Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
File: uHLaD5xsVoaj257hJKmQQrCogtE.mft (raw, json)
Hash identifier: BhLN6nitzN/5pbthiltFvCGh5gc501uCMJsF8UQ4ngM=
Subject key identifier: 78:3D:50:DF:DA:3D:6C:BB:5C:DA:25:DA:EB:9F:A2:27:E9:B9:67:C2
Authority key identifier: B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1
Certificate issuer: /CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1
Certificate serial: 019699AB36CCC19886DC3A4FE60087FC047A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
Manifest number: 1520
Signing time: Sun 04 May 2025 05:00:56 +0000
Manifest this update: Sun 04 May 2025 05:00:56 +0000
Manifest next update: Mon 05 May 2025 05:00:56 +0000
Files and hashes: 1: GwSclZbmW8WnUrygOTuyHlhOctc.roa (hash: 90yBE3rANCosAdjpMcBIDjsdlrAf7rrR2qzNpEkH8d8=)
2: RfhpUZchJkPP_5lxJHpNkmuGgNY.roa (hash: RyK9ORXOIgQu7p+VQmGJ1kdgaVVGVyFljq/xoyhLEM0=)
3: XK_-DoYkAq0FQtHBeHEZBiwTbtU.roa (hash: oLiyfMEZ+8NuCZuPjPWFi0zBy3xSJ1joH9/Uajj7btQ=)
4: uHLaD5xsVoaj257hJKmQQrCogtE.crl (hash: Hf9dWow+wTFW2XJBZ0MzXH1QehWbro+91l4hxjVCBAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:99:ab:36:cc:c1:98:86:dc:3a:4f:e6:00:87:fc:04:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1
Validity
Not Before: May 4 05:00:56 2025 GMT
Not After : May 5 05:00:56 2025 GMT
Subject: CN=783d50dfda3d6cbb5cda25daeb9fa227e9b967c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f1:f3:0b:95:bb:99:38:06:7c:bc:1f:82:6e:
df:7f:8d:46:40:f5:f9:87:69:38:90:7e:0a:9a:99:
07:c8:92:08:44:bc:87:e4:1e:ab:5b:17:13:9c:4c:
b3:c7:25:10:29:79:0b:29:50:a5:88:63:4f:c9:f1:
47:ac:81:86:e8:61:7f:55:85:c0:51:6a:0d:2e:60:
e3:cf:0b:60:b7:16:e6:f6:83:cd:ec:24:e6:94:ac:
b2:e2:e3:d0:e5:3b:b5:70:b5:90:b3:87:c6:9e:0a:
15:24:3a:81:8e:20:29:4f:ca:0f:0d:28:b4:9e:8f:
76:4a:f4:42:b0:06:96:32:bd:19:c9:09:af:f9:9a:
04:b4:41:67:74:ef:9e:74:cd:e4:25:47:78:fc:fa:
29:05:28:67:b2:e1:39:12:20:2b:8d:5b:5d:22:37:
ad:f0:d6:a2:29:c1:2b:62:6d:9f:5c:b7:99:a4:ef:
78:e6:7b:8e:bb:5e:32:90:e2:f0:a3:c2:f6:c1:83:
f7:39:1e:f4:04:82:a9:9f:11:ce:d0:82:a0:3c:2c:
ab:03:60:4d:de:2d:31:df:34:83:16:49:b6:7c:de:
ed:33:5b:d1:01:0d:e3:cf:13:b0:0f:2b:b0:25:f0:
15:32:4d:a8:32:f8:5e:8c:2a:ad:dd:6a:54:a8:67:
ab:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3D:50:DF:DA:3D:6C:BB:5C:DA:25:DA:EB:9F:A2:27:E9:B9:67:C2
X509v3 Authority Key Identifier:
keyid:B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:9b:f9:1f:89:01:c8:e5:39:c0:c9:f4:a3:56:67:a4:20:92:
a6:78:4b:35:4e:67:e8:5f:9f:99:4b:e1:10:84:1d:90:0d:98:
92:d3:1a:1d:55:0c:c4:0b:7d:ff:43:27:5f:14:e9:f1:35:a6:
b2:76:65:b8:60:e0:af:b8:72:da:67:8a:ac:e2:7c:83:d8:cd:
b6:91:41:1a:fd:64:c4:5e:99:fa:14:52:5f:b6:8a:65:3d:1a:
de:30:28:e0:3b:3b:68:e3:ab:96:f3:b9:94:14:51:de:dc:b2:
c2:88:8f:f3:fa:d4:c7:d4:6c:e7:79:56:c2:06:4b:d7:45:21:
0d:00:0c:be:00:88:d2:d6:6b:09:dd:9a:09:8c:fc:c0:ec:ec:
fc:2e:c8:b2:83:f5:df:ab:e0:87:7a:f1:e1:f1:41:0a:3b:4e:
98:fc:b1:17:fd:70:45:f7:e5:7c:42:fb:88:11:35:ff:33:c8:
55:a3:e5:a7:2c:76:43:69:88:34:21:e9:84:c6:bd:d1:20:07:
3d:6b:65:6b:0d:7c:c8:32:d5:59:0d:5a:3a:54:0a:71:50:a5:
85:84:7d:a5:0a:fc:f0:48:89:41:be:28:84:df:69:54:a5:a9:
d6:8a:e8:8a:17:62:ab:cf:2b:a6:b9:b7:99:55:46:c1:9f:18:
70:e3:49:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaZqzbMwZiG3DpP5gCH/AR6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NzJkYTBmOWM2YzU2ODZhM2RiOWVlMTI0YTk5MDQyYjBh
ODgyZDEwHhcNMjUwNTA0MDUwMDU2WhcNMjUwNTA1MDUwMDU2WjAzMTEwLwYDVQQD
Eyg3ODNkNTBkZmRhM2Q2Y2JiNWNkYTI1ZGFlYjlmYTIyN2U5Yjk2N2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/HzC5W7mTgGfLwfgm7ff41GQPX5
h2k4kH4KmpkHyJIIRLyH5B6rWxcTnEyzxyUQKXkLKVCliGNPyfFHrIGG6GF/VYXA
UWoNLmDjzwtgtxbm9oPN7CTmlKyy4uPQ5Tu1cLWQs4fGngoVJDqBjiApT8oPDSi0
no92SvRCsAaWMr0ZyQmv+ZoEtEFndO+edM3kJUd4/PopBShnsuE5EiArjVtdIjet
8NaiKcErYm2fXLeZpO945nuOu14ykOLwo8L2wYP3OR70BIKpnxHO0IKgPCyrA2BN
3i0x3zSDFkm2fN7tM1vRAQ3jzxOwDyuwJfAVMk2oMvhejCqt3WpUqGer3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHg9UN/aPWy7XNol2uufoifpuWfCMB8GA1UdIwQY
MBaAFLhy2g+cbFaGo9ue4SSpkEKwqILRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUhMYUQ1eHNWb2FqMjU3aEpLbVFRckNvZ3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yNzE2ZWMtNTY1Ny00ZjU2LThmNDMt
ZTIzMTAzYTg4MDUyLzEvdUhMYUQ1eHNWb2FqMjU3aEpLbVFRckNvZ3RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8yNzE2ZWMtNTY1Ny00ZjU2LThmNDMtZTIzMTAzYTg4MDUy
LzEvdUhMYUQ1eHNWb2FqMjU3aEpLbVFRckNvZ3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW5v5H4kB
yOU5wMn0o1ZnpCCSpnhLNU5n6F+fmUvhEIQdkA2YktMaHVUMxAt9/0MnXxTp8TWm
snZluGDgr7hy2meKrOJ8g9jNtpFBGv1kxF6Z+hRSX7aKZT0a3jAo4Ds7aOOrlvO5
lBRR3tyywoiP8/rUx9Rs53lWwgZL10UhDQAMvgCI0tZrCd2aCYz8wOzs/C7IsoP1
36vgh3rx4fFBCjtOmPyxF/1wRfflfEL7iBE1/zPIVaPlpyx2Q2mINCHphMa90SAH
PWtlaw18yDLVWQ1aOlQKcVClhYR9pQr88EiJQb4ohN9pVKWp1oroihdiq88rprm3
mVVGwZ8YcONJzA==
-----END CERTIFICATE-----
Generated at Sun May 4 08:58:55 2025 by rpki-client