Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft
File: ujWrXugfdPzKSgwT6XLsHP6WeTs.mft (raw, json)
Hash identifier: 6KYO7K/r1J0WiPu5vGk+qDpz8rq479UeHS6UaQp2s40=
Subject key identifier: 3B:31:F3:B5:B7:CB:3E:9E:2D:A7:52:92:16:1F:99:A9:96:5B:42:03
Authority key identifier: BA:35:AB:5E:E8:1F:74:FC:CA:4A:0C:13:E9:72:EC:1C:FE:96:79:3B
Certificate issuer: /CN=ba35ab5ee81f74fcca4a0c13e972ec1cfe96793b
Certificate serial: 01976D3E55F2C4E06A6CF580CD8A5F07AD82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujWrXugfdPzKSgwT6XLsHP6WeTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft
Manifest number: 0866
Signing time: Sat 14 Jun 2025 07:01:31 +0000
Manifest this update: Sat 14 Jun 2025 07:01:31 +0000
Manifest next update: Sun 15 Jun 2025 07:01:31 +0000
Files and hashes: 1: ujWrXugfdPzKSgwT6XLsHP6WeTs.crl (hash: fuFTt/DGYjRbiFFQJAkyuFA4g/kx0RaRSVHZjRuEYeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ujWrXugfdPzKSgwT6XLsHP6WeTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:55:f2:c4:e0:6a:6c:f5:80:cd:8a:5f:07:ad:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba35ab5ee81f74fcca4a0c13e972ec1cfe96793b
Validity
Not Before: Jun 14 07:01:31 2025 GMT
Not After : Jun 15 07:01:31 2025 GMT
Subject: CN=3b31f3b5b7cb3e9e2da75292161f99a9965b4203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f5:23:40:8c:36:cd:5e:8d:86:bd:f9:c5:4c:
cb:ef:83:76:b2:94:cf:cf:52:5e:52:2a:36:de:cd:
03:73:d6:1a:85:c4:58:27:4b:88:e8:38:44:ba:9d:
b5:f3:c3:06:35:11:e7:a2:ec:2c:d0:90:69:1d:56:
81:16:19:bd:a3:c6:9b:93:57:b5:6a:19:f8:80:90:
66:12:09:70:08:c6:38:f4:48:22:8b:25:4b:54:d4:
5b:03:4a:b3:60:f6:47:9d:75:e1:ca:7f:7f:94:22:
80:9d:1f:84:60:fd:e1:8a:2d:f1:5f:e3:5a:df:90:
c0:21:2b:6d:08:39:37:a2:01:d5:9d:fd:9b:3c:9a:
ba:15:12:06:ad:06:1e:76:a8:da:c0:33:6f:c7:f8:
3d:74:54:df:54:59:6b:4f:61:27:2d:4f:f4:75:3c:
b8:85:74:a3:72:2d:b9:44:27:6d:0a:fc:8e:94:6b:
13:7a:50:72:f4:f8:b2:bf:c6:fb:bb:98:39:e0:fe:
6e:92:16:d2:6b:c8:11:7d:23:5a:3c:9a:68:d9:77:
78:d1:4d:f3:89:44:10:4c:b8:9d:14:33:f0:be:8f:
8d:94:9c:a2:4f:e6:ca:96:8c:fb:72:59:eb:99:6b:
f3:f6:37:64:d9:cd:de:2e:7b:02:c3:b7:56:cf:0e:
76:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:31:F3:B5:B7:CB:3E:9E:2D:A7:52:92:16:1F:99:A9:96:5B:42:03
X509v3 Authority Key Identifier:
keyid:BA:35:AB:5E:E8:1F:74:FC:CA:4A:0C:13:E9:72:EC:1C:FE:96:79:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujWrXugfdPzKSgwT6XLsHP6WeTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:dc:0f:34:9a:4b:4e:c8:ab:42:dc:9f:2e:eb:9e:1f:2e:df:
39:53:52:90:b4:c5:12:67:dc:2a:18:45:19:28:d4:ca:db:f8:
9e:58:57:79:c7:0c:7d:57:b2:fc:5f:a5:21:5d:68:19:dc:e9:
8c:7d:da:69:23:6a:1e:0d:54:a8:5b:fe:bd:dc:5f:5f:1f:7c:
c4:e7:c3:87:e8:8a:31:6b:62:a4:26:1b:f4:66:d2:18:6d:66:
b5:23:f8:6b:e4:b5:e2:c9:69:a1:1c:a3:5b:1d:f6:84:64:a6:
f4:77:ee:6a:16:72:76:0a:46:46:0a:93:3f:12:50:e4:dd:7f:
f8:e1:3a:4d:76:00:ec:ca:77:f6:23:35:b2:49:f7:25:e1:c9:
03:c6:df:1a:47:c1:55:d7:7b:48:47:f5:9a:f9:46:68:d7:e2:
60:fb:d9:e1:af:85:83:dc:6f:e2:85:1b:f7:d8:d6:d0:67:2a:
b4:90:df:cd:27:4a:ea:6a:a9:8c:d9:78:9f:25:67:e0:ff:77:
26:55:37:d4:93:0b:31:f0:f8:2a:99:90:fa:06:f6:9c:7b:d2:
90:7d:99:67:0d:5b:54:05:91:3d:c1:2d:48:fa:ea:58:68:f2:
d1:78:98:5e:38:49:ae:92:d9:76:49:95:26:c1:e0:15:29:a7:
dd:f2:d5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:14:06 2025 by rpki-client