Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
File: UzYFdCt-Ei_Psq66n7ENb8pI544.mft (raw, json)
Hash identifier: MOetMLKS4WZIzrffOA9phJ1NZIqp8Dr75qz0NwrhzgM=
Subject key identifier: D7:33:20:2D:02:27:04:57:62:C4:1A:A6:FD:EC:D1:B0:96:17:A1:99
Authority key identifier: 53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E
Certificate issuer: /CN=533605742b7e122fcfb2aeba9fb10d6fca48e78e
Certificate serial: 019685EDD93FD544489FA09670ED2B722BBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
Manifest number: 14A8
Signing time: Wed 30 Apr 2025 09:01:19 +0000
Manifest this update: Wed 30 Apr 2025 09:01:19 +0000
Manifest next update: Thu 01 May 2025 09:01:19 +0000
Files and hashes: 1: UzYFdCt-Ei_Psq66n7ENb8pI544.crl (hash: RbvOa/9hoEBKPNFSDTdLyGMiUr662Ek/8CHmrgC7b9M=)
2: o24RSXriLAReI_2fGCloRnrM-3M.roa (hash: hKV7bSg08DCB1C/5s0Z0dvwE++jg27oT2PwK4UhEZVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:ed:d9:3f:d5:44:48:9f:a0:96:70:ed:2b:72:2b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533605742b7e122fcfb2aeba9fb10d6fca48e78e
Validity
Not Before: Apr 30 09:01:19 2025 GMT
Not After : May 1 09:01:19 2025 GMT
Subject: CN=d733202d0227045762c41aa6fdecd1b09617a199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:85:d9:74:01:19:11:44:7f:4e:4f:2c:36:32:
73:df:ee:d4:c6:e9:6c:f2:85:97:b7:26:43:e5:70:
52:6b:13:42:4b:22:4b:f9:17:57:43:d5:ce:53:b6:
30:65:08:b9:5a:44:9e:8c:d1:93:bf:47:12:77:d6:
9a:d1:f8:46:88:2f:1e:65:4b:6c:28:de:67:05:cf:
5d:3f:f5:c9:fa:54:a0:3e:d9:e3:ee:92:4d:54:c7:
1a:3f:c5:53:9b:2a:ce:07:da:89:b0:99:6b:49:a6:
01:46:5d:cc:76:78:1d:c0:d0:fe:2a:d8:3f:b4:9d:
6c:64:43:f4:d5:d2:a4:d4:6e:71:0e:b4:78:1d:84:
6b:35:94:44:b2:ec:36:c5:09:0c:92:c3:7d:15:40:
7b:7c:49:39:d9:22:e4:92:be:42:f5:f0:d9:fc:3c:
5f:a5:2d:ef:64:26:35:65:3b:45:c6:c1:a9:95:c5:
49:d4:8a:c0:6b:6c:8c:a5:90:59:c4:b0:b6:d3:33:
b5:07:cf:99:8f:4a:06:c1:b0:27:48:c7:9e:f5:84:
be:3a:9d:7d:fd:a1:8b:69:2f:50:8a:58:cb:dd:e1:
5d:b7:6e:29:c4:d3:1f:51:5a:61:53:b0:86:0e:22:
b3:79:b0:5e:13:3d:af:5d:5e:4f:b1:68:d0:9f:b5:
bc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:33:20:2D:02:27:04:57:62:C4:1A:A6:FD:EC:D1:B0:96:17:A1:99
X509v3 Authority Key Identifier:
keyid:53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:36:d5:5f:36:18:15:c4:1b:ba:44:f6:50:cd:98:6f:59:a4:
b2:70:78:42:50:2e:77:39:83:1c:29:d0:d2:bb:fa:55:71:82:
37:8f:78:26:6f:98:22:4d:bb:0c:81:96:46:9e:fd:26:6a:bd:
1d:69:95:84:00:92:a8:51:ee:0d:65:61:a5:7f:79:e6:a2:ee:
33:20:7c:eb:fa:2d:95:31:86:02:43:78:ae:69:4b:f4:9b:16:
6d:e7:00:2e:97:ba:94:72:dc:ae:b0:8b:6d:3e:54:73:6b:50:
3f:96:3a:58:02:1b:83:59:1c:3a:ff:c8:98:ca:1e:8f:98:7a:
76:da:ce:9c:00:17:08:42:84:bb:10:b1:9f:41:b8:37:1e:c4:
a4:fe:88:73:f2:c7:81:68:56:3e:b5:2d:df:1a:83:14:72:36:
72:de:e0:45:1b:e6:0f:d4:2b:e2:79:26:11:7a:ec:90:b3:a4:
00:1a:a0:2b:e1:18:d0:9e:66:3b:eb:0d:80:da:01:cf:21:5e:
88:40:40:e9:d9:69:e6:1b:e4:b6:18:bf:04:d5:8d:ae:6e:25:
5a:56:f2:2c:b9:99:07:d1:a7:d3:50:4a:4a:4b:82:9c:9f:0a:
2f:79:11:5e:ea:82:fc:6b:18:c6:8d:46:b0:77:c3:e4:64:26:
51:03:29:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaF7dk/1URIn6CWcO0rciu6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMzYwNTc0MmI3ZTEyMmZjZmIyYWViYTlmYjEwZDZmY2E0
OGU3OGUwHhcNMjUwNDMwMDkwMTE5WhcNMjUwNTAxMDkwMTE5WjAzMTEwLwYDVQQD
EyhkNzMzMjAyZDAyMjcwNDU3NjJjNDFhYTZmZGVjZDFiMDk2MTdhMTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoXZdAEZEUR/Tk8sNjJz3+7Uxuls
8oWXtyZD5XBSaxNCSyJL+RdXQ9XOU7YwZQi5WkSejNGTv0cSd9aa0fhGiC8eZUts
KN5nBc9dP/XJ+lSgPtnj7pJNVMcaP8VTmyrOB9qJsJlrSaYBRl3MdngdwND+Ktg/
tJ1sZEP01dKk1G5xDrR4HYRrNZREsuw2xQkMksN9FUB7fEk52SLkkr5C9fDZ/Dxf
pS3vZCY1ZTtFxsGplcVJ1IrAa2yMpZBZxLC20zO1B8+Zj0oGwbAnSMee9YS+Op19
/aGLaS9QiljL3eFdt24pxNMfUVphU7CGDiKzebBeEz2vXV5PsWjQn7W88QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNczIC0CJwRXYsQapv3s0bCWF6GZMB8GA1UdIwQY
MBaAFFM2BXQrfhIvz7Kuup+xDW/KSOeOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXpZRmRDdC1FaV9Qc3E2Nm43RU5iOHBJNTQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9mMmM4YTUtM2I0My00YmFhLThhMGUt
NGZmOTBkMzc4NjQyLzEvVXpZRmRDdC1FaV9Qc3E2Nm43RU5iOHBJNTQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9mMmM4YTUtM2I0My00YmFhLThhMGUtNGZmOTBkMzc4NjQy
LzEvVXpZRmRDdC1FaV9Qc3E2Nm43RU5iOHBJNTQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASTbVXzYY
FcQbukT2UM2Yb1mksnB4QlAudzmDHCnQ0rv6VXGCN494Jm+YIk27DIGWRp79Jmq9
HWmVhACSqFHuDWVhpX955qLuMyB86/otlTGGAkN4rmlL9JsWbecALpe6lHLcrrCL
bT5Uc2tQP5Y6WAIbg1kcOv/ImMoej5h6dtrOnAAXCEKEuxCxn0G4Nx7EpP6Ic/LH
gWhWPrUt3xqDFHI2ct7gRRvmD9Qr4nkmEXrskLOkABqgK+EY0J5mO+sNgNoBzyFe
iEBA6dlp5hvkthi/BNWNrm4lWlbyLLmZB9Gn01BKSkuCnJ8KL3kRXuqC/GsYxo1G
sHfD5GQmUQMp0Q==
-----END CERTIFICATE-----
Generated at Wed Apr 30 15:56:31 2025 by rpki-client