Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.mft
File: uglQnQRuXLar5boZqxurpUPTffg.mft (raw, json)
Hash identifier: JC4XTQj9PUfi2rfr5hexiDxeR7iIUXJxCCHBaH8YMUs=
Subject key identifier: 71:4B:B4:EB:31:F8:BE:8A:CA:A6:D9:83:90:0F:72:F9:33:F0:18:2D
Authority key identifier: BA:09:50:9D:04:6E:5C:B6:AB:E5:BA:19:AB:1B:AB:A5:43:D3:7D:F8
Certificate issuer: /CN=ba09509d046e5cb6abe5ba19ab1baba543d37df8
Certificate serial: 01976F2C10C13E49C0BFAC9AB3190308F2B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uglQnQRuXLar5boZqxurpUPTffg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.mft
Manifest number: 0915
Signing time: Sat 14 Jun 2025 16:00:47 +0000
Manifest this update: Sat 14 Jun 2025 16:00:47 +0000
Manifest next update: Sun 15 Jun 2025 16:00:47 +0000
Files and hashes: 1: uglQnQRuXLar5boZqxurpUPTffg.crl (hash: Co0fh5a23HirWl7MzsfXATUjSQYA2WjbAVrrlz7UAik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uglQnQRuXLar5boZqxurpUPTffg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:10:c1:3e:49:c0:bf:ac:9a:b3:19:03:08:f2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba09509d046e5cb6abe5ba19ab1baba543d37df8
Validity
Not Before: Jun 14 16:00:47 2025 GMT
Not After : Jun 15 16:00:47 2025 GMT
Subject: CN=714bb4eb31f8be8acaa6d983900f72f933f0182d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:da:f3:de:dd:ec:68:2d:aa:f0:a4:a6:d4:05:
c4:1d:9c:42:31:ab:7a:22:00:b6:ce:00:08:fb:71:
98:56:73:78:4e:de:4a:2c:46:44:61:71:46:fb:a7:
ad:ab:b3:c0:66:a6:56:d7:31:31:c7:ba:1e:e2:a5:
1c:a3:61:1f:41:24:32:a8:b7:6d:63:54:18:9f:2c:
7f:d7:19:87:e1:8c:cb:09:0e:40:92:e5:0e:d8:cd:
90:87:39:66:d3:cb:2d:26:19:9b:87:dd:ce:f9:ae:
0e:23:94:35:7e:2e:57:65:da:4a:df:aa:c6:6d:26:
de:7d:6e:85:76:b7:e3:29:f2:41:af:07:88:a6:39:
ed:e0:e5:89:be:39:6e:41:fc:d9:7f:cb:97:5e:3d:
2a:95:93:a4:53:f2:c9:2a:36:1e:b8:c3:89:50:a6:
05:8f:25:fa:fc:72:18:c6:67:e8:3c:3d:f5:82:a0:
0e:5b:fd:1b:52:57:fe:27:44:1c:81:d0:40:a2:7e:
f0:c0:9b:89:73:e3:ad:a2:dd:d2:b7:12:31:05:58:
21:a8:10:38:d6:c6:f6:fe:00:93:bd:25:97:d7:7a:
d9:70:75:dc:32:9c:03:24:a7:88:16:99:ad:40:d7:
2d:fc:b5:6a:2c:0d:36:58:93:ee:f6:c2:ac:2e:3e:
36:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4B:B4:EB:31:F8:BE:8A:CA:A6:D9:83:90:0F:72:F9:33:F0:18:2D
X509v3 Authority Key Identifier:
keyid:BA:09:50:9D:04:6E:5C:B6:AB:E5:BA:19:AB:1B:AB:A5:43:D3:7D:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uglQnQRuXLar5boZqxurpUPTffg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:39:c7:c5:cc:08:0b:88:ff:1e:3a:20:47:c6:be:6d:0b:91:
27:8d:8b:37:ca:c6:ab:0f:97:3d:52:1a:41:ee:d5:16:90:0e:
62:20:82:49:bb:d4:a4:04:1d:e3:fd:47:fb:aa:80:8b:81:7c:
a4:91:17:d6:79:32:7d:94:18:6f:47:40:3e:7d:7b:92:77:5a:
19:00:ca:1c:b3:27:f5:c4:85:e1:35:e7:6b:84:00:87:5e:d2:
99:ec:07:16:eb:cb:b4:5e:60:7d:14:5a:3a:61:5a:ce:a7:84:
63:f8:62:b8:3a:8d:fa:8c:d9:d8:2c:20:34:61:a4:b7:3c:6b:
06:7c:a6:ae:9e:ea:1d:3e:b8:e1:1c:ea:0a:f0:5d:72:88:3e:
da:fb:d6:f1:26:44:94:15:e5:2a:5e:fe:fb:5c:53:7d:ba:6c:
e0:0e:56:44:c4:f4:c7:de:f2:d4:0d:59:2d:6e:c5:90:96:0c:
c0:1b:a5:d0:d5:f3:c5:60:a4:25:16:55:19:fe:53:db:75:42:
f2:83:f5:82:b4:6a:e1:1e:62:4a:af:76:29:c2:3e:1c:0c:8c:
f9:3e:61:56:9e:02:ef:18:54:fd:78:26:ce:c1:44:ab:0e:86:
6f:de:af:b4:6c:09:e3:94:73:09:51:56:fe:fc:98:f5:b8:90:
67:4f:db:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:22:35 2025 by rpki-client