Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
File: _uG-QL1MEKAseDca8xPU59o9RKE.mft (raw, json)
Hash identifier: Lez1JB9VC2Tub192hCemJXyPn9Y/1fIgfBb0Qc8SKrU=
Subject key identifier: 4E:97:A0:27:F1:72:1A:82:82:58:A5:EB:94:7C:5D:66:A5:A0:34:C0
Authority key identifier: FE:E1:BE:40:BD:4C:10:A0:2C:78:37:1A:F3:13:D4:E7:DA:3D:44:A1
Certificate issuer: /CN=fee1be40bd4c10a02c78371af313d4e7da3d44a1
Certificate serial: 0196797B4FA61EB7E45AAF96B698CD5C1F94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
Manifest number: 07DD
Signing time: Sun 27 Apr 2025 23:00:46 +0000
Manifest this update: Sun 27 Apr 2025 23:00:46 +0000
Manifest next update: Mon 28 Apr 2025 23:00:46 +0000
Files and hashes: 1: _uG-QL1MEKAseDca8xPU59o9RKE.crl (hash: kH0z7L+uwxF//LlE9sJRqWJnbSPAhBoLjaX4rDduWMA=)
2: iCr5oYGEZyOApm19IeGXneZ8Nck.roa (hash: J3nYb+wykQAlDMqhpN3eQPaOUzevZQuJ9bBWTRwBP/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:4f:a6:1e:b7:e4:5a:af:96:b6:98:cd:5c:1f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fee1be40bd4c10a02c78371af313d4e7da3d44a1
Validity
Not Before: Apr 27 23:00:46 2025 GMT
Not After : Apr 28 23:00:46 2025 GMT
Subject: CN=4e97a027f1721a828258a5eb947c5d66a5a034c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0f:e8:16:4e:f2:c6:0e:cc:ae:da:b3:64:eb:
da:92:1a:31:88:bd:c9:18:c9:31:2e:2c:4f:30:ca:
5d:ab:53:98:78:0d:57:0c:4b:3f:f7:98:69:ec:63:
87:cd:e4:3b:8e:9f:61:d8:27:30:ab:89:25:cd:aa:
8e:e8:b4:8b:5f:24:fb:15:38:71:3d:c5:eb:15:13:
9e:51:8d:be:98:30:f7:34:8f:c1:f2:d5:e2:3c:35:
c4:db:49:e5:01:78:b4:0e:ff:40:8c:44:3b:cf:28:
1b:63:b7:ac:1a:f4:5f:34:8f:2f:46:32:81:8e:53:
ca:de:fe:98:14:63:33:ed:c9:17:d5:c8:5e:d5:7f:
52:bd:13:9c:a0:11:6a:ff:f2:e9:7c:cc:cb:67:20:
2f:30:30:be:0a:97:35:d2:6e:3c:6c:cf:95:60:81:
ab:d4:0a:2e:99:d0:51:dd:50:a3:d2:f0:80:60:71:
79:17:97:1d:81:60:eb:13:e2:d3:9a:9c:cb:9f:03:
39:8a:e7:21:b3:79:86:60:0a:36:90:c7:ed:31:43:
56:09:53:a3:5c:3b:c7:f4:cc:5b:b9:e8:bb:7a:11:
5a:e7:b4:11:0c:be:ad:f5:a8:f5:ab:5f:14:62:1f:
c2:e8:22:eb:99:ef:de:f9:15:90:e0:ed:dc:97:a6:
4c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:97:A0:27:F1:72:1A:82:82:58:A5:EB:94:7C:5D:66:A5:A0:34:C0
X509v3 Authority Key Identifier:
keyid:FE:E1:BE:40:BD:4C:10:A0:2C:78:37:1A:F3:13:D4:E7:DA:3D:44:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e8:fd:fd:18:3f:77:f6:2e:61:24:97:8e:09:fd:1d:70:57:
d4:05:dd:1f:74:79:23:1d:e4:98:8a:fa:b0:55:8f:cf:a2:a0:
36:af:eb:11:7b:79:8e:4b:6a:1e:ce:bf:94:60:88:71:d0:47:
6c:ea:db:b0:2b:d7:67:6f:d5:0e:d5:c6:46:28:68:f2:38:b0:
a3:28:ae:06:ac:75:e6:e4:39:9f:bb:78:91:ce:6d:a0:dd:73:
1f:71:a4:77:8b:65:3f:fd:9a:83:a2:34:6f:22:c9:1d:61:83:
67:70:38:01:19:fa:5b:7c:c6:bf:7c:d6:6d:05:f9:10:70:ea:
12:bc:a5:46:b9:4f:67:96:ef:d3:a0:28:58:00:3e:db:3c:2b:
a4:be:2b:d5:55:3d:6f:03:b1:79:bf:65:cf:46:94:41:15:37:
59:01:d6:c0:95:15:56:d2:e5:26:c3:55:34:17:ec:7e:05:30:
12:55:5d:7e:be:5e:7e:70:d3:03:a6:77:e0:8c:f0:bb:0b:c4:
bb:68:c3:0d:d2:23:cd:7f:ba:ca:2a:ae:40:cc:48:03:13:96:
83:10:50:ae:aa:96:83:8c:c7:01:30:c8:cc:73:f4:da:3c:83:
07:ae:03:82:15:3b:39:8b:01:ea:43:7e:ed:ba:b0:0d:fa:ce:
79:d1:6c:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ5e0+mHrfkWq+WtpjNXB+UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZTFiZTQwYmQ0YzEwYTAyYzc4MzcxYWYzMTNkNGU3ZGEz
ZDQ0YTEwHhcNMjUwNDI3MjMwMDQ2WhcNMjUwNDI4MjMwMDQ2WjAzMTEwLwYDVQQD
Eyg0ZTk3YTAyN2YxNzIxYTgyODI1OGE1ZWI5NDdjNWQ2NmE1YTAzNGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw/oFk7yxg7MrtqzZOvakhoxiL3J
GMkxLixPMMpdq1OYeA1XDEs/95hp7GOHzeQ7jp9h2Ccwq4klzaqO6LSLXyT7FThx
PcXrFROeUY2+mDD3NI/B8tXiPDXE20nlAXi0Dv9AjEQ7zygbY7esGvRfNI8vRjKB
jlPK3v6YFGMz7ckX1che1X9SvROcoBFq//LpfMzLZyAvMDC+Cpc10m48bM+VYIGr
1AoumdBR3VCj0vCAYHF5F5cdgWDrE+LTmpzLnwM5iuchs3mGYAo2kMftMUNWCVOj
XDvH9Mxbuei7ehFa57QRDL6t9aj1q18UYh/C6CLrme/e+RWQ4O3cl6ZM/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6XoCfxchqCglil65R8XWaloDTAMB8GA1UdIwQY
MBaAFP7hvkC9TBCgLHg3GvMT1OfaPUShMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3VHLVFMMU1FS0FzZURjYTh4UFU1OW85UktFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yZDI1NzAtYWI5MS00YzI3LTljYjMt
NWZkNzE2ZDY3ZTRjLzEvX3VHLVFMMU1FS0FzZURjYTh4UFU1OW85UktFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8yZDI1NzAtYWI5MS00YzI3LTljYjMtNWZkNzE2ZDY3ZTRj
LzEvX3VHLVFMMU1FS0FzZURjYTh4UFU1OW85UktFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcej9/Rg/
d/YuYSSXjgn9HXBX1AXdH3R5Ix3kmIr6sFWPz6KgNq/rEXt5jktqHs6/lGCIcdBH
bOrbsCvXZ2/VDtXGRiho8jiwoyiuBqx15uQ5n7t4kc5toN1zH3Gkd4tlP/2ag6I0
byLJHWGDZ3A4ARn6W3zGv3zWbQX5EHDqErylRrlPZ5bv06AoWAA+2zwrpL4r1VU9
bwOxeb9lz0aUQRU3WQHWwJUVVtLlJsNVNBfsfgUwElVdfr5efnDTA6Z34IzwuwvE
u2jDDdIjzX+6yiquQMxIAxOWgxBQrqqWg4zHATDIzHP02jyDB64DghU7OYsB6kN+
7bqwDfrOedFsiw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:08 2025 by rpki-client