Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
File: uQMr2xKMhuALIcd5WagBHEDQZQw.mft (raw, json)
Hash identifier: VBMyBiJwZqeQlJXccesQw1iN6CulRxvAnjy/iIbcO8A=
Subject key identifier: AA:A2:FB:E7:5F:C5:AE:ED:18:3E:A8:2A:39:3B:7A:60:F5:B0:E1:DB
Authority key identifier: B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
Certificate issuer: /CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Certificate serial: 0196741D8C47B69513B863F21236BDED71E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
Manifest number: 150E
Signing time: Sat 26 Apr 2025 22:00:15 +0000
Manifest this update: Sat 26 Apr 2025 22:00:15 +0000
Manifest next update: Sun 27 Apr 2025 22:00:15 +0000
Files and hashes: 1: 20jWiNa9lpRbt6Z9H39OkMSzDj0.roa (hash: ycgKPEXuVp6S/jba9lnIlg52vzn3ozObwHjih623JU0=)
2: Z6HFahWFFQZoRakyttCStfHboiI.roa (hash: Zw2JYkod1FG2LmToml/rEnl9fqbRcjF21ljWrCU4l0U=)
3: uQMr2xKMhuALIcd5WagBHEDQZQw.crl (hash: 5XkEEUO1schIS2qrNLV/iZbSLMx0l/8tzW4riKmR7wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:8c:47:b6:95:13:b8:63:f2:12:36:bd:ed:71:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Validity
Not Before: Apr 26 22:00:15 2025 GMT
Not After : Apr 27 22:00:15 2025 GMT
Subject: CN=aaa2fbe75fc5aeed183ea82a393b7a60f5b0e1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:84:b7:e0:d5:7a:44:65:36:be:ed:b8:15:11:
70:48:a7:18:6c:63:e8:ac:b6:68:aa:eb:3c:df:47:
6d:43:bc:7a:65:be:f7:49:58:04:bc:d2:6e:86:75:
2e:73:4b:3f:a0:ee:ea:36:6f:9f:bb:fc:75:48:f1:
44:f6:aa:82:5c:53:03:e2:8e:c8:6d:fd:49:82:7b:
b1:b4:f4:14:17:3b:3a:fc:3b:92:47:ab:10:c1:51:
a9:24:5e:42:a4:ca:f2:d8:32:46:86:06:78:5b:70:
b6:5e:8e:11:92:bd:c5:82:0f:21:2d:14:56:5e:f5:
c1:dc:34:66:13:6f:60:3f:e0:0a:11:ec:6f:8a:1b:
33:06:8c:61:94:c5:dc:5c:2d:1b:49:14:44:9e:54:
3f:1b:c5:0d:ba:77:69:ba:62:71:ff:4a:a4:d8:91:
cf:90:f3:4c:e4:b1:22:e8:38:db:f5:e6:d6:a4:29:
1a:c3:44:20:c5:01:26:06:28:9e:cb:0a:1f:bc:89:
d8:ce:db:80:55:49:db:bd:02:fa:71:07:1e:d4:c8:
d1:2a:88:16:e8:81:81:e2:65:7f:dd:fb:e5:33:9c:
45:fc:fc:9d:31:e2:20:10:c2:58:9b:1b:99:ff:e7:
c4:57:61:cf:af:24:c2:e3:ad:dd:64:45:c7:af:81:
34:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A2:FB:E7:5F:C5:AE:ED:18:3E:A8:2A:39:3B:7A:60:F5:B0:E1:DB
X509v3 Authority Key Identifier:
keyid:B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ef:50:d5:85:09:24:40:09:ee:e7:bf:45:b4:f7:4f:5a:b5:
c2:e3:1c:fb:cb:34:b8:77:25:97:ec:ac:a7:3a:46:29:6b:3b:
8f:e1:59:53:32:ac:ea:b8:a1:f3:1d:e6:e7:31:78:16:18:a5:
8f:1f:c2:eb:96:4f:d5:80:1a:48:39:15:c6:a9:11:cb:29:a8:
03:5e:98:2c:b3:1b:09:57:1b:83:c8:3c:57:fb:c1:c4:30:e0:
72:d2:75:d7:42:2b:7b:25:73:c4:fb:f7:c2:03:f4:f5:86:3e:
4a:27:bd:b8:2c:48:90:e6:9d:21:79:61:ef:b4:e6:ac:f5:bb:
df:6f:8f:6d:32:f0:d6:cf:be:9f:fe:7b:0f:7c:bb:c7:d2:90:
52:8e:9d:2b:a2:39:b2:c0:af:e1:37:0a:17:58:81:fc:c7:13:
85:09:04:ac:97:fc:4b:fa:e5:ae:7a:a4:92:b8:f7:8e:45:44:
e2:75:23:c1:5f:16:4d:3f:22:3f:42:23:3d:3a:14:fe:0c:ea:
1d:60:65:7a:dd:9a:4a:e9:79:b5:8f:42:cc:42:5b:6e:22:5d:
37:bc:33:39:98:5c:48:fb:98:8f:72:e5:63:53:b2:97:41:ac:
f1:b9:7b:7a:fe:39:9c:c8:de:2f:45:6e:d8:4d:9d:fe:6a:71:
66:85:2d:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0HYxHtpUTuGPyEja97XHpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MDMyYmRiMTI4Yzg2ZTAwYjIxYzc3OTU5YTgwMTFjNDBk
MDY1MGMwHhcNMjUwNDI2MjIwMDE1WhcNMjUwNDI3MjIwMDE1WjAzMTEwLwYDVQQD
EyhhYWEyZmJlNzVmYzVhZWVkMTgzZWE4MmEzOTNiN2E2MGY1YjBlMWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYS34NV6RGU2vu24FRFwSKcYbGPo
rLZoqus830dtQ7x6Zb73SVgEvNJuhnUuc0s/oO7qNm+fu/x1SPFE9qqCXFMD4o7I
bf1JgnuxtPQUFzs6/DuSR6sQwVGpJF5CpMry2DJGhgZ4W3C2Xo4Rkr3Fgg8hLRRW
XvXB3DRmE29gP+AKEexvihszBoxhlMXcXC0bSRREnlQ/G8UNundpumJx/0qk2JHP
kPNM5LEi6Djb9ebWpCkaw0QgxQEmBiieywofvInYztuAVUnbvQL6cQce1MjRKogW
6IGB4mV/3fvlM5xF/PydMeIgEMJYmxuZ/+fEV2HPryTC463dZEXHr4E0YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKqi++dfxa7tGD6oKjk7emD1sOHbMB8GA1UdIwQY
MBaAFLkDK9sSjIbgCyHHeVmoARxA0GUMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVFNcjJ4S01odUFMSWNkNVdhZ0JIRURRWlF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9iY2IwM2QtMWMxMS00NTE2LWE4OGYt
ZmU4NDZmNzVkMTcwLzEvdVFNcjJ4S01odUFMSWNkNVdhZ0JIRURRWlF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9iY2IwM2QtMWMxMS00NTE2LWE4OGYtZmU4NDZmNzVkMTcw
LzEvdVFNcjJ4S01odUFMSWNkNVdhZ0JIRURRWlF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASe9Q1YUJ
JEAJ7ue/RbT3T1q1wuMc+8s0uHcll+yspzpGKWs7j+FZUzKs6rih8x3m5zF4Fhil
jx/C65ZP1YAaSDkVxqkRyymoA16YLLMbCVcbg8g8V/vBxDDgctJ110IreyVzxPv3
wgP09YY+Sie9uCxIkOadIXlh77TmrPW732+PbTLw1s++n/57D3y7x9KQUo6dK6I5
ssCv4TcKF1iB/McThQkErJf8S/rlrnqkkrj3jkVE4nUjwV8WTT8iP0IjPToU/gzq
HWBlet2aSul5tY9CzEJbbiJdN7wzOZhcSPuYj3LlY1Oyl0Gs8bl7ev45nMjeL0Vu
2E2d/mpxZoUtEw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:54:01 2025 by rpki-client