Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
File: UWJgaJQlhs6VcCEDusiZ0j_PckI.mft (raw, json)
Hash identifier: LVSZhFfLZQlbtcFGwFp08Pu63t0DZ4LT767LP9mm/wc=
Subject key identifier: C4:C0:B1:7E:DB:26:10:D4:65:A9:F5:85:A5:76:E1:5E:88:C4:E0:61
Authority key identifier: 51:62:60:68:94:25:86:CE:95:70:21:03:BA:C8:99:D2:3F:CF:72:42
Certificate issuer: /CN=51626068942586ce95702103bac899d23fcf7242
Certificate serial: 019675677C8E7FF6274F372D4893F248A9B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 04:00:38 +0000
Manifest this update: Sun 27 Apr 2025 04:00:38 +0000
Manifest next update: Mon 28 Apr 2025 04:00:38 +0000
Files and hashes: 1: FAtymmkCe6OSJEcPV_Hsc91u3dE.roa (hash: aLoKF1mAozJf+kgQkDeGL4QfI5DgmXzGdTqo0LToX+c=)
2: UWJgaJQlhs6VcCEDusiZ0j_PckI.crl (hash: kt8nz7KD9eyAyK9xfJZZFB0kx0jA6vwfxSvxKsSnJEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:7c:8e:7f:f6:27:4f:37:2d:48:93:f2:48:a9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51626068942586ce95702103bac899d23fcf7242
Validity
Not Before: Apr 27 04:00:38 2025 GMT
Not After : Apr 28 04:00:38 2025 GMT
Subject: CN=c4c0b17edb2610d465a9f585a576e15e88c4e061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bb:93:07:fd:57:b1:ee:89:09:8b:84:a7:f3:
c5:80:3c:39:96:80:93:d7:fa:d1:f2:95:6a:f2:4a:
8d:5e:a1:c4:d4:cb:26:b3:dc:6c:66:c8:71:c9:b3:
97:c4:0a:1f:1b:c0:44:09:e1:a6:92:29:9a:bb:19:
44:4f:79:9f:29:da:11:60:08:81:01:e7:0a:16:4c:
cb:3a:72:2c:a4:ec:cd:bf:5b:d9:fe:a4:3c:70:01:
61:7d:71:1e:73:71:4b:1a:c8:c2:9a:a8:01:4c:02:
0d:61:48:50:64:73:49:c8:91:a7:a9:42:76:e9:99:
fd:40:02:c0:3e:3c:c1:83:e9:8b:f1:27:49:a7:14:
72:9a:df:d5:ab:45:c9:d9:f1:66:96:84:bc:34:64:
3e:ec:22:6e:5b:c1:4d:7c:a5:82:d8:58:20:a7:c7:
03:b7:68:6c:0d:67:99:43:32:c9:57:fb:db:37:2c:
77:bc:6e:76:6d:42:b7:4c:0c:6b:0a:0c:5f:40:63:
35:d5:c1:c5:75:7e:b3:99:3b:d7:41:ef:2f:0d:8d:
f9:ce:ce:df:43:cf:dd:26:d0:96:1d:1a:66:2d:d5:
06:59:4e:43:ba:aa:2e:f5:73:71:87:8c:b6:88:12:
d9:8e:60:f9:9e:9e:2b:f1:43:db:89:30:3b:3f:d4:
2c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C0:B1:7E:DB:26:10:D4:65:A9:F5:85:A5:76:E1:5E:88:C4:E0:61
X509v3 Authority Key Identifier:
keyid:51:62:60:68:94:25:86:CE:95:70:21:03:BA:C8:99:D2:3F:CF:72:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:7d:37:6b:c3:bd:e6:1e:07:9f:50:7a:d1:e3:5c:35:9e:be:
d0:63:f6:e5:b4:f1:49:85:95:c0:f0:cb:03:f5:e5:59:97:45:
90:dc:59:01:a9:f3:4c:ae:4c:5c:73:cb:08:5c:b9:98:a9:de:
30:f3:df:1e:c3:85:b1:e6:4b:cd:df:fc:c3:fd:2c:49:a8:04:
d4:60:e9:f7:c4:63:19:6f:5c:91:ed:b5:d4:72:14:c7:85:0c:
12:86:81:67:79:bf:b5:33:97:44:dd:2f:16:1f:8c:ab:e9:1c:
b4:e8:7d:9b:45:48:78:58:8d:95:86:a5:0a:32:42:fb:59:d3:
6f:9d:9d:6c:17:51:85:cb:ab:4b:5a:e5:78:e1:72:1d:9c:6e:
33:6b:c2:54:05:b5:ac:35:fc:b8:bf:7b:d2:66:e6:d2:df:c6:
64:81:33:c8:08:5b:6f:11:e2:6d:16:b2:56:bc:d1:73:e4:60:
04:43:8f:32:8e:5c:32:9b:75:8a:af:f1:ab:ee:d2:07:11:fa:
a4:01:60:05:a6:9d:ec:08:19:e2:09:ec:90:40:44:dc:e0:9a:
4f:0c:ef:d9:f7:37:7d:fb:92:c2:81:1e:86:ae:72:47:1f:16:
4a:73:5f:b2:b6:5f:8c:65:04:a4:6b:08:b3:40:9e:dc:94:e8:
53:f5:17:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1Z3yOf/YnTzctSJPySKmzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNjI2MDY4OTQyNTg2Y2U5NTcwMjEwM2JhYzg5OWQyM2Zj
ZjcyNDIwHhcNMjUwNDI3MDQwMDM4WhcNMjUwNDI4MDQwMDM4WjAzMTEwLwYDVQQD
EyhjNGMwYjE3ZWRiMjYxMGQ0NjVhOWY1ODVhNTc2ZTE1ZTg4YzRlMDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubuTB/1Xse6JCYuEp/PFgDw5loCT
1/rR8pVq8kqNXqHE1Msms9xsZshxybOXxAofG8BECeGmkimauxlET3mfKdoRYAiB
AecKFkzLOnIspOzNv1vZ/qQ8cAFhfXEec3FLGsjCmqgBTAINYUhQZHNJyJGnqUJ2
6Zn9QALAPjzBg+mL8SdJpxRymt/Vq0XJ2fFmloS8NGQ+7CJuW8FNfKWC2Fggp8cD
t2hsDWeZQzLJV/vbNyx3vG52bUK3TAxrCgxfQGM11cHFdX6zmTvXQe8vDY35zs7f
Q8/dJtCWHRpmLdUGWU5Duqou9XNxh4y2iBLZjmD5np4r8UPbiTA7P9QsAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMTAsX7bJhDUZan1haV24V6IxOBhMB8GA1UdIwQY
MBaAFFFiYGiUJYbOlXAhA7rImdI/z3JCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVdKZ2FKUWxoczZWY0NFRHVzaVowal9QY2tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jNjJkMDAtZmZhOC00M2JlLWEyYmQt
N2JkOWU1ZjQ2N2FkLzEvVVdKZ2FKUWxoczZWY0NFRHVzaVowal9QY2tJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9jNjJkMDAtZmZhOC00M2JlLWEyYmQtN2JkOWU1ZjQ2N2Fk
LzEvVVdKZ2FKUWxoczZWY0NFRHVzaVowal9QY2tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX303a8O9
5h4Hn1B60eNcNZ6+0GP25bTxSYWVwPDLA/XlWZdFkNxZAanzTK5MXHPLCFy5mKne
MPPfHsOFseZLzd/8w/0sSagE1GDp98RjGW9cke211HIUx4UMEoaBZ3m/tTOXRN0v
Fh+Mq+kctOh9m0VIeFiNlYalCjJC+1nTb52dbBdRhcurS1rleOFyHZxuM2vCVAW1
rDX8uL970mbm0t/GZIEzyAhbbxHibRayVrzRc+RgBEOPMo5cMpt1iq/xq+7SBxH6
pAFgBaad7AgZ4gnskEBE3OCaTwzv2fc3ffuSwoEehq5yRx8WSnNfsrZfjGUEpGsI
s0Ce3JToU/UXfQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:03:28 2025 by rpki-client