Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
File: i_UbRkYUeZl2V31e96gHjqgMF0M.mft (raw, json)
Hash identifier: Z1WJCbxP27aiDGp3K+fkHkZylbna3IPDIPi2IyIuiWA=
Subject key identifier: 98:CB:C8:E8:DC:C1:71:13:00:E6:DA:01:19:E2:2A:8F:DC:AC:23:10
Authority key identifier: 8B:F5:1B:46:46:14:79:99:76:57:7D:5E:F7:A8:07:8E:A8:0C:17:43
Certificate issuer: /CN=8bf51b464614799976577d5ef7a8078ea80c1743
Certificate serial: 01976BF45C9EAE6B2A3446A4969BCE699637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
Manifest number: 047B
Signing time: Sat 14 Jun 2025 01:01:05 +0000
Manifest this update: Sat 14 Jun 2025 01:01:05 +0000
Manifest next update: Sun 15 Jun 2025 01:01:05 +0000
Files and hashes: 1: i_UbRkYUeZl2V31e96gHjqgMF0M.crl (hash: qLF3liCRzd61kdht6kzJX+cqdCJZp7YM8FuhvUgtYKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:5c:9e:ae:6b:2a:34:46:a4:96:9b:ce:69:96:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bf51b464614799976577d5ef7a8078ea80c1743
Validity
Not Before: Jun 14 01:01:05 2025 GMT
Not After : Jun 15 01:01:05 2025 GMT
Subject: CN=98cbc8e8dcc1711300e6da0119e22a8fdcac2310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:53:ba:24:d6:e4:6f:1e:97:88:b5:10:a6:3f:
8b:ef:69:1b:ae:53:4f:11:16:78:36:de:06:59:8e:
21:de:12:f3:64:e8:c0:9e:88:0e:37:7c:35:6e:49:
83:62:8c:d9:fc:f1:43:c7:35:72:c0:a3:35:8b:d5:
09:ee:e7:c4:fd:33:fc:7f:6c:f1:dc:28:6e:75:87:
80:a5:56:0c:11:d1:13:8e:70:10:31:58:35:ff:85:
2f:03:c2:8f:1d:f7:05:34:0f:65:7f:42:ad:24:28:
61:98:26:ba:66:50:11:4d:8b:60:c5:39:d6:2b:4c:
6d:ba:64:fc:c3:2a:4a:69:f4:eb:48:b6:ec:81:ab:
f1:f6:4c:39:ca:d1:d6:54:80:f1:45:c0:0d:89:89:
ca:ac:aa:25:65:8c:d8:a4:89:2b:fe:dc:3b:ab:a1:
19:1b:c6:26:8a:a9:e9:13:b3:01:21:a0:cf:8a:06:
9e:a6:2b:e3:15:c1:65:37:b4:55:01:c6:20:4f:16:
db:7b:72:c7:e1:56:c5:60:62:d2:e2:42:62:82:ab:
20:63:6c:b3:6d:80:ef:ae:19:10:ac:4f:4b:c9:a8:
79:82:85:d5:07:2b:34:93:dd:a3:33:9e:80:bd:f8:
e3:46:4b:45:9e:49:b6:04:74:70:88:81:dc:cb:a6:
95:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CB:C8:E8:DC:C1:71:13:00:E6:DA:01:19:E2:2A:8F:DC:AC:23:10
X509v3 Authority Key Identifier:
keyid:8B:F5:1B:46:46:14:79:99:76:57:7D:5E:F7:A8:07:8E:A8:0C:17:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:71:a1:a2:a0:8c:d5:70:e6:cd:af:b6:1f:2e:a2:3a:9c:20:
f0:25:28:27:5e:0d:13:f6:da:24:85:e5:01:92:9e:fc:ae:a3:
5d:c4:eb:20:91:bd:e8:1e:d5:91:ed:88:26:93:f0:d0:ad:f7:
d3:da:2f:b5:73:27:46:b8:86:c8:fe:05:2c:c5:27:ea:0e:2c:
3d:62:c6:42:80:12:03:06:ae:a8:26:eb:e6:98:1e:11:28:f6:
dd:ef:8a:3b:92:4a:87:cc:ce:58:6f:97:a4:ee:39:04:ba:e8:
bf:53:a3:01:ca:e4:3b:5d:ea:be:7f:2f:22:d4:72:34:2e:46:
d6:49:10:92:d5:00:6b:9d:d2:3b:58:36:05:ea:cc:eb:aa:74:
c6:de:ec:5e:53:1b:ee:5e:10:3f:40:8d:52:1f:eb:68:a6:ae:
b2:b7:14:7b:04:fb:27:d1:51:51:b6:45:c3:72:66:30:2e:b3:
fc:4d:91:e1:78:e1:e5:51:8b:c0:e8:57:75:af:39:24:37:ce:
a9:60:79:26:14:bb:8f:56:b4:13:ff:52:46:4e:43:da:47:96:
0a:87:b3:2a:f4:cc:16:ef:f5:0b:e9:2a:90:8d:9d:a0:e0:6e:
90:db:4e:bb:a9:af:89:5b:ce:0a:fb:94:4a:4f:7e:41:c2:24:
f8:b8:b7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:25:45 2025 by rpki-client