Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/UW2UBk9zhVXozjZaGVfWnnaICcQ.mft
File: UW2UBk9zhVXozjZaGVfWnnaICcQ.mft (raw, json)
Hash identifier: 7RV7hxn78FRtQYULk8jySF1l2vDW6ub6ia7g1XkEUrg=
Subject key identifier: 9B:F1:40:B1:6F:9A:14:4B:4C:8C:49:9B:E1:3F:F5:B5:44:59:20:88
Authority key identifier: 51:6D:94:06:4F:73:85:55:E8:CE:36:5A:19:57:D6:9E:76:88:09:C4
Certificate issuer: /CN=516d94064f738555e8ce365a1957d69e768809c4
Certificate serial: 01968B4A488AAD4C18EE0420A91C1F79E076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UW2UBk9zhVXozjZaGVfWnnaICcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/UW2UBk9zhVXozjZaGVfWnnaICcQ.mft
Manifest number: 04FB
Signing time: Thu 01 May 2025 10:00:23 +0000
Manifest this update: Thu 01 May 2025 10:00:23 +0000
Manifest next update: Fri 02 May 2025 10:00:23 +0000
Files and hashes: 1: UW2UBk9zhVXozjZaGVfWnnaICcQ.crl (hash: oyKUO+rHwv7gzFbSSKV0WkCI/Gqm1Tc9wCsQvzCcku8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/UW2UBk9zhVXozjZaGVfWnnaICcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/UW2UBk9zhVXozjZaGVfWnnaICcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UW2UBk9zhVXozjZaGVfWnnaICcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:4a:48:8a:ad:4c:18:ee:04:20:a9:1c:1f:79:e0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=516d94064f738555e8ce365a1957d69e768809c4
Validity
Not Before: May 1 10:00:23 2025 GMT
Not After : May 2 10:00:23 2025 GMT
Subject: CN=9bf140b16f9a144b4c8c499be13ff5b544592088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d7:1b:bd:c2:d5:2f:58:e9:66:d2:de:7d:b3:
72:ce:db:11:07:43:b6:4b:c0:19:04:cc:b6:b8:45:
12:19:04:0b:81:f0:0a:9a:13:a5:f5:ce:57:ae:c9:
3f:b5:29:5b:ac:21:94:ea:a8:59:93:9c:1a:66:23:
7e:62:34:ed:47:74:7e:5d:ef:b0:37:e1:5b:d0:42:
4e:47:cd:48:ee:68:ea:72:19:a0:33:00:88:d8:ec:
cd:cb:da:49:ce:f6:da:63:e7:94:fa:a1:ce:04:d5:
8b:14:54:54:5b:40:1d:be:2d:61:e3:42:9f:de:52:
8b:c8:c0:82:4d:62:b1:16:72:22:98:b0:de:da:66:
2e:dc:30:01:fb:b4:86:f2:85:a8:70:a1:d9:7a:d4:
36:35:9c:47:74:06:1d:dd:3d:f9:82:9a:7b:1a:b0:
f8:95:ee:fb:c7:f4:02:e5:4a:9b:1f:d9:a6:ad:b8:
9b:ee:2f:c8:f3:a3:10:22:12:9d:45:de:50:cf:cb:
e8:e2:33:9e:a2:f0:33:b8:f8:d0:94:9f:de:8c:32:
b3:a0:22:19:75:0d:0d:e8:2a:d1:9a:eb:e4:1c:bb:
69:89:38:b4:d9:46:9c:65:e8:86:16:69:73:f3:78:
1e:0b:e9:f3:f2:08:29:7b:c8:40:2a:b0:6f:99:2a:
96:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F1:40:B1:6F:9A:14:4B:4C:8C:49:9B:E1:3F:F5:B5:44:59:20:88
X509v3 Authority Key Identifier:
keyid:51:6D:94:06:4F:73:85:55:E8:CE:36:5A:19:57:D6:9E:76:88:09:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UW2UBk9zhVXozjZaGVfWnnaICcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/UW2UBk9zhVXozjZaGVfWnnaICcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/UW2UBk9zhVXozjZaGVfWnnaICcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:bb:10:e9:d0:52:52:12:de:e1:14:01:36:aa:30:e5:a1:51:
18:3d:47:44:5b:7d:5e:00:74:5b:a1:d1:40:58:91:e1:f4:be:
4f:71:c9:e6:ca:a6:cf:3f:d3:e8:40:2f:99:85:69:bc:e3:ce:
6d:08:13:7c:d8:1a:1f:a7:0d:4a:a3:7b:fc:da:cb:d1:71:ea:
2a:86:49:df:de:13:b8:33:70:e3:56:f8:c1:4b:c4:8a:e4:59:
cd:3e:67:72:07:c6:95:85:6b:d8:d0:40:44:21:45:f9:b0:df:
8c:74:df:67:89:eb:fa:73:20:d8:b4:ee:49:ec:43:63:37:fe:
6f:cb:f0:fa:ff:c4:6f:bb:8d:e7:4f:b9:fc:ad:52:63:b9:06:
1c:fa:c2:1a:e0:bb:5c:fc:e3:05:eb:6c:97:5b:79:ff:6f:90:
9c:ed:cf:24:4f:be:52:df:90:62:c9:61:88:89:2e:fd:f9:4b:
69:12:bc:8a:33:66:23:56:58:2f:f3:2f:b6:ee:99:f4:01:78:
67:c5:6b:2b:24:5b:19:39:fa:be:d1:aa:cb:bf:cf:fe:67:19:
00:21:2e:f4:77:6b:53:b3:2b:28:0a:9b:84:ed:a7:72:8d:87:
74:8f:d0:d2:7d:6b:af:ba:1a:59:42:48:cd:dc:24:88:db:85:
cf:cc:73:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaLSkiKrUwY7gQgqRwfeeB2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNmQ5NDA2NGY3Mzg1NTVlOGNlMzY1YTE5NTdkNjllNzY4
ODA5YzQwHhcNMjUwNTAxMTAwMDIzWhcNMjUwNTAyMTAwMDIzWjAzMTEwLwYDVQQD
Eyg5YmYxNDBiMTZmOWExNDRiNGM4YzQ5OWJlMTNmZjViNTQ0NTkyMDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNcbvcLVL1jpZtLefbNyztsRB0O2
S8AZBMy2uEUSGQQLgfAKmhOl9c5Xrsk/tSlbrCGU6qhZk5waZiN+YjTtR3R+Xe+w
N+Fb0EJOR81I7mjqchmgMwCI2OzNy9pJzvbaY+eU+qHOBNWLFFRUW0Advi1h40Kf
3lKLyMCCTWKxFnIimLDe2mYu3DAB+7SG8oWocKHZetQ2NZxHdAYd3T35gpp7GrD4
le77x/QC5UqbH9mmrbib7i/I86MQIhKdRd5Qz8vo4jOeovAzuPjQlJ/ejDKzoCIZ
dQ0N6CrRmuvkHLtpiTi02UacZeiGFmlz83geC+nz8ggpe8hAKrBvmSqWhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvxQLFvmhRLTIxJm+E/9bVEWSCIMB8GA1UdIwQY
MBaAFFFtlAZPc4VV6M42WhlX1p52iAnEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVcyVUJrOXpoVlhvempaYUdWZldubmFJQ2NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9iODE4OTUtYzYwNS00MWUyLWIyODMt
YzA1NjVmYTg0MGQ0LzEvVVcyVUJrOXpoVlhvempaYUdWZldubmFJQ2NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9iODE4OTUtYzYwNS00MWUyLWIyODMtYzA1NjVmYTg0MGQ0
LzEvVVcyVUJrOXpoVlhvempaYUdWZldubmFJQ2NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALLsQ6dBS
UhLe4RQBNqow5aFRGD1HRFt9XgB0W6HRQFiR4fS+T3HJ5sqmzz/T6EAvmYVpvOPO
bQgTfNgaH6cNSqN7/NrL0XHqKoZJ394TuDNw41b4wUvEiuRZzT5ncgfGlYVr2NBA
RCFF+bDfjHTfZ4nr+nMg2LTuSexDYzf+b8vw+v/Eb7uN50+5/K1SY7kGHPrCGuC7
XPzjBetsl1t5/2+QnO3PJE++Ut+QYslhiIku/flLaRK8ijNmI1ZYL/Mvtu6Z9AF4
Z8VrKyRbGTn6vtGqy7/P/mcZACEu9HdrU7MrKAqbhO2nco2HdI/Q0n1rr7oaWUJI
zdwkiNuFz8xzWw==
-----END CERTIFICATE-----
Generated at Thu May 1 17:40:19 2025 by rpki-client