Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
File: UzkLE8nvSvz9CBJBEeb2PcMBZao.mft (raw, json)
Hash identifier: f6WmEAAukDvzK+uWnk5E6NeZVI5LHQ2d4vjEEyurkvM=
Subject key identifier: B0:36:3A:02:E7:4E:EF:76:7A:5C:9C:88:70:E8:94:C3:10:1B:DF:75
Authority key identifier: 53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
Certificate issuer: /CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Certificate serial: 019679443F79F77504A41E862A4E833B4B46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
Manifest number: 14E3
Signing time: Sun 27 Apr 2025 22:00:37 +0000
Manifest this update: Sun 27 Apr 2025 22:00:37 +0000
Manifest next update: Mon 28 Apr 2025 22:00:37 +0000
Files and hashes: 1: FNCzHrm4Mhf_pUlLlpWPWnQnnOo.roa (hash: m1dgFfAYSERrYZAtXBbjJ6qPJN5B/vD9qgbql5DrAM0=)
2: UzkLE8nvSvz9CBJBEeb2PcMBZao.crl (hash: vuCFBfa3Cy396stqcesFHYhIZi9fNbNqAnYqROK4nvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:3f:79:f7:75:04:a4:1e:86:2a:4e:83:3b:4b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Validity
Not Before: Apr 27 22:00:37 2025 GMT
Not After : Apr 28 22:00:37 2025 GMT
Subject: CN=b0363a02e74eef767a5c9c8870e894c3101bdf75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b7:07:90:b3:dd:9d:68:00:ba:ec:66:0a:d4:
8c:09:0a:2b:53:64:d5:53:46:e2:45:63:2f:ae:30:
91:f7:cd:a8:30:f1:14:67:87:3e:38:5b:89:75:4a:
fb:5c:e8:c1:b4:22:88:76:06:e1:1c:cd:bc:f8:00:
d7:5f:02:13:45:f2:23:df:2f:b2:4d:c1:b6:3a:a0:
1e:e4:fd:96:d0:2c:2a:87:d7:99:f9:df:78:4a:ea:
15:75:07:09:10:31:aa:86:39:e3:5e:8e:d8:58:52:
a9:49:ca:c6:d2:9a:92:92:5e:1a:73:18:ec:ca:4a:
b8:40:54:4f:5a:1b:58:7c:84:02:a8:54:dd:a7:ab:
0d:14:ae:a0:99:3b:52:f6:58:ef:75:9c:14:2f:5c:
8f:6b:67:d1:e8:6e:69:6e:85:e5:2f:93:4f:f5:c5:
58:68:5b:ac:6e:67:ef:ad:5a:d7:35:54:13:27:32:
77:8a:cb:1b:95:de:18:50:35:6c:ce:21:7d:99:a5:
20:ad:89:65:e8:89:88:01:4c:d6:5d:98:28:c0:9b:
ee:b7:e3:fb:3e:10:55:a4:6c:5a:af:06:b0:1e:57:
c0:95:81:90:61:c2:98:d5:b6:0c:e2:89:5c:d7:48:
11:7c:0d:ff:c4:28:93:a8:05:1d:cb:de:28:8d:5c:
5d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:36:3A:02:E7:4E:EF:76:7A:5C:9C:88:70:E8:94:C3:10:1B:DF:75
X509v3 Authority Key Identifier:
keyid:53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:60:87:2e:fe:38:59:77:62:47:8f:00:c3:74:7f:35:7d:62:
c0:17:fd:a5:3b:47:11:d9:1d:f6:05:cd:3d:f8:ff:1e:79:6f:
9a:ab:5f:67:f2:2e:ab:8c:a7:e1:7b:5f:d3:de:1c:87:a6:e5:
5e:b6:2e:a5:d8:da:55:6f:bb:c1:d9:14:12:99:0d:66:9e:44:
62:25:1f:e3:3f:66:8f:c2:21:78:7c:0f:be:ef:7f:54:3c:31:
69:59:c7:52:4b:11:8f:0f:20:aa:f0:e0:8c:24:b0:5c:0a:d4:
a0:cd:dc:7f:b2:60:d7:61:da:a3:eb:0f:cd:c6:79:4f:e4:a7:
e2:e6:ae:73:74:10:1e:8c:12:8b:b4:c3:cd:93:da:b5:ff:90:
24:0c:d8:ed:19:76:0f:a0:aa:d2:a0:fa:79:81:51:fa:49:1e:
4e:f8:66:28:10:5f:7d:ec:16:3b:cb:9c:13:0f:c7:9b:68:8c:
a8:ab:8e:2c:08:70:41:d0:50:bd:86:4f:4d:bb:b7:54:f5:d1:
7a:f1:ed:e4:74:3f:58:89:1c:8a:60:ba:f3:8e:c2:1b:9e:da:
58:71:93:1b:70:0d:3a:c1:d0:0b:cd:f4:c6:18:83:20:4a:72:
b6:ff:a9:93:83:b1:a5:13:25:b3:3a:6a:95:e8:09:3e:c4:26:
e1:06:22:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ5RD9593UEpB6GKk6DO0tGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMzkwYjEzYzllZjRhZmNmZDA4MTI0MTExZTZmNjNkYzMw
MTY1YWEwHhcNMjUwNDI3MjIwMDM3WhcNMjUwNDI4MjIwMDM3WjAzMTEwLwYDVQQD
EyhiMDM2M2EwMmU3NGVlZjc2N2E1YzljODg3MGU4OTRjMzEwMWJkZjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurcHkLPdnWgAuuxmCtSMCQorU2TV
U0biRWMvrjCR982oMPEUZ4c+OFuJdUr7XOjBtCKIdgbhHM28+ADXXwITRfIj3y+y
TcG2OqAe5P2W0Cwqh9eZ+d94SuoVdQcJEDGqhjnjXo7YWFKpScrG0pqSkl4acxjs
ykq4QFRPWhtYfIQCqFTdp6sNFK6gmTtS9ljvdZwUL1yPa2fR6G5pboXlL5NP9cVY
aFusbmfvrVrXNVQTJzJ3issbld4YUDVsziF9maUgrYll6ImIAUzWXZgowJvut+P7
PhBVpGxarwawHlfAlYGQYcKY1bYM4olc10gRfA3/xCiTqAUdy94ojVxdUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLA2OgLnTu92elyciHDolMMQG991MB8GA1UdIwQY
MBaAFFM5CxPJ70r8/QgSQRHm9j3DAWWqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXprTEU4bnZTdno5Q0JKQkVlYjJQY01CWmFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84OWM0YWItOTg0Yi00ZjZjLWJkZDAt
MzNkN2FjMzcwOTc5LzEvVXprTEU4bnZTdno5Q0JKQkVlYjJQY01CWmFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi84OWM0YWItOTg0Yi00ZjZjLWJkZDAtMzNkN2FjMzcwOTc5
LzEvVXprTEU4bnZTdno5Q0JKQkVlYjJQY01CWmFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEmCHLv44
WXdiR48Aw3R/NX1iwBf9pTtHEdkd9gXNPfj/HnlvmqtfZ/Iuq4yn4Xtf094ch6bl
XrYupdjaVW+7wdkUEpkNZp5EYiUf4z9mj8IheHwPvu9/VDwxaVnHUksRjw8gqvDg
jCSwXArUoM3cf7Jg12Hao+sPzcZ5T+Sn4uauc3QQHowSi7TDzZPatf+QJAzY7Rl2
D6Cq0qD6eYFR+kkeTvhmKBBffewWO8ucEw/Hm2iMqKuOLAhwQdBQvYZPTbu3VPXR
evHt5HQ/WIkcimC6847CG57aWHGTG3ANOsHQC830xhiDIEpytv+pk4OxpRMlszpq
legJPsQm4QYiPg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:25:15 2025 by rpki-client