Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
File: UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft (raw, json)
Hash identifier: 5BOjGGvbuPR85sRF6bI4YfVDJkhtiEutAhUzazchiKs=
Subject key identifier: FC:99:82:D1:BE:E4:F8:35:0D:84:16:DA:3B:89:1E:34:24:EB:48:96
Authority key identifier: 50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA
Certificate issuer: /CN=50c006d6401ef42fa50e24095500b2fdafad5baa
Certificate serial: 0196759E9442AA2F730131B6633958467D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
Manifest number: 139F
Signing time: Sun 27 Apr 2025 05:00:49 +0000
Manifest this update: Sun 27 Apr 2025 05:00:49 +0000
Manifest next update: Mon 28 Apr 2025 05:00:49 +0000
Files and hashes: 1: UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl (hash: 3PVMaR/L0M1SEx5wk9uPskyvbYOSJXvNV7C8fmsu6LY=)
2: aB5qLxBq-ZJ28IdpSolQt0Q0EpY.roa (hash: bc8eoAS2+dKIaklTuGOiLICXLenwRiRFs+fwOsu+WJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:94:42:aa:2f:73:01:31:b6:63:39:58:46:7d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c006d6401ef42fa50e24095500b2fdafad5baa
Validity
Not Before: Apr 27 05:00:49 2025 GMT
Not After : Apr 28 05:00:49 2025 GMT
Subject: CN=fc9982d1bee4f8350d8416da3b891e3424eb4896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:09:e0:47:5d:0f:af:d5:cf:2b:cd:a1:c8:ee:
2a:f5:e5:2a:e2:76:4e:6d:46:4e:83:42:48:20:79:
84:18:96:f3:a8:3b:11:d5:55:3c:c8:61:59:58:8f:
6f:dc:97:f3:86:cd:78:1d:f4:ac:f6:d6:36:41:8c:
92:0b:86:ab:e6:87:e2:ac:1b:31:ef:00:41:77:56:
45:c6:9d:2a:e1:44:50:bd:90:47:c9:87:f6:84:94:
ab:ce:8a:05:fe:57:fe:f5:e4:a3:02:df:a5:46:57:
aa:06:83:fb:d2:d4:e4:47:6d:6d:7c:d9:90:d2:0f:
aa:43:f8:73:1a:3a:af:6c:b2:3b:3d:63:e5:ad:8a:
03:6f:cc:28:7f:14:f4:1d:4b:81:73:99:52:36:21:
c8:37:55:ad:eb:d0:76:08:07:d8:00:12:ad:f1:51:
f1:ab:0a:52:66:8b:a9:c4:a9:85:20:85:4f:53:90:
f4:d2:df:84:db:c2:f6:50:1e:65:52:3b:29:89:43:
3d:df:c0:64:03:2d:dc:10:37:ca:72:fe:b5:a7:00:
9f:1c:04:79:87:7c:2b:6c:c8:cd:e2:f8:01:23:6e:
f8:46:34:33:a1:a3:67:ca:55:50:1b:3d:bc:ac:d1:
c0:a0:1d:86:74:3c:8d:4a:d1:ab:a1:a3:e5:69:c1:
48:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:99:82:D1:BE:E4:F8:35:0D:84:16:DA:3B:89:1E:34:24:EB:48:96
X509v3 Authority Key Identifier:
keyid:50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e4:94:2e:36:d8:0f:95:ba:5e:38:7e:7f:dd:c2:5e:73:a8:
2f:ae:16:e4:86:0e:d4:6b:09:a3:a4:68:b6:79:52:dd:68:dd:
b9:2e:33:64:b2:fb:ef:f1:fc:a2:52:67:08:64:84:e9:51:6c:
58:56:41:ad:44:0a:ce:59:a6:61:44:18:62:3e:c0:84:e4:95:
5c:18:26:59:4d:f6:17:48:3b:97:98:97:49:82:22:1b:c9:f3:
0d:84:4e:0f:d9:43:8e:f6:af:f4:ec:92:da:2c:37:6e:ff:0d:
71:f1:0b:5d:28:64:25:3e:50:20:63:26:6d:90:58:2b:64:47:
e1:43:51:7d:c8:37:04:df:f1:df:e3:e8:3e:c6:81:b4:7e:46:
6f:d6:59:a6:c5:a2:94:ac:cd:64:b9:b8:35:50:61:c7:7b:68:
3c:88:38:48:73:95:bc:fe:d8:03:e7:2b:98:88:14:ab:b2:2c:
ff:cf:ab:4b:4e:5f:ea:ad:63:86:c6:f8:e8:fe:cd:62:b5:98:
6b:ba:5c:64:f5:2c:8d:e5:20:ae:56:9b:9e:41:b0:4e:21:9f:
49:4e:f5:0a:32:fb:81:65:88:ec:59:c5:85:07:f3:1a:f1:e8:
a2:68:85:57:ad:80:aa:da:af:e6:a5:59:73:64:fc:39:c1:50:
f2:4f:cc:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1npRCqi9zATG2YzlYRn0jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYzAwNmQ2NDAxZWY0MmZhNTBlMjQwOTU1MDBiMmZkYWZh
ZDViYWEwHhcNMjUwNDI3MDUwMDQ5WhcNMjUwNDI4MDUwMDQ5WjAzMTEwLwYDVQQD
EyhmYzk5ODJkMWJlZTRmODM1MGQ4NDE2ZGEzYjg5MWUzNDI0ZWI0ODk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QngR10Pr9XPK82hyO4q9eUq4nZO
bUZOg0JIIHmEGJbzqDsR1VU8yGFZWI9v3Jfzhs14HfSs9tY2QYySC4ar5ofirBsx
7wBBd1ZFxp0q4URQvZBHyYf2hJSrzooF/lf+9eSjAt+lRleqBoP70tTkR21tfNmQ
0g+qQ/hzGjqvbLI7PWPlrYoDb8wofxT0HUuBc5lSNiHIN1Wt69B2CAfYABKt8VHx
qwpSZoupxKmFIIVPU5D00t+E28L2UB5lUjspiUM938BkAy3cEDfKcv61pwCfHAR5
h3wrbMjN4vgBI274RjQzoaNnylVQGz28rNHAoB2GdDyNStGroaPlacFILQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyZgtG+5Pg1DYQW2juJHjQk60iWMB8GA1UdIwQY
MBaAFFDABtZAHvQvpQ4kCVUAsv2vrVuqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU1BRzFrQWU5Qy1sRGlRSlZRQ3lfYS10VzZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9kZmFiMzYtNjU3Zi00ZTAyLTgzNjEt
YzJkY2RjODVlNTg0LzEvVU1BRzFrQWU5Qy1sRGlRSlZRQ3lfYS10VzZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9kZmFiMzYtNjU3Zi00ZTAyLTgzNjEtYzJkY2RjODVlNTg0
LzEvVU1BRzFrQWU5Qy1sRGlRSlZRQ3lfYS10VzZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmuSULjbY
D5W6Xjh+f93CXnOoL64W5IYO1GsJo6RotnlS3WjduS4zZLL77/H8olJnCGSE6VFs
WFZBrUQKzlmmYUQYYj7AhOSVXBgmWU32F0g7l5iXSYIiG8nzDYROD9lDjvav9OyS
2iw3bv8NcfELXShkJT5QIGMmbZBYK2RH4UNRfcg3BN/x3+PoPsaBtH5Gb9ZZpsWi
lKzNZLm4NVBhx3toPIg4SHOVvP7YA+crmIgUq7Is/8+rS05f6q1jhsb46P7NYrWY
a7pcZPUsjeUgrlabnkGwTiGfSU71CjL7gWWI7FnFhQfzGvHoomiFV62Aqtqv5qVZ
c2T8OcFQ8k/M5Q==
-----END CERTIFICATE-----
Generated at Sun Apr 27 14:16:25 2025 by rpki-client