Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
File: u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft (raw, json)
Hash identifier: eP04XLj1wsGlLLNyYZeFB4k14qlX2I2FEaDY+VyqZzM=
Subject key identifier: 68:9B:68:8E:0E:F2:F4:24:8D:D5:F8:11:84:7E:67:6B:A5:2B:08:10
Authority key identifier: BB:4B:19:38:66:8B:27:B0:52:C6:83:D1:E2:60:C0:CD:3D:56:87:5B
Certificate issuer: /CN=bb4b1938668b27b052c683d1e260c0cd3d56875b
Certificate serial: 01976997C40F903A2D4B92EE362D27355A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
Manifest number: 0314
Signing time: Fri 13 Jun 2025 14:00:43 +0000
Manifest this update: Fri 13 Jun 2025 14:00:43 +0000
Manifest next update: Sat 14 Jun 2025 14:00:43 +0000
Files and hashes: 1: u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl (hash: MCxjN1Cm2bpEppXG3LIo0/EgiGRFeR/XDft7+o5FNt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:c4:0f:90:3a:2d:4b:92:ee:36:2d:27:35:5a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4b1938668b27b052c683d1e260c0cd3d56875b
Validity
Not Before: Jun 13 14:00:43 2025 GMT
Not After : Jun 14 14:00:43 2025 GMT
Subject: CN=689b688e0ef2f4248dd5f811847e676ba52b0810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1b:5d:a1:91:f9:17:d9:5b:aa:b4:e6:81:c8:
87:9f:c5:ec:9e:13:ef:88:7d:98:61:03:ff:f1:95:
99:42:bd:95:0b:6f:f6:78:f2:30:e3:63:a1:e8:6a:
08:e2:82:df:54:ad:b5:84:18:b8:05:41:82:2e:15:
e2:a7:86:ba:9d:16:04:e0:23:bd:ce:85:08:88:19:
3f:c9:bd:0e:0c:c9:3d:5b:60:91:82:b7:a4:56:da:
bc:82:29:84:c1:e6:71:93:dc:48:5f:9d:bc:7e:45:
71:3d:f9:75:dd:e9:cb:6b:0b:d2:55:f0:7c:5b:ee:
77:7f:33:28:77:09:1e:7e:0d:6d:21:a9:eb:39:21:
dc:a0:b9:51:d4:c6:67:e5:40:f3:fd:84:9f:93:70:
2c:00:a9:d2:42:90:4d:f5:13:21:64:d1:a3:2f:bb:
94:ce:af:7e:ff:e0:99:9d:1c:4e:65:b7:e1:2b:db:
da:87:55:6e:5b:cb:d8:2f:72:2c:3d:10:52:54:d5:
75:a7:b4:9a:e3:53:c6:cb:52:3a:68:a2:fb:10:5d:
f5:ed:5e:9a:45:f9:14:fe:7c:6a:0b:2f:e4:a8:c5:
9d:5e:b8:55:a3:77:98:df:27:90:13:4d:66:0e:62:
75:17:23:c7:54:a5:99:14:4b:93:27:a2:9c:d9:ca:
40:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9B:68:8E:0E:F2:F4:24:8D:D5:F8:11:84:7E:67:6B:A5:2B:08:10
X509v3 Authority Key Identifier:
keyid:BB:4B:19:38:66:8B:27:B0:52:C6:83:D1:E2:60:C0:CD:3D:56:87:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:96:1d:56:e3:b8:cc:9b:db:76:8b:54:5b:9a:94:48:ac:b8:
3c:08:0a:16:05:72:0e:11:a8:27:07:81:1c:3d:3c:6d:af:c0:
b6:e3:23:5d:0e:5e:50:b0:fe:a1:05:fd:5c:6d:d8:a2:2c:53:
97:96:f0:32:3c:b2:93:f5:25:f3:2e:56:46:03:7e:8e:05:f7:
ce:b8:dc:e4:d2:85:77:95:7a:ed:c6:e5:42:97:b5:ac:96:d6:
d1:93:13:01:f0:55:39:de:4a:97:17:6b:93:64:ec:6f:89:42:
9b:24:29:2a:54:6a:4a:f3:2e:ea:dd:f9:41:90:60:d6:d1:bc:
8a:f5:38:f1:5a:0c:2d:42:9c:21:a7:6b:73:08:dd:83:64:68:
59:33:b1:6a:23:49:e4:4e:f3:a1:8c:1c:a6:cf:cf:97:b4:9c:
2a:cb:40:27:ce:5e:b1:b7:7e:24:95:e7:97:ab:21:60:be:e4:
cb:03:8f:81:59:28:6a:bf:2b:9e:30:7f:1e:cb:59:37:29:26:
f8:27:84:18:6d:ed:ab:67:be:d5:de:a8:42:d9:1c:28:c9:6d:
2f:f9:14:45:07:00:02:5e:bb:8b:e1:22:bf:b8:b7:fb:08:44:
31:9b:de:61:32:96:07:f1:6b:57:f9:3e:36:1f:27:50:f7:7e:
cc:bd:56:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpl8QPkDotS5LuNi0nNVpaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNGIxOTM4NjY4YjI3YjA1MmM2ODNkMWUyNjBjMGNkM2Q1
Njg3NWIwHhcNMjUwNjEzMTQwMDQzWhcNMjUwNjE0MTQwMDQzWjAzMTEwLwYDVQQD
Eyg2ODliNjg4ZTBlZjJmNDI0OGRkNWY4MTE4NDdlNjc2YmE1MmIwODEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxtdoZH5F9lbqrTmgciHn8XsnhPv
iH2YYQP/8ZWZQr2VC2/2ePIw42Oh6GoI4oLfVK21hBi4BUGCLhXip4a6nRYE4CO9
zoUIiBk/yb0ODMk9W2CRgrekVtq8gimEweZxk9xIX528fkVxPfl13enLawvSVfB8
W+53fzModwkefg1tIanrOSHcoLlR1MZn5UDz/YSfk3AsAKnSQpBN9RMhZNGjL7uU
zq9+/+CZnRxOZbfhK9vah1VuW8vYL3IsPRBSVNV1p7Sa41PGy1I6aKL7EF317V6a
RfkU/nxqCy/kqMWdXrhVo3eY3yeQE01mDmJ1FyPHVKWZFEuTJ6Kc2cpAkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGibaI4O8vQkjdX4EYR+Z2ulKwgQMB8GA1UdIwQY
MBaAFLtLGThmiyewUsaD0eJgwM09VodbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTBzWk9HYUxKN0JTeG9QUjRtREF6VDFXaDFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MDA4ZTQtZDk4NC00M2IzLWE1MWUt
YjNjNzQyNTQzZGRmLzEvdTBzWk9HYUxKN0JTeG9QUjRtREF6VDFXaDFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80MDA4ZTQtZDk4NC00M2IzLWE1MWUtYjNjNzQyNTQzZGRm
LzEvdTBzWk9HYUxKN0JTeG9QUjRtREF6VDFXaDFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZYdVuO4
zJvbdotUW5qUSKy4PAgKFgVyDhGoJweBHD08ba/AtuMjXQ5eULD+oQX9XG3YoixT
l5bwMjyyk/Ul8y5WRgN+jgX3zrjc5NKFd5V67cblQpe1rJbW0ZMTAfBVOd5Klxdr
k2Tsb4lCmyQpKlRqSvMu6t35QZBg1tG8ivU48VoMLUKcIadrcwjdg2RoWTOxaiNJ
5E7zoYwcps/Pl7ScKstAJ85esbd+JJXnl6shYL7kywOPgVkoar8rnjB/HstZNykm
+CeEGG3tq2e+1d6oQtkcKMltL/kURQcAAl67i+Eiv7i3+whEMZveYTKWB/FrV/k+
Nh8nUPd+zL1WCw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:06:02 2025 by rpki-client