Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
File: UfSwsEaesNBxmUzYI480vvAMb74.mft (raw, json)
Hash identifier: jvJ+iQBunAjoGIJMK/yyuD85TAfd6ZGT+F/90H+iA8s=
Subject key identifier: 3F:BA:8F:72:D6:1E:D0:4A:2F:CC:1B:3F:5D:7E:8A:06:54:1F:64:9D
Authority key identifier: 51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE
Certificate issuer: /CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
Certificate serial: 0197733FC4633F9A15079E85DFEAAA418F97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
Manifest number: 0506
Signing time: Sun 15 Jun 2025 11:00:48 +0000
Manifest this update: Sun 15 Jun 2025 11:00:48 +0000
Manifest next update: Mon 16 Jun 2025 11:00:48 +0000
Files and hashes: 1: UfSwsEaesNBxmUzYI480vvAMb74.crl (hash: dHufiQnguXuMcXrVnqwOSDt4yUFZcK5r+dm+ijkjzP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:3f:c4:63:3f:9a:15:07:9e:85:df:ea:aa:41:8f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
Validity
Not Before: Jun 15 11:00:48 2025 GMT
Not After : Jun 16 11:00:48 2025 GMT
Subject: CN=3fba8f72d61ed04a2fcc1b3f5d7e8a06541f649d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:de:72:80:fd:32:1b:b8:41:1d:c8:d3:a4:61:
84:9e:77:bb:9a:30:ec:5b:b1:de:de:17:73:f2:f0:
b2:98:6c:a2:5a:f2:b3:44:c5:0a:c7:fb:f3:fd:2d:
0e:a3:72:4f:1c:fd:6e:0c:08:58:6e:5d:1f:9b:51:
d3:b3:b1:56:6a:02:7f:2c:54:a2:98:3b:c4:a9:68:
89:7d:07:17:6a:d1:b7:61:bc:11:a6:1f:3b:2d:61:
ec:0a:48:79:d3:ae:c6:ed:41:0e:3d:e2:1b:bc:d2:
31:f1:ce:2d:53:fd:f6:7d:06:ea:19:bc:4a:3c:da:
af:ce:8a:b7:f6:c1:0c:5d:e5:e6:f1:1b:0e:90:33:
fb:40:e6:61:01:a1:20:65:ae:1f:03:39:a4:14:57:
11:1a:d0:22:63:8f:f2:dc:02:07:ba:82:57:c8:50:
52:7d:15:f0:84:63:16:18:ce:a5:bb:e5:20:98:bd:
7c:c1:c2:c5:84:ef:3a:73:d8:d5:aa:89:d6:7c:c6:
25:98:b8:e9:16:ce:95:98:63:62:7f:f7:59:a2:d7:
36:30:7b:4a:5d:e2:70:30:16:4f:f0:62:97:25:6a:
f9:d1:93:bd:97:a5:63:a9:c1:20:17:01:c4:b5:61:
34:77:33:0b:6e:7b:33:65:1d:4a:56:25:c2:aa:48:
71:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BA:8F:72:D6:1E:D0:4A:2F:CC:1B:3F:5D:7E:8A:06:54:1F:64:9D
X509v3 Authority Key Identifier:
keyid:51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:00:97:32:f0:e1:b7:10:d4:f7:f4:d4:bd:06:ff:1c:c8:5b:
33:11:bc:1f:4d:14:06:d4:c7:60:f5:b9:10:77:7c:b3:7e:b5:
61:bc:e9:9d:80:9f:ad:67:76:6c:37:55:76:8f:75:57:44:85:
90:52:49:56:64:d1:50:7b:10:38:14:ce:36:4e:af:76:7c:ef:
f4:b0:e8:14:7d:f2:e1:ab:eb:d6:b9:88:8e:32:6f:7b:f0:46:
28:d3:85:2f:d1:7d:bd:91:c8:76:24:0d:98:83:df:20:f6:2f:
d7:07:6c:b2:d2:a0:1f:76:77:5d:13:3d:28:bc:08:7c:bb:66:
5e:f1:ba:9b:a6:5a:3b:bc:39:9c:41:d5:91:28:b5:07:14:52:
f6:14:02:84:ed:37:60:45:38:62:49:64:f5:11:7d:0d:a0:1c:
b8:04:7e:3c:4b:82:db:13:da:39:e8:1f:af:11:3d:72:c7:a2:
cc:b6:d6:56:7b:0c:75:0e:e9:b5:f4:08:03:93:f1:21:39:ff:
4a:f4:ba:83:bb:33:06:c9:31:b8:65:37:47:0d:6f:b8:91:47:
84:37:63:62:0d:7c:30:20:2b:e7:1d:54:6c:2e:a3:31:29:a1:
29:62:5c:e5:d7:2b:34:14:40:ab:52:89:92:11:c5:ab:a6:40:
22:f2:57:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:06:46 2025 by rpki-client