQ5OTNiMjMyZTZj
LzEvdXE5c0NMeWpDTUhIaXc3dGp2TUxTZ1JvRVk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYd3gQ52f
bW/f5LANMJoAJxT3158hNtbFY+URiqj7uh4aU6mlSuswsYKWUfwyLwBVL5QUmSzR
eeJvV3o/nvDcp1PuKm7FQwkaEUZfXw5p+Hg3VZEfu45H+r9qE4to/VYXPrZrR/De
WkxCwOGGYd7hVrmTBklep2WP0Av8zY/1XcWnjlEDjPEIraJb9+Y2xInHhhRFJ2Vk
KTyWedhiapJlMoQY+AuWRkcHQfrQXZixlzsTxc6u3giGbdxuxkznk18KG+D4ZIo0
OV8C0Q7yXhW2Ji3d2uqne3wV43I8EI4/ZtK8odC51693CPzu5prnkQFgauIink2e
CqsftOBXlc5pDw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:04:20 2025 by rpki-client