Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.mft
File: U3mVYEU9z0rzH5sqQM0ji4RXxd4.mft (raw, json)
Hash identifier: w543Nn41RycnuPgSE0Rf7FFMo4SuZRhayvzGyDYzXM0=
Subject key identifier: 72:EE:63:17:97:67:80:28:41:51:E8:C5:B1:1F:6E:12:CB:70:AC:EE
Authority key identifier: 53:79:95:60:45:3D:CF:4A:F3:1F:9B:2A:40:CD:23:8B:84:57:C5:DE
Certificate issuer: /CN=53799560453dcf4af31f9b2a40cd238b8457c5de
Certificate serial: 0196816B536B4F5D8D598A200D5F184D7212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3mVYEU9z0rzH5sqQM0ji4RXxd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.mft
Manifest number: 0949
Signing time: Tue 29 Apr 2025 12:00:16 +0000
Manifest this update: Tue 29 Apr 2025 12:00:16 +0000
Manifest next update: Wed 30 Apr 2025 12:00:16 +0000
Files and hashes: 1: GPBna_IoKKdQyaNksGJT2yWTCj4.roa (hash: TAihNlvs0SdUgl2vxovWMBnyUqa0RWqHLKo09+4ZR88=)
2: U3mVYEU9z0rzH5sqQM0ji4RXxd4.crl (hash: Jm4qV7WBGp17nEAGtDW/OFLlM2LnZ1aKwUqeYzokcus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3mVYEU9z0rzH5sqQM0ji4RXxd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 12:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:6b:53:6b:4f:5d:8d:59:8a:20:0d:5f:18:4d:72:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53799560453dcf4af31f9b2a40cd238b8457c5de
Validity
Not Before: Apr 29 12:00:16 2025 GMT
Not After : Apr 30 12:00:16 2025 GMT
Subject: CN=72ee6317976780284151e8c5b11f6e12cb70acee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:15:e1:57:e3:19:fc:5b:8b:ce:59:6b:55:c7:
55:18:f1:ce:60:b9:e6:5c:e2:4e:df:ca:44:03:07:
6a:7e:4c:4e:a7:4f:d0:48:22:3d:b5:50:11:5e:90:
33:9a:b3:81:70:6d:f8:2b:f3:42:15:a3:9c:35:cb:
61:60:7d:c7:ba:c8:55:14:02:a3:2f:f7:49:4a:70:
d2:3b:ab:a1:7d:54:98:66:c1:27:e0:8d:9f:ad:18:
ce:58:f8:a8:dc:fb:da:cd:c6:c1:ed:d0:54:ba:4f:
65:1e:eb:85:7a:68:9f:cd:0f:3b:98:04:e1:c1:11:
3c:3f:fd:59:66:1c:ac:22:d8:8d:a1:00:a7:2a:67:
f3:e3:78:e5:77:35:f1:f5:34:81:6d:1c:e4:3a:5a:
a7:9e:fd:7b:e4:58:e0:3c:0a:30:83:6f:c4:e2:c1:
57:e5:d2:f3:0d:a1:97:f1:5a:04:5d:09:3c:e4:52:
8e:50:22:e5:8e:aa:7b:6d:0d:53:71:b5:d7:fc:fd:
31:26:eb:92:7e:b9:fe:63:44:5c:d7:ba:23:33:4c:
f8:db:c5:fa:41:29:6f:48:d1:82:21:0d:23:2f:01:
9a:3e:8f:ac:8f:b0:70:16:bc:70:37:f1:6e:7d:a1:
33:7e:9b:54:46:45:83:79:d0:92:72:f6:be:05:b1:
6f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EE:63:17:97:67:80:28:41:51:E8:C5:B1:1F:6E:12:CB:70:AC:EE
X509v3 Authority Key Identifier:
keyid:53:79:95:60:45:3D:CF:4A:F3:1F:9B:2A:40:CD:23:8B:84:57:C5:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3mVYEU9z0rzH5sqQM0ji4RXxd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e0:a5:3f:5e:6c:8d:bb:9f:27:b8:91:6c:93:11:c7:6b:4e:
67:7a:70:75:24:60:5e:a2:24:d4:d2:ab:79:2a:7b:b5:04:4c:
ea:69:e1:5e:2c:46:49:70:04:fc:87:b3:27:55:3d:1f:63:2d:
6e:37:a4:d9:66:4b:1c:c4:05:31:25:29:70:11:79:0b:8a:71:
d1:f0:45:11:b9:98:3b:88:00:0e:e0:f2:59:ce:e7:fe:c9:64:
a2:18:ae:38:ae:a4:59:8f:38:dc:2e:6f:0b:00:33:d9:94:27:
cf:d6:a1:f5:cc:9d:09:a3:b2:05:79:e6:90:bc:4b:e3:25:04:
92:cc:3b:27:1e:cd:a1:25:1b:6c:b3:e3:75:4a:04:f7:c4:b3:
88:67:83:05:04:dd:b8:a1:c2:f4:dd:d3:9d:40:c9:a2:60:b8:
83:07:cd:31:68:49:cd:b3:32:96:18:a3:9d:32:b9:94:2d:64:
b4:28:be:25:ba:1b:4e:cd:d7:82:cf:10:d8:50:9c:93:48:e6:
c7:2f:88:c8:55:94:f6:3b:d7:05:33:84:78:4c:d1:a8:ca:e9:
57:83:3b:55:e7:c7:9d:86:7a:9b:3b:50:4d:6a:75:69:06:0f:
c2:e1:6e:dc:26:7a:6c:39:4a:4a:7e:73:e6:1a:b3:46:28:7c:
78:9b:d6:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaBa1NrT12NWYogDV8YTXISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNzk5NTYwNDUzZGNmNGFmMzFmOWIyYTQwY2QyMzhiODQ1
N2M1ZGUwHhcNMjUwNDI5MTIwMDE2WhcNMjUwNDMwMTIwMDE2WjAzMTEwLwYDVQQD
Eyg3MmVlNjMxNzk3Njc4MDI4NDE1MWU4YzViMTFmNmUxMmNiNzBhY2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhXhV+MZ/FuLzllrVcdVGPHOYLnm
XOJO38pEAwdqfkxOp0/QSCI9tVARXpAzmrOBcG34K/NCFaOcNcthYH3HushVFAKj
L/dJSnDSO6uhfVSYZsEn4I2frRjOWPio3PvazcbB7dBUuk9lHuuFemifzQ87mATh
wRE8P/1ZZhysItiNoQCnKmfz43jldzXx9TSBbRzkOlqnnv175FjgPAowg2/E4sFX
5dLzDaGX8VoEXQk85FKOUCLljqp7bQ1TcbXX/P0xJuuSfrn+Y0Rc17ojM0z428X6
QSlvSNGCIQ0jLwGaPo+sj7BwFrxwN/FufaEzfptURkWDedCScva+BbFvnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLuYxeXZ4AoQVHoxbEfbhLLcKzuMB8GA1UdIwQY
MBaAFFN5lWBFPc9K8x+bKkDNI4uEV8XeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTNtVllFVTl6MHJ6SDVzcVFNMGppNFJYeGQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9kODc3MWEtZTc1My00MDZjLWExZDgt
MzlhYjc3YjgzM2VhLzEvVTNtVllFVTl6MHJ6SDVzcVFNMGppNFJYeGQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9kODc3MWEtZTc1My00MDZjLWExZDgtMzlhYjc3YjgzM2Vh
LzEvVTNtVllFVTl6MHJ6SDVzcVFNMGppNFJYeGQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADuClP15s
jbufJ7iRbJMRx2tOZ3pwdSRgXqIk1NKreSp7tQRM6mnhXixGSXAE/IezJ1U9H2Mt
bjek2WZLHMQFMSUpcBF5C4px0fBFEbmYO4gADuDyWc7n/slkohiuOK6kWY843C5v
CwAz2ZQnz9ah9cydCaOyBXnmkLxL4yUEksw7Jx7NoSUbbLPjdUoE98SziGeDBQTd
uKHC9N3TnUDJomC4gwfNMWhJzbMylhijnTK5lC1ktCi+JbobTs3Xgs8Q2FCck0jm
xy+IyFWU9jvXBTOEeEzRqMrpV4M7VefHnYZ6mztQTWp1aQYPwuFu3CZ6bDlKSn5z
5hqzRih8eJvWfg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 21:06:40 2025 by rpki-client