Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
File: Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft (raw, json)
Hash identifier: 6AjuHRR9CtX+u4U7aeZsqs9CkEw0lXNkKnO4UaFa2b8=
Subject key identifier: 8A:B4:4E:1C:DC:92:5E:62:AD:D8:D1:B7:44:23:45:1F:3C:A8:DC:05
Authority key identifier: 53:2D:1E:41:42:48:19:BC:C0:CD:63:7D:8E:E1:41:FE:A5:85:D0:0D
Certificate issuer: /CN=532d1e41424819bcc0cd637d8ee141fea585d00d
Certificate serial: 019676E7BC8C3E5FCDE89446E20DBC3B5E0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
Manifest number: 0C4E
Signing time: Sun 27 Apr 2025 11:00:20 +0000
Manifest this update: Sun 27 Apr 2025 11:00:20 +0000
Manifest next update: Mon 28 Apr 2025 11:00:20 +0000
Files and hashes: 1: NrO5uxpBltZKQFNCZNNHliY-rU8.roa (hash: H7ZqTQbit+ghJClKxAhoy+MVGNOjRvvuQLbti4QMTQs=)
2: Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl (hash: I+0BzNZUfEWx5aBCWDAGGhOMLbRDUH5gbtWWm9d0kH4=)
3: isc6BCjToI_oFbMf0jYX-ynn-ak.roa (hash: XnxC31mu4h2nbud6+tfa/Ol2F+NbnVuQI1Ua6CJm+PY=)
4: xejR1HTIfQTs9ku3Ssof6e6AvFo.roa (hash: WqULQW85X208UyMTLcJvRmwxLauSYG2culO7l9VmGH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:bc:8c:3e:5f:cd:e8:94:46:e2:0d:bc:3b:5e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=532d1e41424819bcc0cd637d8ee141fea585d00d
Validity
Not Before: Apr 27 11:00:20 2025 GMT
Not After : Apr 28 11:00:20 2025 GMT
Subject: CN=8ab44e1cdc925e62add8d1b74423451f3ca8dc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a5:e6:06:f4:30:50:e9:f5:d8:9b:cd:56:d9:
3e:c8:14:c1:a4:20:6e:05:6d:8c:81:b5:a6:36:0b:
5e:7d:8e:ca:f6:ba:d5:b8:ea:45:e3:e1:e2:77:ea:
45:76:af:76:1f:37:49:bc:7d:cd:c4:db:93:63:0d:
6d:55:c6:8d:74:17:41:6d:4f:49:61:38:2f:6b:d9:
27:39:d7:49:f7:b4:2c:0a:2d:e9:a9:66:6f:ee:47:
ea:56:05:92:6d:10:c1:52:17:98:70:fc:da:5a:9f:
7a:0b:45:37:3b:40:c4:5d:1b:7a:0c:0b:90:01:d6:
21:d4:58:fa:eb:e5:b3:bd:9e:06:cf:03:6f:8f:94:
ef:5d:90:68:37:0e:47:13:3a:19:57:3e:77:a5:da:
d1:9a:f4:d2:8b:02:e2:94:9b:a4:17:30:02:2a:72:
29:3b:4a:ea:08:31:d9:99:ce:26:a7:4c:fc:17:e3:
9a:1b:2f:1e:32:6b:12:f9:ad:72:4f:22:ee:25:e5:
80:d0:d2:10:32:76:21:7f:f6:99:d2:7a:f3:07:65:
6a:f5:e9:8e:31:07:3e:ed:bf:24:2b:9c:c2:16:bd:
31:5e:f2:32:82:ed:cb:0b:3c:2b:1f:ba:c9:86:fb:
19:c1:57:6f:00:b5:39:30:5d:16:5f:64:0f:61:e0:
87:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B4:4E:1C:DC:92:5E:62:AD:D8:D1:B7:44:23:45:1F:3C:A8:DC:05
X509v3 Authority Key Identifier:
keyid:53:2D:1E:41:42:48:19:BC:C0:CD:63:7D:8E:E1:41:FE:A5:85:D0:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e2:be:ab:5e:f1:81:9c:0e:70:eb:d9:8e:d9:1b:ce:ba:b3:
9a:f8:8d:8d:9b:f0:10:9b:cf:19:a0:e5:34:99:0f:75:05:db:
92:28:df:75:c7:31:66:05:d3:4a:bb:9a:97:1d:5c:bb:0b:7b:
37:bf:53:8d:14:72:2c:7c:12:77:f1:e0:6c:ef:cb:7c:ac:61:
69:09:2d:05:c0:d0:31:86:8d:7f:1e:3b:90:46:ac:70:ff:c9:
4d:23:9e:86:6f:f3:15:03:58:e2:85:ef:f0:bc:89:6b:84:1f:
4f:15:0d:74:b8:bb:1f:73:a0:7f:85:18:e9:4b:0f:56:9d:8f:
e9:28:b1:8d:79:c7:44:18:15:e3:ad:10:a5:39:14:d4:35:98:
26:c1:98:ca:a9:5a:67:42:1a:d6:36:65:da:89:37:dd:18:fd:
cb:e0:0b:c0:1e:09:54:b9:a0:57:d8:42:0a:0e:ca:6f:30:d6:
5f:f9:ba:54:1e:cb:59:17:a9:aa:95:60:05:39:2d:ad:64:1d:
e1:02:3c:ba:e5:a2:3e:25:15:dd:1a:36:81:c9:22:34:63:ba:
b6:f6:48:93:52:a2:ef:d3:18:f9:20:5e:71:6a:c6:12:bc:4d:
42:be:45:f6:a9:3b:2b:38:95:04:8f:7a:86:33:1d:1e:2b:73:
9e:27:95:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ257yMPl/N6JRG4g28O14PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMmQxZTQxNDI0ODE5YmNjMGNkNjM3ZDhlZTE0MWZlYTU4
NWQwMGQwHhcNMjUwNDI3MTEwMDIwWhcNMjUwNDI4MTEwMDIwWjAzMTEwLwYDVQQD
Eyg4YWI0NGUxY2RjOTI1ZTYyYWRkOGQxYjc0NDIzNDUxZjNjYThkYzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaXmBvQwUOn12JvNVtk+yBTBpCBu
BW2MgbWmNgtefY7K9rrVuOpF4+Hid+pFdq92HzdJvH3NxNuTYw1tVcaNdBdBbU9J
YTgva9knOddJ97QsCi3pqWZv7kfqVgWSbRDBUheYcPzaWp96C0U3O0DEXRt6DAuQ
AdYh1Fj66+WzvZ4GzwNvj5TvXZBoNw5HEzoZVz53pdrRmvTSiwLilJukFzACKnIp
O0rqCDHZmc4mp0z8F+OaGy8eMmsS+a1yTyLuJeWA0NIQMnYhf/aZ0nrzB2Vq9emO
MQc+7b8kK5zCFr0xXvIygu3LCzwrH7rJhvsZwVdvALU5MF0WX2QPYeCHBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIq0Thzckl5irdjRt0QjRR88qNwFMB8GA1UdIwQY
MBaAFFMtHkFCSBm8wM1jfY7hQf6lhdANMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXkwZVFVSklHYnpBeldOOWp1RkJfcVdGMEEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC83OGM1NzctOGY5OC00MGIyLWIwMWQt
MTA3NzdmOWUzNjg1LzEvVXkwZVFVSklHYnpBeldOOWp1RkJfcVdGMEEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC83OGM1NzctOGY5OC00MGIyLWIwMWQtMTA3NzdmOWUzNjg1
LzEvVXkwZVFVSklHYnpBeldOOWp1RkJfcVdGMEEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARuK+q17x
gZwOcOvZjtkbzrqzmviNjZvwEJvPGaDlNJkPdQXbkijfdccxZgXTSrualx1cuwt7
N79TjRRyLHwSd/HgbO/LfKxhaQktBcDQMYaNfx47kEascP/JTSOehm/zFQNY4oXv
8LyJa4QfTxUNdLi7H3Ogf4UY6UsPVp2P6SixjXnHRBgV460QpTkU1DWYJsGYyqla
Z0Ia1jZl2ok33Rj9y+ALwB4JVLmgV9hCCg7KbzDWX/m6VB7LWRepqpVgBTktrWQd
4QI8uuWiPiUV3Ro2gckiNGO6tvZIk1Ki79MY+SBecWrGErxNQr5F9qk7KziVBI96
hjMdHitznieV3Q==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:48:29 2025 by rpki-client