Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft
File: uW476Z3sY7ErK4J3nfz142PTIcE.mft (raw, json)
Hash identifier: 3oqmnQKS796N006HRotzdPjKHHWuIFU+ECOJiuuwMl0=
Subject key identifier: 93:66:7D:07:16:53:B3:F8:41:4F:11:0D:63:54:9F:CA:15:7C:5B:B1
Authority key identifier: B9:6E:3B:E9:9D:EC:63:B1:2B:2B:82:77:9D:FC:F5:E3:63:D3:21:C1
Certificate issuer: /CN=b96e3be99dec63b12b2b82779dfcf5e363d321c1
Certificate serial: 01967EA161A42F803E3A80C148E274BA7822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uW476Z3sY7ErK4J3nfz142PTIcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft
Manifest number: 0330
Signing time: Mon 28 Apr 2025 23:00:27 +0000
Manifest this update: Mon 28 Apr 2025 23:00:27 +0000
Manifest next update: Tue 29 Apr 2025 23:00:27 +0000
Files and hashes: 1: uW476Z3sY7ErK4J3nfz142PTIcE.crl (hash: NqXqXi5cKSDGd/r7afyncFRhZBiHnXD8gK48gmiwLHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uW476Z3sY7ErK4J3nfz142PTIcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:61:a4:2f:80:3e:3a:80:c1:48:e2:74:ba:78:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b96e3be99dec63b12b2b82779dfcf5e363d321c1
Validity
Not Before: Apr 28 23:00:27 2025 GMT
Not After : Apr 29 23:00:27 2025 GMT
Subject: CN=93667d071653b3f8414f110d63549fca157c5bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f6:99:26:04:57:12:58:dc:8d:2c:59:82:eb:
fa:c3:41:9d:87:ab:53:4b:9b:4f:b1:5d:3b:85:18:
19:67:46:8b:d3:01:5b:a4:a9:35:4f:04:39:0d:a7:
00:5f:7f:1a:90:77:16:1f:31:3d:ec:54:4a:90:01:
dd:77:df:ee:94:83:35:6c:b8:4f:58:1b:70:16:0f:
40:31:b2:e5:85:91:04:eb:58:bb:1b:b8:c2:a2:3e:
f4:75:40:7a:04:6b:48:bf:a4:df:c8:d2:64:02:c6:
4f:c4:53:82:7a:b7:c3:2f:b6:b9:ab:49:21:77:30:
15:6f:fd:a3:80:76:01:a0:f1:ba:30:47:b0:b7:6a:
31:04:4b:f5:a2:e3:0f:e7:b7:83:44:30:74:e1:60:
56:bf:c3:0b:7e:2d:f3:59:6b:06:82:6f:3a:c7:4f:
20:6a:71:66:67:d7:cb:a3:92:00:2a:2a:b7:f5:b0:
a1:65:0d:73:d5:12:7f:cb:d6:2d:7b:c7:f9:d5:e4:
49:d4:c0:4f:3d:28:69:a7:f7:1b:af:53:21:78:9b:
1e:ed:2d:9e:e2:00:0f:eb:f7:b6:19:5e:01:79:30:
7c:04:2e:e2:aa:81:bc:55:4d:fb:a7:82:92:ca:ab:
cc:b6:be:ff:15:e3:cb:a5:6b:b7:fe:85:ea:e3:ec:
e6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:66:7D:07:16:53:B3:F8:41:4F:11:0D:63:54:9F:CA:15:7C:5B:B1
X509v3 Authority Key Identifier:
keyid:B9:6E:3B:E9:9D:EC:63:B1:2B:2B:82:77:9D:FC:F5:E3:63:D3:21:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uW476Z3sY7ErK4J3nfz142PTIcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:bd:83:3d:49:af:12:91:9c:c5:c2:43:ea:0a:a4:f4:7a:3a:
db:3e:12:1c:31:0e:f9:2a:00:ef:95:46:21:b7:c2:bd:e8:8a:
81:44:2b:f7:86:96:45:d5:4d:b9:52:79:c2:57:a3:5f:75:79:
ae:c5:fa:35:a5:42:db:b4:f5:c9:91:df:5a:ac:35:5c:d8:13:
76:6b:79:c7:a8:55:0d:04:17:6d:f7:44:00:12:22:f2:4a:47:
04:0d:5e:9b:48:a8:38:c1:47:79:a1:6d:e7:da:69:db:14:01:
c7:fa:42:e0:c1:c4:b7:cd:d1:64:47:e1:ce:2c:2a:ba:e3:13:
36:2b:d8:bf:bc:c0:2d:9d:03:63:e5:03:d7:6c:2d:de:09:24:
2f:fc:4a:2d:06:d1:ce:1e:72:f4:a2:77:d9:8d:70:6d:c0:87:
0d:55:96:aa:bc:2e:b5:2a:44:05:7a:53:4c:b8:1a:9d:c1:30:
47:28:2b:60:21:d8:80:60:78:0b:9e:78:d5:99:aa:97:ad:e8:
0c:87:9d:1a:24:74:5c:ba:93:b0:0f:20:6d:6d:b9:62:21:bc:
bc:fb:41:44:7a:26:45:eb:31:3a:c7:9f:48:13:6f:c7:30:3f:
87:0c:7f:a9:20:71:c2:75:63:02:64:17:74:5c:1f:4c:fe:13:
be:9b:9c:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+oWGkL4A+OoDBSOJ0ungiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NmUzYmU5OWRlYzYzYjEyYjJiODI3NzlkZmNmNWUzNjNk
MzIxYzEwHhcNMjUwNDI4MjMwMDI3WhcNMjUwNDI5MjMwMDI3WjAzMTEwLwYDVQQD
Eyg5MzY2N2QwNzE2NTNiM2Y4NDE0ZjExMGQ2MzU0OWZjYTE1N2M1YmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4faZJgRXEljcjSxZguv6w0Gdh6tT
S5tPsV07hRgZZ0aL0wFbpKk1TwQ5DacAX38akHcWHzE97FRKkAHdd9/ulIM1bLhP
WBtwFg9AMbLlhZEE61i7G7jCoj70dUB6BGtIv6TfyNJkAsZPxFOCerfDL7a5q0kh
dzAVb/2jgHYBoPG6MEewt2oxBEv1ouMP57eDRDB04WBWv8MLfi3zWWsGgm86x08g
anFmZ9fLo5IAKiq39bChZQ1z1RJ/y9Yte8f51eRJ1MBPPShpp/cbr1MheJse7S2e
4gAP6/e2GV4BeTB8BC7iqoG8VU37p4KSyqvMtr7/FePLpWu3/oXq4+zmcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNmfQcWU7P4QU8RDWNUn8oVfFuxMB8GA1UdIwQY
MBaAFLluO+md7GOxKyuCd5389eNj0yHBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVc0NzZaM3NZN0VySzRKM25mejE0MlBUSWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8xYWFmM2YtOWQzZi00OTMzLTk5ZWUt
MjViMzYwY2Y4YTIxLzEvdVc0NzZaM3NZN0VySzRKM25mejE0MlBUSWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8xYWFmM2YtOWQzZi00OTMzLTk5ZWUtMjViMzYwY2Y4YTIx
LzEvdVc0NzZaM3NZN0VySzRKM25mejE0MlBUSWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUb2DPUmv
EpGcxcJD6gqk9Ho62z4SHDEO+SoA75VGIbfCveiKgUQr94aWRdVNuVJ5wlejX3V5
rsX6NaVC27T1yZHfWqw1XNgTdmt5x6hVDQQXbfdEABIi8kpHBA1em0ioOMFHeaFt
59pp2xQBx/pC4MHEt83RZEfhziwquuMTNivYv7zALZ0DY+UD12wt3gkkL/xKLQbR
zh5y9KJ32Y1wbcCHDVWWqrwutSpEBXpTTLgancEwRygrYCHYgGB4C5541Zmql63o
DIedGiR0XLqTsA8gbW25YiG8vPtBRHomResxOsefSBNvxzA/hwx/qSBxwnVjAmQX
dFwfTP4Tvpuchg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:43:13 2025 by rpki-client