Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
File: ueLcI0DFMJtj66I8--fu0Rt0r0c.mft (raw, json)
Hash identifier: GY3yB1V2iY0rywDC195UO0hueLwTLy1VIVSOWCJ1SVs=
Subject key identifier: 82:07:F2:70:5E:CE:23:7A:C0:1B:6C:47:EA:32:EC:18:BD:06:ED:F6
Authority key identifier: B9:E2:DC:23:40:C5:30:9B:63:EB:A2:3C:FB:E7:EE:D1:1B:74:AF:47
Certificate issuer: /CN=b9e2dc2340c5309b63eba23cfbe7eed11b74af47
Certificate serial: 01967C0E62DC4DEF0BB1B97E1692069B6206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
Manifest number: 0E16
Signing time: Mon 28 Apr 2025 11:00:39 +0000
Manifest this update: Mon 28 Apr 2025 11:00:39 +0000
Manifest next update: Tue 29 Apr 2025 11:00:39 +0000
Files and hashes: 1: B_TjvpIb0yLFS65mk6ISqfofzjA.roa (hash: q5/nXiQuX9jf7AxyuDuG4cnRKI4OPuttYtvlaMLZtB8=)
2: EeH5wT6Wd2uRWfhKCYRFmXtYUyE.roa (hash: 1z7kJSxRufE+Rr3Vk/FEsQraw1poJT+1o6mmpJ+VP7o=)
3: ueLcI0DFMJtj66I8--fu0Rt0r0c.crl (hash: Nd7Zr7ssQxO66JNVprdyZtb8k5ArvV/X2nyZuDGX4vY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:0e:62:dc:4d:ef:0b:b1:b9:7e:16:92:06:9b:62:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e2dc2340c5309b63eba23cfbe7eed11b74af47
Validity
Not Before: Apr 28 11:00:39 2025 GMT
Not After : Apr 29 11:00:39 2025 GMT
Subject: CN=8207f2705ece237ac01b6c47ea32ec18bd06edf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:63:2a:b1:8c:c9:48:4b:78:9b:26:36:d5:
b2:62:31:d1:78:14:39:97:9c:9b:c9:5c:66:8e:3f:
37:c3:fd:70:00:50:d5:f0:88:bb:16:55:8d:a2:13:
38:3e:d5:19:eb:a6:b5:cc:ef:8e:de:10:a3:ec:76:
62:ed:3c:12:ec:e7:58:5d:ee:31:bc:f2:10:f1:2a:
ad:d9:6e:cc:2f:1e:66:c5:ad:78:c1:ac:bd:35:e5:
88:0a:4c:2b:10:b0:d6:9f:3c:24:8f:d3:08:b4:e0:
ef:ef:1f:cc:e1:ad:87:4f:08:c2:bf:be:34:dc:98:
0d:bf:c0:27:c3:56:2a:b3:ad:bd:5c:ea:da:30:17:
6a:bb:49:59:ad:d6:42:ef:33:84:98:95:72:24:2a:
a0:ae:ee:44:71:51:ab:42:a4:b7:0f:75:07:bc:80:
a4:27:93:fc:41:da:ab:f7:52:fb:69:91:e0:68:33:
64:d0:12:fb:27:e0:d0:3d:0d:b3:27:f5:f1:23:46:
0b:ce:76:50:e3:ca:3a:4c:c5:8b:bd:d3:dd:d0:87:
c3:a5:84:28:ba:08:70:ac:91:36:e2:0c:58:28:c0:
d5:3f:5c:c0:1b:63:33:cb:51:30:a8:25:32:b9:62:
8a:23:33:33:46:44:e1:7d:14:b6:a0:30:af:65:0b:
a0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:07:F2:70:5E:CE:23:7A:C0:1B:6C:47:EA:32:EC:18:BD:06:ED:F6
X509v3 Authority Key Identifier:
keyid:B9:E2:DC:23:40:C5:30:9B:63:EB:A2:3C:FB:E7:EE:D1:1B:74:AF:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:0d:4a:55:79:1e:fb:1d:d7:39:ce:00:e9:5c:0f:c6:32:c9:
4f:7c:89:03:42:ce:1b:aa:ff:12:0d:13:89:1a:39:2c:fa:23:
a1:2d:d5:05:4a:88:65:46:f4:0a:7a:61:18:e8:12:bb:77:b7:
22:9a:83:66:b8:b7:cb:0d:23:85:09:49:8d:80:67:38:62:fc:
5c:ce:52:01:21:91:91:7b:ce:36:94:80:ce:49:d8:35:e4:a3:
0c:da:e0:69:d0:18:e7:2a:07:64:1a:68:cd:66:7f:17:4c:9a:
6f:2f:11:29:b2:b6:4e:90:c6:03:ec:c7:1b:7b:aa:e6:47:04:
8a:07:51:8c:20:35:57:29:78:26:01:07:48:20:81:fb:78:89:
9a:3b:f1:17:c7:26:16:89:ec:da:33:49:a5:90:69:7e:fd:3c:
86:05:8d:5e:b6:2e:ba:9e:e3:6c:bc:b8:13:5c:2d:23:97:f9:
ae:3d:2c:2d:cc:94:07:46:82:13:7e:0a:4c:11:13:fd:1e:cb:
d6:12:1e:8e:cb:b9:ef:25:eb:4c:10:ec:d5:dc:0a:e1:a9:95:
47:78:72:52:ad:cd:34:a2:18:3a:86:8c:df:9c:70:54:af:07:
8c:40:b8:0d:e7:1a:cf:2e:d6:b4:cc:99:0b:2c:d7:1b:ce:f3:
97:83:4b:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ8DmLcTe8Lsbl+FpIGm2IGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZTJkYzIzNDBjNTMwOWI2M2ViYTIzY2ZiZTdlZWQxMWI3
NGFmNDcwHhcNMjUwNDI4MTEwMDM5WhcNMjUwNDI5MTEwMDM5WjAzMTEwLwYDVQQD
Eyg4MjA3ZjI3MDVlY2UyMzdhYzAxYjZjNDdlYTMyZWMxOGJkMDZlZGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubBjKrGMyUhLeJsmNtWyYjHReBQ5
l5ybyVxmjj83w/1wAFDV8Ii7FlWNohM4PtUZ66a1zO+O3hCj7HZi7TwS7OdYXe4x
vPIQ8Sqt2W7MLx5mxa14way9NeWICkwrELDWnzwkj9MItODv7x/M4a2HTwjCv740
3JgNv8Anw1Yqs629XOraMBdqu0lZrdZC7zOEmJVyJCqgru5EcVGrQqS3D3UHvICk
J5P8Qdqr91L7aZHgaDNk0BL7J+DQPQ2zJ/XxI0YLznZQ48o6TMWLvdPd0IfDpYQo
ughwrJE24gxYKMDVP1zAG2Mzy1EwqCUyuWKKIzMzRkThfRS2oDCvZQug8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIH8nBeziN6wBtsR+oy7Bi9Bu32MB8GA1UdIwQY
MBaAFLni3CNAxTCbY+uiPPvn7tEbdK9HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWVMY0kwREZNSnRqNjZJOC0tZnUwUnQwcjBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny82Zjk5ZDItYWQwNS00Y2ZjLTlhNWUt
OWNiZWRjZWM4NmQ2LzEvdWVMY0kwREZNSnRqNjZJOC0tZnUwUnQwcjBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny82Zjk5ZDItYWQwNS00Y2ZjLTlhNWUtOWNiZWRjZWM4NmQ2
LzEvdWVMY0kwREZNSnRqNjZJOC0tZnUwUnQwcjBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYw1KVXke
+x3XOc4A6VwPxjLJT3yJA0LOG6r/Eg0TiRo5LPojoS3VBUqIZUb0CnphGOgSu3e3
IpqDZri3yw0jhQlJjYBnOGL8XM5SASGRkXvONpSAzknYNeSjDNrgadAY5yoHZBpo
zWZ/F0yaby8RKbK2TpDGA+zHG3uq5kcEigdRjCA1Vyl4JgEHSCCB+3iJmjvxF8cm
Fons2jNJpZBpfv08hgWNXrYuup7jbLy4E1wtI5f5rj0sLcyUB0aCE34KTBET/R7L
1hIejsu57yXrTBDs1dwK4amVR3hyUq3NNKIYOoaM35xwVK8HjEC4Decazy7WtMyZ
CyzXG87zl4NLPw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:13:33 2025 by rpki-client