Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
File: UuQA66N5CiRc2rS05nu01gu-e0A.mft (raw, json)
Hash identifier: TvbmFGiHzp/5pb4dcSiNQj6TagBlWOrzu6t4OAduLWw=
Subject key identifier: 4E:31:0E:A9:C1:7B:E4:39:38:4E:51:BA:01:1F:F5:05:DD:64:C2:F1
Authority key identifier: 52:E4:00:EB:A3:79:0A:24:5C:DA:B4:B4:E6:7B:B4:D6:0B:BE:7B:40
Certificate issuer: /CN=52e400eba3790a245cdab4b4e67bb4d60bbe7b40
Certificate serial: 0196759E5581F8FAFF3C1A365E475821BC55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuQA66N5CiRc2rS05nu01gu-e0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
Manifest number: 0D64
Signing time: Sun 27 Apr 2025 05:00:32 +0000
Manifest this update: Sun 27 Apr 2025 05:00:32 +0000
Manifest next update: Mon 28 Apr 2025 05:00:32 +0000
Files and hashes: 1: UuQA66N5CiRc2rS05nu01gu-e0A.crl (hash: vuem0KtDPhs58QgVDsQL/9VLwsmQOuYG/qopG894wmE=)
2: rtVpNZa3L_NWvprN4f-UPAZwfTo.roa (hash: 2HzqWuMhkSfDBFXNVGHFl9K4DvsafbSLLfoHlblLKUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/UuQA66N5CiRc2rS05nu01gu-e0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:55:81:f8:fa:ff:3c:1a:36:5e:47:58:21:bc:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e400eba3790a245cdab4b4e67bb4d60bbe7b40
Validity
Not Before: Apr 27 05:00:32 2025 GMT
Not After : Apr 28 05:00:32 2025 GMT
Subject: CN=4e310ea9c17be439384e51ba011ff505dd64c2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2b:71:8d:d2:f8:71:24:63:34:be:eb:fa:a5:
9c:ff:c8:e2:cc:21:6b:71:9a:a2:b9:dd:14:c4:0a:
79:f7:0c:12:f4:49:93:f3:e6:87:87:4e:a0:65:4b:
2d:76:82:5c:6d:84:16:7a:56:a6:d0:99:f6:cb:b7:
27:9d:0e:54:9e:55:df:1b:ac:36:96:da:86:95:5b:
c5:c8:dd:7e:d9:03:32:b3:a0:f5:a2:00:83:91:17:
aa:0b:f5:b1:fe:9d:67:4c:29:8d:05:c4:e4:3b:10:
63:48:64:4a:2c:ce:0d:85:58:61:64:19:d4:f5:5a:
95:ce:2c:4d:a5:33:c4:e5:6f:9c:c4:e9:dd:57:8e:
ef:c8:5f:01:a7:19:37:49:30:47:6f:9f:be:f7:f0:
44:69:4c:04:46:91:37:94:b8:51:a3:c8:08:6f:61:
a8:bc:4b:df:1e:18:ec:b6:2d:53:c8:57:4f:5d:aa:
f3:ba:0f:37:57:83:1e:40:d1:b9:d0:4e:15:39:a3:
81:14:1b:7c:b8:d8:39:40:2c:0f:b0:33:9b:1a:3d:
a1:20:b8:41:51:2b:4b:83:f7:3d:d0:7b:8d:d1:c8:
11:7d:3e:72:fd:ff:37:8b:73:dc:7d:e2:66:d7:34:
40:2b:fd:45:3e:20:2a:30:33:a7:92:47:90:45:2b:
57:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:31:0E:A9:C1:7B:E4:39:38:4E:51:BA:01:1F:F5:05:DD:64:C2:F1
X509v3 Authority Key Identifier:
keyid:52:E4:00:EB:A3:79:0A:24:5C:DA:B4:B4:E6:7B:B4:D6:0B:BE:7B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuQA66N5CiRc2rS05nu01gu-e0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:76:4f:72:3e:05:74:68:9d:2c:5f:b8:4d:01:1a:3d:03:25:
66:a8:ec:ab:13:06:2a:9b:66:27:89:5e:60:81:52:76:67:da:
0b:ea:fc:51:96:70:93:06:20:57:42:5e:e7:37:81:09:69:8e:
85:10:6b:ce:e2:34:0f:f7:ed:62:dd:7a:7b:6b:51:9d:95:30:
9a:14:2d:28:88:67:ed:54:a1:06:6d:27:9b:b3:6d:a5:9b:de:
26:de:87:ea:9e:2e:43:d2:dd:76:b0:fb:91:6e:a4:c1:8b:8b:
bf:2d:1f:a1:6f:0a:9b:10:51:c1:83:cc:0d:bb:4f:36:66:21:
90:70:1f:d1:6d:08:31:49:26:d6:be:a6:30:59:95:40:b0:d9:
a8:1b:c3:d0:a4:b7:fe:61:d7:92:bd:dd:e1:3a:5b:f2:c0:ef:
12:ea:9b:20:d1:71:d8:d0:7f:f0:2e:60:d4:23:d9:bc:5e:39:
3d:0d:3a:e6:25:10:93:35:42:d6:b4:55:e5:d4:fd:cf:6a:f9:
b9:8d:65:f1:d9:b6:59:92:54:cd:53:0e:e8:e7:54:6e:74:e2:
ee:80:21:bf:ea:6f:ad:a1:63:68:90:a9:52:86:de:c1:ca:65:
ab:8e:1f:62:f6:7d:23:39:c8:91:40:d0:8d:3e:ba:11:da:3a:
48:f1:1e:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1nlWB+Pr/PBo2XkdYIbxVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZTQwMGViYTM3OTBhMjQ1Y2RhYjRiNGU2N2JiNGQ2MGJi
ZTdiNDAwHhcNMjUwNDI3MDUwMDMyWhcNMjUwNDI4MDUwMDMyWjAzMTEwLwYDVQQD
Eyg0ZTMxMGVhOWMxN2JlNDM5Mzg0ZTUxYmEwMTFmZjUwNWRkNjRjMmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArytxjdL4cSRjNL7r+qWc/8jizCFr
cZqiud0UxAp59wwS9EmT8+aHh06gZUstdoJcbYQWelam0Jn2y7cnnQ5UnlXfG6w2
ltqGlVvFyN1+2QMys6D1ogCDkReqC/Wx/p1nTCmNBcTkOxBjSGRKLM4NhVhhZBnU
9VqVzixNpTPE5W+cxOndV47vyF8Bpxk3STBHb5++9/BEaUwERpE3lLhRo8gIb2Go
vEvfHhjsti1TyFdPXarzug83V4MeQNG50E4VOaOBFBt8uNg5QCwPsDObGj2hILhB
UStLg/c90HuN0cgRfT5y/f83i3PcfeJm1zRAK/1FPiAqMDOnkkeQRStXCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4xDqnBe+Q5OE5RugEf9QXdZMLxMB8GA1UdIwQY
MBaAFFLkAOujeQokXNq0tOZ7tNYLvntAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXVRQTY2TjVDaVJjMnJTMDVudTAxZ3UtZTBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lM2QxOWYtMjhmYi00NWNiLWFmZTAt
Zjk3YWQzMDQ0ZTAyLzEvVXVRQTY2TjVDaVJjMnJTMDVudTAxZ3UtZTBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9lM2QxOWYtMjhmYi00NWNiLWFmZTAtZjk3YWQzMDQ0ZTAy
LzEvVXVRQTY2TjVDaVJjMnJTMDVudTAxZ3UtZTBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp3ZPcj4F
dGidLF+4TQEaPQMlZqjsqxMGKptmJ4leYIFSdmfaC+r8UZZwkwYgV0Je5zeBCWmO
hRBrzuI0D/ftYt16e2tRnZUwmhQtKIhn7VShBm0nm7NtpZveJt6H6p4uQ9LddrD7
kW6kwYuLvy0foW8KmxBRwYPMDbtPNmYhkHAf0W0IMUkm1r6mMFmVQLDZqBvD0KS3
/mHXkr3d4Tpb8sDvEuqbINFx2NB/8C5g1CPZvF45PQ065iUQkzVC1rRV5dT9z2r5
uY1l8dm2WZJUzVMO6OdUbnTi7oAhv+pvraFjaJCpUobewcplq44fYvZ9IznIkUDQ
jT66Edo6SPEeGg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:54:58 2025 by rpki-client