Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
File: UlkVtMckB6-3lB5b4pSscTOxB7M.mft (raw, json)
Hash identifier: kXnc0+D/fCd7ZEEAytHkxXccBfjjlAV9ke7e5nPoFqI=
Subject key identifier: 88:C9:DF:CE:C7:55:C4:F9:EF:BA:FB:31:82:C1:27:A2:4F:FD:13:4F
Authority key identifier: 52:59:15:B4:C7:24:07:AF:B7:94:1E:5B:E2:94:AC:71:33:B1:07:B3
Certificate issuer: /CN=525915b4c72407afb7941e5be294ac7133b107b3
Certificate serial: 01976F62A6D8322A51F8C053A2C0F49E9CC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
Manifest number: 1281
Signing time: Sat 14 Jun 2025 17:00:25 +0000
Manifest this update: Sat 14 Jun 2025 17:00:25 +0000
Manifest next update: Sun 15 Jun 2025 17:00:25 +0000
Files and hashes: 1: UlkVtMckB6-3lB5b4pSscTOxB7M.crl (hash: jbsdrn/sItlc6r/p9ih7yfnCeY+lQXqlsKrpOtwLsfo=)
2: ci7D-gavzkR5lRu-Y8rw6gTVt8k.roa (hash: e5+WwJtdUyHAODWheWNyNbbf9/GmybmxPgwjpdHpaL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:a6:d8:32:2a:51:f8:c0:53:a2:c0:f4:9e:9c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525915b4c72407afb7941e5be294ac7133b107b3
Validity
Not Before: Jun 14 17:00:25 2025 GMT
Not After : Jun 15 17:00:25 2025 GMT
Subject: CN=88c9dfcec755c4f9efbafb3182c127a24ffd134f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4d:d2:83:d7:cc:70:2f:9a:16:d2:d7:45:30:
89:4e:f2:4a:f1:59:e8:4b:5d:b9:ba:56:0b:ac:a7:
2a:6a:65:06:9e:22:97:dc:e6:a4:b8:40:94:dd:4c:
6e:73:95:63:63:54:09:af:30:98:8b:da:d7:e1:17:
77:ff:6a:71:18:fd:4b:5d:c1:a4:3d:b9:22:ef:7d:
8b:27:35:ae:a8:55:91:4e:1b:57:96:11:c5:27:16:
17:e1:9c:0d:3e:16:9d:54:cc:f3:1a:59:dc:a0:6f:
7c:de:3a:f5:50:54:80:7c:4e:27:49:6e:50:f6:7e:
6a:07:cf:34:a7:5f:8a:4f:7e:67:2f:95:67:d3:66:
b6:5d:2b:3c:e4:94:02:80:69:88:8a:79:89:8e:18:
98:de:2b:fe:46:ae:52:83:79:c7:d6:61:23:c5:70:
1d:4f:8f:e2:e8:7b:bf:e0:3c:88:ca:4c:07:93:4f:
66:c5:4b:0f:59:19:96:4e:d8:c1:c0:57:f0:2a:75:
1c:82:31:e9:5f:ae:64:1a:f4:c4:57:7d:a8:3d:50:
4a:34:9e:55:19:6a:bf:5c:0d:68:cc:e7:01:18:5c:
47:c2:58:bd:e8:52:eb:67:ce:16:dd:d1:35:cb:67:
44:cd:89:50:31:f4:94:1a:ae:a8:dd:cf:aa:09:9a:
f5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C9:DF:CE:C7:55:C4:F9:EF:BA:FB:31:82:C1:27:A2:4F:FD:13:4F
X509v3 Authority Key Identifier:
keyid:52:59:15:B4:C7:24:07:AF:B7:94:1E:5B:E2:94:AC:71:33:B1:07:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c0:a5:af:52:53:58:82:7a:b2:e7:90:bf:be:36:f4:76:15:
2b:93:dc:b7:ab:e1:f4:8a:27:57:e5:05:d4:5e:74:31:37:79:
58:cd:90:dd:0a:94:09:98:5a:04:42:ba:84:d4:6c:22:f0:b2:
ee:6b:f6:92:38:5e:a4:2c:f1:20:e3:3d:e1:91:29:3b:4e:11:
a3:8c:9f:af:68:bf:c8:cc:e8:46:3b:d5:af:a6:71:fb:61:01:
9d:e6:8b:30:65:ff:c7:85:8e:85:37:81:24:e7:a3:c6:86:5c:
6d:d6:d6:72:7d:83:54:92:96:35:60:09:38:23:2e:a6:fc:6d:
fd:2d:60:4b:50:61:d3:e4:13:54:24:6c:21:b8:ab:8c:7b:a9:
e3:a9:4e:e9:78:46:74:95:b7:e9:65:84:a6:3a:81:0c:c4:33:
60:aa:74:6e:da:06:39:45:f5:21:fd:4b:3d:f3:23:06:44:97:
0e:ce:31:d5:c7:c9:25:73:6d:a8:08:43:b1:bd:fd:a1:b5:42:
d0:6c:0a:5a:37:db:33:25:83:71:3b:51:80:f8:58:ec:88:e2:
11:f6:c3:d5:7e:b0:64:05:bf:6a:03:8c:a0:a1:2a:09:17:f6:
14:cf:a1:c5:7c:0c:7b:94:6a:7b:87:e5:62:dd:e8:06:ea:eb:
e8:93:b1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:00:18 2025 by rpki-client