Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
File: uji5p2P2XAJ6o92th8GI2nikvZc.mft (raw, json)
Hash identifier: VRkmTir9Qel0X9zovUMFutLmik0eSO4sFLCHQF6TqI0=
Subject key identifier: 9F:AB:46:56:3F:1A:C8:D1:4F:FE:4F:FE:3D:1D:8B:58:E4:4C:78:ED
Authority key identifier: BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97
Certificate issuer: /CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97
Certificate serial: 01977942113493C3F67D6EC55843AFD83616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
Manifest number: 1592
Signing time: Mon 16 Jun 2025 15:01:02 +0000
Manifest this update: Mon 16 Jun 2025 15:01:02 +0000
Manifest next update: Tue 17 Jun 2025 15:01:02 +0000
Files and hashes: 1: uji5p2P2XAJ6o92th8GI2nikvZc.crl (hash: cn1n2/wf/FN4tEV/iC5aXkjoSksV92u3ogmB03AF+c8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:42:11:34:93:c3:f6:7d:6e:c5:58:43:af:d8:36:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97
Validity
Not Before: Jun 16 15:01:02 2025 GMT
Not After : Jun 17 15:01:02 2025 GMT
Subject: CN=9fab46563f1ac8d14ffe4ffe3d1d8b58e44c78ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2e:b0:c2:b3:12:d6:b0:c3:a5:97:14:50:ae:
75:55:be:18:f1:73:88:c5:9e:fe:f1:c0:14:aa:5e:
45:cf:de:71:94:14:42:a5:7c:bd:8a:36:21:d0:9b:
d9:44:94:b6:a3:d8:2d:1f:f8:df:23:2e:24:a7:81:
45:f7:72:42:49:f2:0f:bc:d7:98:61:2d:94:ff:f0:
b8:fb:5f:74:ff:9e:3e:34:33:12:22:3d:72:ca:67:
27:ea:07:bf:83:1c:fb:a7:54:23:e2:94:e0:da:ca:
84:ac:15:94:c9:89:e9:61:07:ab:77:5a:3b:27:9a:
83:38:fc:3f:04:7e:2e:99:aa:38:e2:03:cf:5b:2e:
2c:db:f8:11:6c:2b:3f:ea:df:23:ff:8b:ec:82:a3:
82:79:24:83:94:58:bc:3e:02:ec:8c:5b:3d:65:b3:
54:02:62:f7:81:2f:bc:9e:d5:bd:23:2a:82:1f:57:
d3:30:23:d7:44:cd:85:cb:62:72:2e:b4:15:15:2f:
fd:26:9a:47:02:25:84:2a:e3:8d:7e:5c:13:82:2d:
d6:22:64:20:31:73:f3:1a:8a:b7:74:78:6d:05:e8:
e1:fd:3f:c8:da:d8:db:aa:2f:e1:b6:ff:2b:27:4f:
6d:4c:5a:f6:66:3f:b5:4e:e0:e0:cf:d9:d3:e0:c0:
74:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AB:46:56:3F:1A:C8:D1:4F:FE:4F:FE:3D:1D:8B:58:E4:4C:78:ED
X509v3 Authority Key Identifier:
keyid:BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c9:0b:29:79:05:9b:64:e1:00:17:67:4a:12:16:7b:5a:e4:
7e:bd:b7:d9:a8:21:f3:c1:e8:6f:84:99:54:0a:4d:dd:a0:32:
a7:84:81:06:ca:bd:9a:d4:97:c6:f1:58:5c:e1:5b:ad:e8:6a:
76:76:c3:e3:24:29:d1:a2:9c:9b:ae:fd:69:3b:4d:76:c0:d4:
a8:43:0f:fc:4e:6d:6d:04:2c:ff:e9:5f:e0:b6:70:fb:4e:fe:
48:18:df:20:e7:74:2e:b1:75:ba:b2:1c:69:dd:2b:02:bb:da:
0b:16:f1:cf:cb:7e:2b:91:e0:2a:6f:23:26:19:95:9d:f7:ec:
fd:1c:58:07:0c:d0:3d:c6:1a:a9:53:6d:f5:b7:3e:e8:2b:a1:
bf:03:89:4b:19:e7:bb:79:90:df:a6:6c:8f:33:97:c6:aa:2d:
3e:7d:c7:63:b1:77:92:da:40:1e:e4:ab:24:8b:91:1d:47:b4:
3c:01:fb:ba:02:63:00:0f:aa:ec:74:c2:60:5b:dc:e6:50:67:
0f:56:cc:c9:89:d2:87:f9:19:ea:29:70:63:ce:87:84:62:be:
93:9b:ef:a3:ae:87:04:d2:00:71:69:99:ac:4f:e0:89:2a:67:
b9:b6:a5:35:a9:95:50:ff:65:cf:de:8f:ca:eb:6f:fd:15:99:
9b:51:c9:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd5QhE0k8P2fW7FWEOv2DYWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhMzhiOWE3NjNmNjVjMDI3YWEzZGRhZDg3YzE4OGRhNzhh
NGJkOTcwHhcNMjUwNjE2MTUwMTAyWhcNMjUwNjE3MTUwMTAyWjAzMTEwLwYDVQQD
Eyg5ZmFiNDY1NjNmMWFjOGQxNGZmZTRmZmUzZDFkOGI1OGU0NGM3OGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvS6wwrMS1rDDpZcUUK51Vb4Y8XOI
xZ7+8cAUql5Fz95xlBRCpXy9ijYh0JvZRJS2o9gtH/jfIy4kp4FF93JCSfIPvNeY
YS2U//C4+190/54+NDMSIj1yymcn6ge/gxz7p1Qj4pTg2sqErBWUyYnpYQerd1o7
J5qDOPw/BH4umao44gPPWy4s2/gRbCs/6t8j/4vsgqOCeSSDlFi8PgLsjFs9ZbNU
AmL3gS+8ntW9IyqCH1fTMCPXRM2Fy2JyLrQVFS/9JppHAiWEKuONflwTgi3WImQg
MXPzGoq3dHhtBejh/T/I2tjbqi/htv8rJ09tTFr2Zj+1TuDgz9nT4MB0IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+rRlY/GsjRT/5P/j0di1jkTHjtMB8GA1UdIwQY
MBaAFLo4uadj9lwCeqPdrYfBiNp4pL2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWppNXAyUDJYQUo2bzkydGg4R0kybmlrdlpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8zZDY3MmQtNDY3NS00NjcxLTgxYzEt
NjBmN2Y4N2M3N2U2LzEvdWppNXAyUDJYQUo2bzkydGg4R0kybmlrdlpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8zZDY3MmQtNDY3NS00NjcxLTgxYzEtNjBmN2Y4N2M3N2U2
LzEvdWppNXAyUDJYQUo2bzkydGg4R0kybmlrdlpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF8kLKXkF
m2ThABdnShIWe1rkfr232agh88Hob4SZVApN3aAyp4SBBsq9mtSXxvFYXOFbrehq
dnbD4yQp0aKcm679aTtNdsDUqEMP/E5tbQQs/+lf4LZw+07+SBjfIOd0LrF1urIc
ad0rArvaCxbxz8t+K5HgKm8jJhmVnffs/RxYBwzQPcYaqVNt9bc+6CuhvwOJSxnn
u3mQ36ZsjzOXxqotPn3HY7F3ktpAHuSrJIuRHUe0PAH7ugJjAA+q7HTCYFvc5lBn
D1bMyYnSh/kZ6ilwY86HhGK+k5vvo66HBNIAcWmZrE/giSpnubalNamVUP9lz96P
yutv/RWZm1HJZA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 21:32:17 2025 by rpki-client