Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
File: ui1f0wndbMbPeIYEHl6cLBomzqs.mft (raw, json)
Hash identifier: b8APAcAYSP1scuVF3iwLlfGkzyz6X+Ghm4vGNJUuw/U=
Subject key identifier: 2B:4C:D8:C1:DE:BD:0F:83:9A:D8:7E:5B:5B:EE:4C:E4:2D:05:8B:06
Authority key identifier: BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB
Certificate issuer: /CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab
Certificate serial: 0196778C9F42E9B699CDA6BD102BD98E9E0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
Manifest number: 14A3
Signing time: Sun 27 Apr 2025 14:00:26 +0000
Manifest this update: Sun 27 Apr 2025 14:00:26 +0000
Manifest next update: Mon 28 Apr 2025 14:00:26 +0000
Files and hashes: 1: Kp9T4yQ0BWzmIgTW27o6VMb8qh4.roa (hash: 8tmSpbSEt6oRRtmXjjT27qxLy0bdW3q5K1nXAwi0cxU=)
2: ui1f0wndbMbPeIYEHl6cLBomzqs.crl (hash: BlEVch2ivtU0+2o1Z/EiKlKppWlyHEUZAHuesXRnmmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8c:9f:42:e9:b6:99:cd:a6:bd:10:2b:d9:8e:9e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab
Validity
Not Before: Apr 27 14:00:26 2025 GMT
Not After : Apr 28 14:00:26 2025 GMT
Subject: CN=2b4cd8c1debd0f839ad87e5b5bee4ce42d058b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a2:6f:7f:6d:62:e3:ef:47:2b:b4:6e:fe:e1:
78:fe:8e:1a:0d:99:8a:a6:70:04:4e:cf:a6:96:3a:
5e:e6:0d:5e:ef:e7:f0:76:91:07:28:10:ca:b1:51:
3c:3e:b0:a8:0e:37:0a:9c:19:94:4d:92:86:16:77:
e6:23:6b:f2:40:93:0d:1a:fd:35:52:ef:1b:af:db:
77:91:b2:9d:28:eb:54:ae:85:d3:1f:8d:68:29:8c:
af:6f:30:cd:ca:53:d5:35:cb:62:a2:29:dc:c3:47:
6f:f9:ec:14:66:c7:61:51:3e:77:6e:e0:90:e7:47:
24:f8:b3:e8:fe:e3:9a:e4:b4:51:42:69:47:c9:4f:
71:51:6f:5f:67:1a:5b:4a:67:d2:a6:c9:89:70:81:
54:67:20:d4:72:88:95:8a:00:f6:51:2f:16:93:f1:
af:47:71:a8:62:6d:4d:0a:b7:8d:1a:73:e0:1e:e5:
ba:20:13:51:ea:5f:07:c0:7a:2f:fe:0a:3b:1a:11:
26:c5:f2:c1:cb:ae:75:6b:dd:2b:53:3b:99:25:4f:
9d:88:8b:31:73:57:d1:ba:7f:a0:11:11:e8:46:ce:
0a:5e:81:e2:ca:4f:7a:a8:a7:c7:14:f0:58:87:61:
e0:52:21:1b:a6:65:f9:87:0b:2d:84:8b:d0:47:ca:
e6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4C:D8:C1:DE:BD:0F:83:9A:D8:7E:5B:5B:EE:4C:E4:2D:05:8B:06
X509v3 Authority Key Identifier:
keyid:BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:fe:31:50:9a:c4:d2:03:54:85:8e:ce:fe:81:7e:8d:6c:15:
57:ff:2c:5e:80:97:9c:5c:aa:8f:df:75:f9:dd:c5:cd:78:53:
a0:1f:4b:31:c9:3b:cb:7c:0f:e4:48:31:86:2e:c8:99:cd:72:
18:64:6b:71:b7:bd:19:c8:bb:f7:ed:ca:84:0a:51:b7:6c:a9:
f1:11:09:df:36:47:58:90:32:75:9a:37:37:d0:99:7e:cf:05:
6d:bd:06:24:81:1d:82:ae:cc:02:bd:9e:c3:ef:8c:91:18:60:
58:16:c3:d2:f2:e3:96:b7:64:8d:f3:65:15:57:1a:7b:38:1a:
44:ec:97:73:c2:3d:45:52:4e:ef:1f:89:be:a1:a2:48:15:f6:
0d:7b:f7:af:5d:49:fc:e2:10:28:ae:05:38:7f:07:85:de:82:
01:a3:f8:65:78:20:69:71:91:0d:00:30:9c:c6:f2:8e:24:97:
f8:0c:ab:69:88:81:4a:63:05:98:91:9c:74:c2:22:21:4f:20:
51:83:68:0d:f9:35:dc:3a:1c:be:1b:76:7d:18:be:06:76:c0:
47:b8:5b:f2:97:4d:c8:e1:b3:46:cd:5e:cd:84:64:f0:4f:f0:
b6:d8:6d:f6:b1:bc:01:00:4b:9d:8e:f7:16:88:5c:64:6a:17:
55:86:72:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3jJ9C6baZzaa9ECvZjp4NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhMmQ1ZmQzMDlkZDZjYzZjZjc4ODYwNDFlNWU5YzJjMWEy
NmNlYWIwHhcNMjUwNDI3MTQwMDI2WhcNMjUwNDI4MTQwMDI2WjAzMTEwLwYDVQQD
EygyYjRjZDhjMWRlYmQwZjgzOWFkODdlNWI1YmVlNGNlNDJkMDU4YjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qJvf21i4+9HK7Ru/uF4/o4aDZmK
pnAETs+mljpe5g1e7+fwdpEHKBDKsVE8PrCoDjcKnBmUTZKGFnfmI2vyQJMNGv01
Uu8br9t3kbKdKOtUroXTH41oKYyvbzDNylPVNctioincw0dv+ewUZsdhUT53buCQ
50ck+LPo/uOa5LRRQmlHyU9xUW9fZxpbSmfSpsmJcIFUZyDUcoiVigD2US8Wk/Gv
R3GoYm1NCreNGnPgHuW6IBNR6l8HwHov/go7GhEmxfLBy651a90rUzuZJU+diIsx
c1fRun+gERHoRs4KXoHiyk96qKfHFPBYh2HgUiEbpmX5hwsthIvQR8rm4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtM2MHevQ+Dmth+W1vuTOQtBYsGMB8GA1UdIwQY
MBaAFLotX9MJ3WzGz3iGBB5enCwaJs6rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWkxZjB3bmRiTWJQZUlZRUhsNmNMQm9tenFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yY2JkZTktODQ4MC00NDBkLWFiY2Yt
NmQ3NTUwNTJiYjI0LzEvdWkxZjB3bmRiTWJQZUlZRUhsNmNMQm9tenFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8yY2JkZTktODQ4MC00NDBkLWFiY2YtNmQ3NTUwNTJiYjI0
LzEvdWkxZjB3bmRiTWJQZUlZRUhsNmNMQm9tenFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASv4xUJrE
0gNUhY7O/oF+jWwVV/8sXoCXnFyqj991+d3FzXhToB9LMck7y3wP5Egxhi7Imc1y
GGRrcbe9Gci79+3KhApRt2yp8REJ3zZHWJAydZo3N9CZfs8Fbb0GJIEdgq7MAr2e
w++MkRhgWBbD0vLjlrdkjfNlFVcaezgaROyXc8I9RVJO7x+JvqGiSBX2DXv3r11J
/OIQKK4FOH8Hhd6CAaP4ZXggaXGRDQAwnMbyjiSX+AyraYiBSmMFmJGcdMIiIU8g
UYNoDfk13Docvht2fRi+BnbAR7hb8pdNyOGzRs1ezYRk8E/wttht9rG8AQBLnY73
FohcZGoXVYZynA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 21:52:24 2025 by rpki-client