Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
File: pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft (raw, json)
Hash identifier: +Na9ZRhFgMnm7+ze4MUJWMsKSo6iRVTKc1VIQeATNs4=
Subject key identifier: B4:A2:A5:10:AB:5E:D3:18:51:55:66:3E:CD:42:6F:2C:6D:78:47:0E
Authority key identifier: A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
Certificate issuer: /CN=a5472b1473bc781b70440315c83d119c8abc86fc
Certificate serial: 0196914C38B16BC88F4D89B1F422D47A9CD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
Manifest number: 1278
Signing time: Fri 02 May 2025 14:00:13 +0000
Manifest this update: Fri 02 May 2025 14:00:13 +0000
Manifest next update: Sat 03 May 2025 14:00:13 +0000
Files and hashes: 1: 2fiCKenUyZEGcgyEcbC3Fxz5B0o.roa (hash: C3sRzOd2/ABXN5AYlIy2eOFDIIGwTRNmpvXK9lls8wk=)
2: FKocTxCwOpTwhx81CYxQkqkOggY.roa (hash: 4ohmnB8YwygbCXyKutj9jSnUxcPLc8vBK0YjqJ6KB28=)
3: pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl (hash: rRz53zvCh3zAfQC3u2Cj1tqWkGNCameCZemJNJcrjtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:4c:38:b1:6b:c8:8f:4d:89:b1:f4:22:d4:7a:9c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5472b1473bc781b70440315c83d119c8abc86fc
Validity
Not Before: May 2 14:00:13 2025 GMT
Not After : May 3 14:00:13 2025 GMT
Subject: CN=b4a2a510ab5ed3185155663ecd426f2c6d78470e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bc:74:6e:80:6a:bd:a4:39:0d:17:c6:5f:e4:
a8:3f:96:3c:be:3a:92:52:0b:47:99:ea:65:23:5c:
4e:84:49:8b:d1:cd:53:27:05:78:ae:f5:08:2e:20:
93:31:5e:89:ab:1b:fd:56:60:98:e5:70:c9:7c:c8:
75:57:6d:37:e5:22:f6:b8:b9:a4:ed:23:16:6b:b3:
1b:e4:06:6c:55:24:e9:9a:df:a8:c0:d2:fd:7c:d0:
1e:d1:55:a0:94:1d:ee:67:b2:c0:bc:cd:4c:1c:82:
21:f8:52:92:e5:1a:4b:2f:40:1b:d8:a9:b3:7b:c4:
9c:35:1f:62:07:76:bc:c6:d3:2d:fe:17:0b:43:89:
a5:11:c5:3b:13:02:3e:40:77:a6:e5:c6:b5:ef:e1:
73:74:67:1e:36:31:a9:a5:a5:57:2f:21:96:de:c6:
d5:f7:ff:49:75:28:8a:09:38:b5:f6:d6:a5:40:7c:
23:99:20:3a:4c:40:cb:84:24:76:da:00:a5:d3:0b:
53:80:2a:77:6c:26:25:5b:1e:89:14:46:0f:5e:e8:
94:94:f6:92:5d:57:6e:75:10:c7:26:ab:51:03:f7:
3f:68:61:3c:0f:81:d4:6b:1a:be:5a:bb:51:ee:69:
36:d5:bf:f0:38:13:a7:b1:d9:f9:67:cd:2f:a9:91:
ec:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A2:A5:10:AB:5E:D3:18:51:55:66:3E:CD:42:6F:2C:6D:78:47:0E
X509v3 Authority Key Identifier:
keyid:A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a9:d6:3a:de:fb:02:7b:56:98:28:b9:a6:ea:32:88:76:1c:
d4:6b:e9:d9:ff:9f:dd:01:57:2b:80:fd:3d:fa:0d:47:19:48:
8e:d7:35:4c:0e:31:85:4b:2e:d0:f8:d7:b9:bd:09:79:79:86:
65:0b:06:cd:62:54:f8:d7:72:55:1f:f4:b3:cb:85:56:e6:1b:
57:92:dd:bd:38:6e:87:70:f1:85:6e:95:3b:b4:78:15:bc:f0:
3e:9f:e4:9f:9e:ef:75:95:ba:63:b1:2a:28:32:c8:fe:ae:4f:
9e:85:1c:7a:cc:68:db:e6:d6:fa:e5:49:30:6a:c8:05:43:9e:
9f:ec:a3:9c:38:f0:a6:98:11:02:22:ff:88:58:0b:32:9e:60:
6b:47:72:87:35:bf:fd:e7:dc:19:ab:64:81:32:32:71:9f:20:
a4:42:ca:70:32:d1:af:91:a8:c7:f3:2a:41:c4:a6:c9:61:3c:
bb:72:0d:16:79:f8:0c:d0:41:5b:c8:7e:12:31:7a:43:e3:af:
4c:f2:ee:8e:63:4c:fe:a7:3a:4e:c4:4a:69:4f:ae:fb:de:00:
76:79:f9:ea:0e:5b:a8:5e:c0:f0:cb:eb:98:ab:12:f7:cd:c0:
95:00:e0:a2:4c:a3:7a:ff:01:a4:22:e1:60:a4:94:84:66:fb:
8e:8f:a5:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaRTDixa8iPTYmx9CLUepzUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NDcyYjE0NzNiYzc4MWI3MDQ0MDMxNWM4M2QxMTljOGFi
Yzg2ZmMwHhcNMjUwNTAyMTQwMDEzWhcNMjUwNTAzMTQwMDEzWjAzMTEwLwYDVQQD
EyhiNGEyYTUxMGFiNWVkMzE4NTE1NTY2M2VjZDQyNmYyYzZkNzg0NzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrx0boBqvaQ5DRfGX+SoP5Y8vjqS
UgtHmeplI1xOhEmL0c1TJwV4rvUILiCTMV6Jqxv9VmCY5XDJfMh1V2035SL2uLmk
7SMWa7Mb5AZsVSTpmt+owNL9fNAe0VWglB3uZ7LAvM1MHIIh+FKS5RpLL0Ab2Kmz
e8ScNR9iB3a8xtMt/hcLQ4mlEcU7EwI+QHem5ca17+FzdGceNjGppaVXLyGW3sbV
9/9JdSiKCTi19talQHwjmSA6TEDLhCR22gCl0wtTgCp3bCYlWx6JFEYPXuiUlPaS
XVdudRDHJqtRA/c/aGE8D4HUaxq+WrtR7mk21b/wOBOnsdn5Z80vqZHsnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSipRCrXtMYUVVmPs1CbyxteEcOMB8GA1UdIwQY
MBaAFKVHKxRzvHgbcEQDFcg9EZyKvIb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFVjckZITzhlQnR3UkFNVnlEMFJuSXE4aHZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zMDExMmYtMGU5ZC00ZmM4LWI4NTQt
YjE1NjViMjU1ODU0LzEvcFVjckZITzhlQnR3UkFNVnlEMFJuSXE4aHZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8zMDExMmYtMGU5ZC00ZmM4LWI4NTQtYjE1NjViMjU1ODU0
LzEvcFVjckZITzhlQnR3UkFNVnlEMFJuSXE4aHZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWqnWOt77
AntWmCi5puoyiHYc1Gvp2f+f3QFXK4D9PfoNRxlIjtc1TA4xhUsu0PjXub0JeXmG
ZQsGzWJU+NdyVR/0s8uFVuYbV5LdvThuh3DxhW6VO7R4FbzwPp/kn57vdZW6Y7Eq
KDLI/q5PnoUcesxo2+bW+uVJMGrIBUOen+yjnDjwppgRAiL/iFgLMp5ga0dyhzW/
/efcGatkgTIycZ8gpELKcDLRr5Gox/MqQcSmyWE8u3INFnn4DNBBW8h+EjF6Q+Ov
TPLujmNM/qc6TsRKaU+u+94Adnn56g5bqF7A8MvrmKsS983AlQDgokyjev8BpCLh
YKSUhGb7jo+lsw==
-----END CERTIFICATE-----
Generated at Fri May 2 23:21:33 2025 by rpki-client