Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
File: UzahBs7N66kuC4Dl6aXHibp0xis.mft (raw, json)
Hash identifier: n8vdUOMskjdGug9uuZ1ZWURZamj+ZOFAxTO6QtPhIqI=
Subject key identifier: A9:8B:C5:6D:CA:BC:68:4C:DD:13:0F:C0:02:4F:AF:1B:C3:F2:73:52
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial: 01967C0E1279448E79FDD9E81DE177A47229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
Manifest number: 09BC
Signing time: Mon 28 Apr 2025 11:00:19 +0000
Manifest this update: Mon 28 Apr 2025 11:00:19 +0000
Manifest next update: Tue 29 Apr 2025 11:00:19 +0000
Files and hashes: 1: 3XFZjvmipuYl3ZWlHwQH5J3zMBo.roa (hash: waCPVYUPagNA2C/8qUWA6TsWBhxDDZLgjh2zXP9UUxQ=)
2: 7k8l9jRcUvUU0PoFjWmWy5vQ4RU.roa (hash: EkvhsCktAS/aEN7qGD8m7gGA2WllZuGA03mFu0p4SxA=)
3: NQzxfbg6mUjToWYd761iH1Aj8M0.roa (hash: gTeoWCaUXq7PaCcs+yvz12eVkeAA0ArL5OPG5CvIUNQ=)
4: QDeglJ-kf-CPwjwijAyu-xuaRJQ.roa (hash: F1qjIGAjhb4CCD6+mprPcFrHYg12/ZjUkVJtYzNpI98=)
5: UzahBs7N66kuC4Dl6aXHibp0xis.crl (hash: bukk1CfP+eUckebmgjJbWizbw8Rrb3dREhQT6Kh5GxM=)
6: bjcT27Mkrmm6YUKTzHgcNPrjPBU.roa (hash: Yn0RgyPmmLSzCmXSFkvVjdwnmhf67ZsvVo3LY47XFQY=)
7: jegjWR7VprdJlP9Id7lnXfq_3BY.roa (hash: 3+QVUbiATKXjEawCpJp9FdwXwbHQPUAeJSJ9r2KyWeA=)
8: l5UHl_04bz9hmdByW-mS5aOLzVQ.roa (hash: 44oRNABvdxfx6PrHpOdx7KjJ3dNX5DY1G8L30+SPRh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 11:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:0e:12:79:44:8e:79:fd:d9:e8:1d:e1:77:a4:72:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Validity
Not Before: Apr 28 11:00:19 2025 GMT
Not After : Apr 29 11:00:19 2025 GMT
Subject: CN=a98bc56dcabc684cdd130fc0024faf1bc3f27352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:45:cd:99:ee:8c:1b:ab:63:c4:20:44:31:94:
df:72:b3:16:0e:43:b6:60:f3:32:c3:dd:e8:d9:15:
e2:bd:03:fc:16:c5:57:e6:2a:8e:45:91:c8:79:12:
f8:80:92:98:83:14:d7:6d:b2:95:ee:5a:5f:a3:1b:
1d:cb:31:7f:55:a9:90:ee:09:f9:36:1d:70:89:51:
26:b8:0d:82:d1:85:f4:f8:cb:72:c5:ce:d1:bb:45:
5f:08:18:0c:d0:ec:58:7d:5d:d2:4c:4b:ca:36:51:
ca:25:0d:d2:de:6d:55:0e:28:7e:7e:61:3f:5b:78:
3e:6f:ab:28:fd:5d:a4:c3:a5:56:f5:2e:57:a8:07:
0b:c7:64:48:bd:f5:b0:64:43:a2:3d:79:88:f5:b3:
17:ca:c1:54:79:51:f2:35:94:24:5e:13:f8:64:d4:
45:05:1f:ba:fc:64:2b:de:34:7e:5c:76:00:1d:52:
6f:d7:2e:21:cc:6b:7c:03:a7:8a:8e:ed:33:7e:f1:
f0:5f:d3:9c:78:6c:61:c7:a1:a9:17:dd:f6:33:31:
8e:86:15:5a:ba:61:f3:af:a7:ca:54:e3:a3:78:0e:
ad:a0:f3:24:4d:f9:43:41:f6:bf:09:ee:a7:e8:11:
34:10:75:9f:49:ee:4b:12:5f:9f:dd:b3:8c:95:eb:
98:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8B:C5:6D:CA:BC:68:4C:DD:13:0F:C0:02:4F:AF:1B:C3:F2:73:52
X509v3 Authority Key Identifier:
keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:32:d4:49:23:31:41:ec:a1:83:b2:7a:2b:30:66:74:b3:4e:
81:b5:4a:41:7c:e2:58:38:d7:87:a5:96:39:2c:76:e2:7f:71:
05:03:7b:17:6b:1d:33:06:d9:61:71:04:87:3d:58:9d:63:0e:
d8:84:71:cd:54:f7:94:ed:01:e4:a1:a9:69:27:42:9f:89:2b:
8d:14:6d:9d:76:10:32:1f:82:1e:4a:c8:42:28:3c:07:d8:c3:
51:32:b0:54:c2:ec:f1:1e:6a:c7:b7:4d:d6:b2:3f:a7:ae:72:
73:57:06:4b:5a:e5:33:f9:3d:86:e4:eb:c5:ab:38:5e:eb:e8:
67:ae:2c:5b:47:35:fd:01:4d:37:bc:18:06:6a:56:7b:14:f4:
da:22:fa:a7:41:4a:f5:6a:60:2e:7d:16:5f:0c:77:71:12:20:
76:68:a8:bb:46:6f:44:18:4b:45:92:74:bc:de:c0:f1:eb:5b:
b0:d3:0b:50:92:4c:da:21:3a:78:50:21:ec:6b:38:20:f6:39:
05:a0:32:48:09:53:40:cf:14:ee:82:4a:bb:10:67:7e:b5:55:
3e:54:47:3b:ea:32:58:e8:32:ae:74:15:6d:a7:35:40:d2:a5:
f2:99:9b:55:13:62:63:b6:18:2b:6a:ad:ff:2d:ed:91:8c:a8:
64:72:c7:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ8DhJ5RI55/dnoHeF3pHIpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMzZhMTA2Y2VjZGViYTkyZTBiODBlNWU5YTVjNzg5YmE3
NGM2MmIwHhcNMjUwNDI4MTEwMDE5WhcNMjUwNDI5MTEwMDE5WjAzMTEwLwYDVQQD
EyhhOThiYzU2ZGNhYmM2ODRjZGQxMzBmYzAwMjRmYWYxYmMzZjI3MzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkXNme6MG6tjxCBEMZTfcrMWDkO2
YPMyw93o2RXivQP8FsVX5iqORZHIeRL4gJKYgxTXbbKV7lpfoxsdyzF/VamQ7gn5
Nh1wiVEmuA2C0YX0+Mtyxc7Ru0VfCBgM0OxYfV3STEvKNlHKJQ3S3m1VDih+fmE/
W3g+b6so/V2kw6VW9S5XqAcLx2RIvfWwZEOiPXmI9bMXysFUeVHyNZQkXhP4ZNRF
BR+6/GQr3jR+XHYAHVJv1y4hzGt8A6eKju0zfvHwX9OceGxhx6GpF932MzGOhhVa
umHzr6fKVOOjeA6toPMkTflDQfa/Ce6n6BE0EHWfSe5LEl+f3bOMleuYjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmLxW3KvGhM3RMPwAJPrxvD8nNSMB8GA1UdIwQY
MBaAFFM2oQbOzeupLguA5emlx4m6dMYrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXphaEJzN042Nmt1QzREbDZhWEhpYnAweGlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8yNjY5ZWUtNGJhNy00MTEwLTgzNzAt
ZGQ4MDNjNWI4NWRiLzEvVXphaEJzN042Nmt1QzREbDZhWEhpYnAweGlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8yNjY5ZWUtNGJhNy00MTEwLTgzNzAtZGQ4MDNjNWI4NWRi
LzEvVXphaEJzN042Nmt1QzREbDZhWEhpYnAweGlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMDLUSSMx
Qeyhg7J6KzBmdLNOgbVKQXziWDjXh6WWOSx24n9xBQN7F2sdMwbZYXEEhz1YnWMO
2IRxzVT3lO0B5KGpaSdCn4krjRRtnXYQMh+CHkrIQig8B9jDUTKwVMLs8R5qx7dN
1rI/p65yc1cGS1rlM/k9huTrxas4XuvoZ64sW0c1/QFNN7wYBmpWexT02iL6p0FK
9WpgLn0WXwx3cRIgdmiou0ZvRBhLRZJ0vN7A8etbsNMLUJJM2iE6eFAh7Gs4IPY5
BaAySAlTQM8U7oJKuxBnfrVVPlRHO+oyWOgyrnQVbac1QNKl8pmbVRNiY7YYK2qt
/y3tkYyoZHLH1w==
-----END CERTIFICATE-----
Generated at Mon Apr 28 16:24:39 2025 by rpki-client