Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
File: UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft (raw, json)
Hash identifier: kAA7RKppOwDxNNUcovu06hTrC3EKO4GpMW21QRY1FL4=
Subject key identifier: 8A:A4:70:58:2E:77:9B:EB:69:9E:68:8F:5A:C4:92:BC:9D:A6:43:E8
Authority key identifier: 53:31:66:E3:F7:09:FB:3B:AC:A9:AE:79:AC:BE:C6:CA:1D:0F:C5:03
Certificate issuer: /CN=533166e3f709fb3baca9ae79acbec6ca1d0fc503
Certificate serial: 01967F4646DB5BC92924DC71D128D5397F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
Manifest number: 03CD
Signing time: Tue 29 Apr 2025 02:00:34 +0000
Manifest this update: Tue 29 Apr 2025 02:00:34 +0000
Manifest next update: Wed 30 Apr 2025 02:00:34 +0000
Files and hashes: 1: JfX_uE4ZrNpyAWrN6XZ19h68cHI.roa (hash: von2tcOSfatHPq0+8nIPwywF9HUMabxhy1Hbp0s6xOY=)
2: UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl (hash: n1uemrlVfsfrC3MwxuWFuCW5PRb4dhBbN35s4X8wN3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:46:db:5b:c9:29:24:dc:71:d1:28:d5:39:7f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533166e3f709fb3baca9ae79acbec6ca1d0fc503
Validity
Not Before: Apr 29 02:00:34 2025 GMT
Not After : Apr 30 02:00:34 2025 GMT
Subject: CN=8aa470582e779beb699e688f5ac492bc9da643e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:33:eb:a1:f6:26:ec:9f:73:4f:02:e3:37:a5:
e3:9f:14:eb:e2:72:09:4d:20:5c:6e:cb:9a:c6:69:
d1:d9:57:7c:fb:d7:c9:42:93:8c:ac:a0:78:1f:c1:
a2:20:d2:7d:dc:06:eb:e8:4b:31:5e:3a:bd:0b:4c:
46:82:b8:85:48:34:b4:a9:c2:48:2c:f9:72:7b:33:
8a:be:09:46:1a:40:bc:c3:a2:68:56:be:a6:97:9c:
5c:ab:c4:c1:6f:85:42:3f:3a:e5:76:c8:28:0a:75:
bc:26:ab:b4:6c:25:04:69:a0:0c:06:a8:4b:6a:d3:
c4:6e:2b:41:76:6a:23:27:e4:bc:8f:ae:10:86:e4:
60:cc:e6:04:ba:78:c4:4c:3d:48:a1:45:c3:5f:8d:
d9:04:ec:59:f3:8b:4e:2b:bf:c9:8d:fd:90:2d:c3:
09:e9:9a:a0:dc:1f:a9:69:89:5a:01:e0:26:e2:42:
e9:22:dc:bf:97:d3:fe:37:2d:4f:df:f1:80:04:e9:
06:a1:b1:02:b4:13:a1:2c:bd:b3:dc:6d:04:44:5c:
7e:f8:59:45:50:13:76:b9:9c:b6:9f:9e:fa:6a:97:
23:a7:eb:a2:28:bb:f1:b1:99:ff:b2:33:e0:87:1a:
e7:77:69:54:c4:b1:b7:1d:8b:3f:29:50:5c:14:5c:
cc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A4:70:58:2E:77:9B:EB:69:9E:68:8F:5A:C4:92:BC:9D:A6:43:E8
X509v3 Authority Key Identifier:
keyid:53:31:66:E3:F7:09:FB:3B:AC:A9:AE:79:AC:BE:C6:CA:1D:0F:C5:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:11:89:09:21:3d:41:c9:c6:2b:3e:6c:4a:28:88:e1:c3:ef:
b0:08:35:cd:39:43:0f:bc:2b:d7:97:fb:8c:ed:5b:7b:ff:82:
7a:e9:d7:47:e4:55:ff:e6:a1:2d:fa:5f:3b:dd:9f:52:10:05:
07:78:72:3c:b7:0a:a4:31:11:4c:75:7e:1a:45:99:2e:4d:2c:
65:35:ac:c6:05:32:18:bc:65:14:01:a8:60:86:b7:34:43:99:
75:77:1d:20:59:55:6e:77:a8:bc:8f:44:36:c0:6b:cb:3a:f8:
d7:b8:27:f1:50:07:bf:29:eb:3a:e9:04:2b:de:aa:78:ac:4b:
e1:ab:68:96:f7:fb:df:18:b9:23:6f:9b:a2:62:ec:19:46:4a:
b7:48:1d:b0:9d:d0:be:80:c3:6e:18:92:70:0d:99:c4:55:b1:
b5:34:29:ef:2f:3e:16:41:5b:f1:98:f0:92:aa:e8:ce:f1:0c:
00:53:ee:33:ac:16:3a:cd:d5:8f:48:03:d4:bd:8b:88:43:0e:
1e:1a:91:c4:fe:79:ca:2f:a2:a6:49:9a:85:f5:ee:c3:5f:e8:
f1:7b:57:a4:69:ec:1c:fe:f4:0c:87:d3:02:60:48:e2:8e:67:
53:e6:df:d8:82:2b:d3:c3:5e:06:00:6c:93:6a:31:48:d9:a7:
0c:c0:5c:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/RkbbW8kpJNxx0SjVOX9lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMzE2NmUzZjcwOWZiM2JhY2E5YWU3OWFjYmVjNmNhMWQw
ZmM1MDMwHhcNMjUwNDI5MDIwMDM0WhcNMjUwNDMwMDIwMDM0WjAzMTEwLwYDVQQD
Eyg4YWE0NzA1ODJlNzc5YmViNjk5ZTY4OGY1YWM0OTJiYzlkYTY0M2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+jProfYm7J9zTwLjN6XjnxTr4nIJ
TSBcbsuaxmnR2Vd8+9fJQpOMrKB4H8GiINJ93Abr6EsxXjq9C0xGgriFSDS0qcJI
LPlyezOKvglGGkC8w6JoVr6ml5xcq8TBb4VCPzrldsgoCnW8Jqu0bCUEaaAMBqhL
atPEbitBdmojJ+S8j64QhuRgzOYEunjETD1IoUXDX43ZBOxZ84tOK7/Jjf2QLcMJ
6Zqg3B+paYlaAeAm4kLpIty/l9P+Ny1P3/GABOkGobECtBOhLL2z3G0ERFx++FlF
UBN2uZy2n576apcjp+uiKLvxsZn/sjPghxrnd2lUxLG3HYs/KVBcFFzMRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqkcFgud5vraZ5oj1rEkrydpkPoMB8GA1UdIwQY
MBaAFFMxZuP3Cfs7rKmueay+xsodD8UDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXpGbTRfY0otenVzcWE1NXJMN0d5aDBQeFFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8wOTE5MTEtMDZkOC00NWM4LWIwNWQt
ZTRiYmY0YzBkYjU5LzEvVXpGbTRfY0otenVzcWE1NXJMN0d5aDBQeFFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8wOTE5MTEtMDZkOC00NWM4LWIwNWQtZTRiYmY0YzBkYjU5
LzEvVXpGbTRfY0otenVzcWE1NXJMN0d5aDBQeFFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbRGJCSE9
QcnGKz5sSiiI4cPvsAg1zTlDD7wr15f7jO1be/+CeunXR+RV/+ahLfpfO92fUhAF
B3hyPLcKpDERTHV+GkWZLk0sZTWsxgUyGLxlFAGoYIa3NEOZdXcdIFlVbneovI9E
NsBryzr417gn8VAHvynrOukEK96qeKxL4atolvf73xi5I2+bomLsGUZKt0gdsJ3Q
voDDbhiScA2ZxFWxtTQp7y8+FkFb8ZjwkqrozvEMAFPuM6wWOs3Vj0gD1L2LiEMO
HhqRxP55yi+ipkmahfXuw1/o8XtXpGnsHP70DIfTAmBI4o5nU+bf2IIr08NeBgBs
k2oxSNmnDMBcXA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:51:03 2025 by rpki-client