Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
File: uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft (raw, json)
Hash identifier: dWNPRMIBxFmFSbDX1HHvOMxzW/Pz1+szVm2nDESIXQE=
Subject key identifier: 04:D2:03:9E:DD:BD:C0:73:A9:96:83:EB:68:2F:5A:89:EE:1C:37:56
Authority key identifier: BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4
Certificate issuer: /CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
Certificate serial: 01967B69BD7F34BD8F290D13AAB501B26B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
Manifest number: 0C3A
Signing time: Mon 28 Apr 2025 08:00:49 +0000
Manifest this update: Mon 28 Apr 2025 08:00:49 +0000
Manifest next update: Tue 29 Apr 2025 08:00:49 +0000
Files and hashes: 1: DKKUdW46_6zXz80AQeVOjRiUJ4A.roa (hash: xKACAtSTQQnsNmsto4dOmpcxKzakaVi9kzieeQlXs5g=)
2: uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl (hash: 06CFUZ6Ul0XkTcYOsql1eK0XHV92fTfnDWu/P9X8ym8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:bd:7f:34:bd:8f:29:0d:13:aa:b5:01:b2:6b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
Validity
Not Before: Apr 28 08:00:49 2025 GMT
Not After : Apr 29 08:00:49 2025 GMT
Subject: CN=04d2039eddbdc073a99683eb682f5a89ee1c3756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f8:65:65:97:20:50:19:b7:54:21:10:18:4b:
ed:5e:c9:ab:a6:7c:de:92:03:03:96:7c:16:ad:0b:
ac:ea:ac:7a:6a:e5:e8:76:21:68:d0:e3:dc:4d:2e:
e2:cd:4a:7c:9c:2c:ff:02:bd:05:b7:2e:d2:51:b0:
d6:03:e0:a6:19:a5:fe:36:c0:25:44:ca:fd:fa:0c:
b2:b0:34:8f:55:63:fa:70:61:38:b1:72:4a:cf:ee:
a6:ac:10:a9:3c:c4:37:bc:b1:96:65:4a:1c:7a:06:
dc:50:44:5c:42:d0:b7:4f:b3:ca:9f:7c:b9:46:a9:
04:1a:04:de:91:41:d6:e1:70:ba:75:b8:92:08:18:
c7:d3:07:75:65:55:d7:40:1f:e3:84:da:84:f0:58:
6c:06:af:de:62:9a:83:cb:86:e4:f5:8d:52:dc:6c:
47:7f:f4:44:ff:f2:a3:29:ff:e7:b8:b5:ca:c1:ca:
83:51:e5:86:62:4a:95:cd:5c:84:be:6a:ac:c3:8a:
e0:91:8f:2b:9e:a1:c9:80:c9:ca:99:32:1e:e8:c1:
49:fc:bb:8f:91:c1:20:ee:b3:ca:6e:b7:3c:d0:df:
09:3d:e7:3f:d7:0f:46:6d:a9:60:9b:15:a8:c2:11:
c8:17:c7:87:fc:34:02:01:9c:8b:44:17:65:2e:c6:
02:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D2:03:9E:DD:BD:C0:73:A9:96:83:EB:68:2F:5A:89:EE:1C:37:56
X509v3 Authority Key Identifier:
keyid:BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:95:ed:a8:87:64:f1:b1:31:4d:ec:21:ac:71:e8:21:b0:7c:
04:31:23:68:75:45:72:4a:3c:b6:d6:65:94:32:6a:9c:55:d8:
29:b9:6d:40:ad:9a:47:58:1f:b5:cb:68:84:40:2f:10:b5:f1:
d1:af:8c:93:d7:f4:87:1c:23:20:51:4a:c8:23:42:14:73:f9:
01:13:4f:0c:5c:a7:b1:32:de:ed:12:c6:09:1b:32:0f:8a:b6:
28:e6:92:0d:0d:a8:ee:3c:a6:c1:c9:03:c8:c9:86:27:ec:65:
6d:5f:2a:80:63:31:d7:34:91:c9:e0:c7:a9:1a:14:e4:bb:a3:
88:89:33:98:88:94:81:3f:51:71:82:97:ee:f1:44:c2:86:8e:
59:8c:f2:49:4b:08:dd:92:66:8a:54:98:53:0d:5e:f4:a5:3b:
3e:c0:13:e4:33:c5:f0:02:d4:cb:80:5f:33:1c:db:00:df:f6:
ad:bd:bd:90:d0:a4:43:27:37:31:b2:66:a7:d9:d3:8b:0b:13:
00:b2:4c:26:a0:04:9b:1d:a4:77:a6:de:85:d1:b6:5f:af:1f:
08:8c:7b:42:6a:6e:52:2f:25:0a:c7:56:9a:3a:3b:41:09:e9:
1a:b8:f7:86:21:e1:fd:52:a9:e3:96:ea:75:55:41:69:8c:a8:
8c:17:6a:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ7ab1/NL2PKQ0TqrUBsmtxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhODg2MWUxN2ViZWQ1Nzk1MGZmMzJjN2IzNzdmYzQzMDQx
M2RiZTQwHhcNMjUwNDI4MDgwMDQ5WhcNMjUwNDI5MDgwMDQ5WjAzMTEwLwYDVQQD
EygwNGQyMDM5ZWRkYmRjMDczYTk5NjgzZWI2ODJmNWE4OWVlMWMzNzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvhlZZcgUBm3VCEQGEvtXsmrpnze
kgMDlnwWrQus6qx6auXodiFo0OPcTS7izUp8nCz/Ar0Fty7SUbDWA+CmGaX+NsAl
RMr9+gyysDSPVWP6cGE4sXJKz+6mrBCpPMQ3vLGWZUocegbcUERcQtC3T7PKn3y5
RqkEGgTekUHW4XC6dbiSCBjH0wd1ZVXXQB/jhNqE8FhsBq/eYpqDy4bk9Y1S3GxH
f/RE//KjKf/nuLXKwcqDUeWGYkqVzVyEvmqsw4rgkY8rnqHJgMnKmTIe6MFJ/LuP
kcEg7rPKbrc80N8JPec/1w9GbalgmxWowhHIF8eH/DQCAZyLRBdlLsYCzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATSA57dvcBzqZaD62gvWonuHDdWMB8GA1UdIwQY
MBaAFLqIYeF+vtV5UP8yx7N3/EMEE9vkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW9oaDRYNi0xWGxRX3pMSHMzZjhRd1FUMi1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8xMGQxNTMtYzNjMy00MDExLTk3Y2Yt
MTBmZGNhMzg1ZWE0LzEvdW9oaDRYNi0xWGxRX3pMSHMzZjhRd1FUMi1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8xMGQxNTMtYzNjMy00MDExLTk3Y2YtMTBmZGNhMzg1ZWE0
LzEvdW9oaDRYNi0xWGxRX3pMSHMzZjhRd1FUMi1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd5XtqIdk
8bExTewhrHHoIbB8BDEjaHVFcko8ttZllDJqnFXYKbltQK2aR1gftctohEAvELXx
0a+Mk9f0hxwjIFFKyCNCFHP5ARNPDFynsTLe7RLGCRsyD4q2KOaSDQ2o7jymwckD
yMmGJ+xlbV8qgGMx1zSRyeDHqRoU5LujiIkzmIiUgT9RcYKX7vFEwoaOWYzySUsI
3ZJmilSYUw1e9KU7PsAT5DPF8ALUy4BfMxzbAN/2rb29kNCkQyc3MbJmp9nTiwsT
ALJMJqAEmx2kd6behdG2X68fCIx7QmpuUi8lCsdWmjo7QQnpGrj3hiHh/VKp45bq
dVVBaYyojBdqTg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:36:49 2025 by rpki-client