Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
File: UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft (raw, json)
Hash identifier: cdqNPUGWx3oQy7C50d2mPbWHn4/7qDbhcZcHrTwbO68=
Subject key identifier: 17:25:A0:10:7B:08:91:57:36:07:69:D9:64:C3:83:3C:1C:26:A1:68
Authority key identifier: 50:7E:58:2A:DC:93:69:DA:8A:E8:5D:D9:35:74:01:23:08:1C:7E:ED
Certificate issuer: /CN=507e582adc9369da8ae85dd935740123081c7eed
Certificate serial: 01968B4AC89F2A1509DD54111E21EF0B0C34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
Manifest number: 07D4
Signing time: Thu 01 May 2025 10:00:56 +0000
Manifest this update: Thu 01 May 2025 10:00:56 +0000
Manifest next update: Fri 02 May 2025 10:00:56 +0000
Files and hashes: 1: 44dYsozRYENf4ubTHCTQ7hNPzoo.roa (hash: 9g/dOiyadhvu9EEQPUkgGuJzL/QnwS0iPrR2k3LdJdM=)
2: Akrk9AV522kb6SaYDeM3WfYPO7o.roa (hash: ZHsHEgFgctqjdlPRyjI2Dyt+c3//fPJCvQgY9mUz8Ck=)
3: UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl (hash: Ddl9dxa73eYdF9Ie8Tdir6sYUom0Mx9k17MYNoPjKdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:4a:c8:9f:2a:15:09:dd:54:11:1e:21:ef:0b:0c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=507e582adc9369da8ae85dd935740123081c7eed
Validity
Not Before: May 1 10:00:56 2025 GMT
Not After : May 2 10:00:56 2025 GMT
Subject: CN=1725a0107b089157360769d964c3833c1c26a168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ff:07:31:87:58:e1:85:08:aa:a2:a0:77:bd:
27:56:50:10:e5:57:1c:e2:1d:1a:29:98:a8:82:07:
d1:cf:40:e8:3b:8e:b5:85:64:d1:94:8e:f7:96:4f:
02:cb:bc:eb:d4:f7:1c:74:06:d7:54:ab:c2:ed:d9:
3f:2c:a3:0f:f0:11:ae:0e:8d:63:23:e6:8f:88:c2:
e3:43:9a:40:25:f1:b0:c5:a3:32:04:2f:84:e4:16:
f4:fa:70:b0:91:7b:a5:2a:08:e8:d7:74:7f:c9:fc:
e9:18:04:38:6b:1d:a6:22:be:89:92:73:ea:06:23:
60:3d:97:5d:c2:ff:fd:8e:fb:a1:54:cd:f1:21:5e:
80:7b:03:a7:2e:40:50:92:b3:f6:31:8a:3c:9b:9a:
dd:fc:b2:50:61:a4:3c:45:7a:7e:bc:95:16:13:fb:
22:d2:03:3a:1f:a3:34:6b:a0:07:b4:28:7f:a6:6f:
7e:da:78:3a:08:4b:a0:29:8c:8f:3c:65:43:43:c1:
4a:e2:82:68:b9:c2:0c:c2:c0:6e:ca:c0:ad:b0:2b:
29:09:4d:47:bc:02:a6:3f:2f:f1:cd:41:e1:1d:23:
7a:80:89:4d:1e:58:ec:a2:4c:16:47:29:63:d0:a3:
95:cd:26:64:c5:13:60:4f:2d:7c:10:3c:b6:23:1e:
0b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:25:A0:10:7B:08:91:57:36:07:69:D9:64:C3:83:3C:1C:26:A1:68
X509v3 Authority Key Identifier:
keyid:50:7E:58:2A:DC:93:69:DA:8A:E8:5D:D9:35:74:01:23:08:1C:7E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:8b:dc:96:ac:fa:22:fe:34:c8:73:f7:b7:00:f7:c1:d0:7e:
b4:98:47:09:fd:8b:ba:8d:29:a2:dc:be:3d:ac:7d:41:39:63:
84:6a:e1:eb:13:f5:40:ce:86:74:70:09:a8:0b:b3:24:95:ee:
e5:2f:91:02:9d:c3:ab:35:d0:dc:24:c0:aa:bd:82:7b:75:7a:
46:f0:0d:81:1e:53:cb:28:aa:07:63:07:e4:7f:56:b8:cb:5d:
4b:6a:0f:59:78:b5:eb:12:c1:15:c3:98:8b:d4:e2:e3:bc:af:
01:75:67:ff:82:3e:79:af:1d:2e:38:49:42:57:e4:9e:a1:9e:
d7:95:56:b4:78:3b:9c:e9:bc:d4:1a:fb:43:c3:f9:c4:f4:c4:
06:e1:03:93:ef:8e:f2:73:e5:c3:8e:d6:8b:59:52:37:02:f6:
35:94:84:e9:3b:ab:a4:dc:a9:65:81:9d:cc:85:0c:54:d1:1b:
38:a6:ae:a0:f6:65:a2:7f:0c:77:02:e4:2f:b8:f6:6a:90:46:
09:f5:db:33:1f:02:0e:ec:0f:a6:08:29:d6:14:5a:c2:8c:27:
c2:87:32:18:90:fa:da:ce:fb:54:60:9c:e1:e9:8b:0f:62:ac:
17:a4:39:8e:86:66:4e:e6:41:ab:8b:a7:a9:f1:22:46:6b:40:
fa:23:4d:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaLSsifKhUJ3VQRHiHvCww0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwN2U1ODJhZGM5MzY5ZGE4YWU4NWRkOTM1NzQwMTIzMDgx
YzdlZWQwHhcNMjUwNTAxMTAwMDU2WhcNMjUwNTAyMTAwMDU2WjAzMTEwLwYDVQQD
EygxNzI1YTAxMDdiMDg5MTU3MzYwNzY5ZDk2NGMzODMzYzFjMjZhMTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzf8HMYdY4YUIqqKgd70nVlAQ5Vcc
4h0aKZioggfRz0DoO461hWTRlI73lk8Cy7zr1PccdAbXVKvC7dk/LKMP8BGuDo1j
I+aPiMLjQ5pAJfGwxaMyBC+E5Bb0+nCwkXulKgjo13R/yfzpGAQ4ax2mIr6JknPq
BiNgPZddwv/9jvuhVM3xIV6AewOnLkBQkrP2MYo8m5rd/LJQYaQ8RXp+vJUWE/si
0gM6H6M0a6AHtCh/pm9+2ng6CEugKYyPPGVDQ8FK4oJoucIMwsBuysCtsCspCU1H
vAKmPy/xzUHhHSN6gIlNHljsokwWRylj0KOVzSZkxRNgTy18EDy2Ix4LeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcloBB7CJFXNgdp2WTDgzwcJqFoMB8GA1UdIwQY
MBaAFFB+WCrck2naiuhd2TV0ASMIHH7tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUg1WUt0eVRhZHFLNkYzWk5YUUJJd2djZnUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS82ZWQ0MzQtY2Q1MS00MTUyLWFhNDMt
MDU2YmFlMjcyODhlLzEvVUg1WUt0eVRhZHFLNkYzWk5YUUJJd2djZnUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS82ZWQ0MzQtY2Q1MS00MTUyLWFhNDMtMDU2YmFlMjcyODhl
LzEvVUg1WUt0eVRhZHFLNkYzWk5YUUJJd2djZnUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ4vclqz6
Iv40yHP3twD3wdB+tJhHCf2Luo0poty+Pax9QTljhGrh6xP1QM6GdHAJqAuzJJXu
5S+RAp3DqzXQ3CTAqr2Ce3V6RvANgR5TyyiqB2MH5H9WuMtdS2oPWXi16xLBFcOY
i9Ti47yvAXVn/4I+ea8dLjhJQlfknqGe15VWtHg7nOm81Br7Q8P5xPTEBuEDk++O
8nPlw47Wi1lSNwL2NZSE6TurpNypZYGdzIUMVNEbOKauoPZlon8MdwLkL7j2apBG
CfXbMx8CDuwPpggp1hRawownwocyGJD62s77VGCc4emLD2KsF6Q5joZmTuZBq4un
qfEiRmtA+iNNLw==
-----END CERTIFICATE-----
Generated at Thu May 1 19:23:59 2025 by rpki-client