Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft
File: uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft (raw, json)
Hash identifier: z4lcl/TA0zQovx2uVZExhE3xL9ELEgA6f5LVgVL3oKs=
Subject key identifier: B9:F8:00:8D:1E:61:68:80:AC:5C:EA:03:3E:79:C1:29:21:AB:2E:4A
Authority key identifier: B8:01:C3:30:94:A0:99:22:C0:A1:04:86:D2:1D:F5:58:96:75:BC:94
Certificate issuer: /CN=b801c33094a09922c0a10486d21df5589675bc94
Certificate serial: 019679E92FA873764D4AF7BAE7067162EB9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft
Manifest number: 0D11
Signing time: Mon 28 Apr 2025 01:00:47 +0000
Manifest this update: Mon 28 Apr 2025 01:00:47 +0000
Manifest next update: Tue 29 Apr 2025 01:00:47 +0000
Files and hashes: 1: sjY2Az_5yr-Wx6rCGo_8zNvp2Gw.roa (hash: bO46czBi72k/nkGNkOK/k0Kad2q6af0PdZpkur6OmcY=)
2: uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl (hash: KgalD6mJ5nJMlgEFnQQvET6eif8D0q9VvkMtUVqnoCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:2f:a8:73:76:4d:4a:f7:ba:e7:06:71:62:eb:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b801c33094a09922c0a10486d21df5589675bc94
Validity
Not Before: Apr 28 01:00:47 2025 GMT
Not After : Apr 29 01:00:47 2025 GMT
Subject: CN=b9f8008d1e616880ac5cea033e79c12921ab2e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f6:75:3a:d9:ad:66:ff:f7:2c:1f:98:e6:24:
60:29:6d:16:49:11:3e:b1:4b:8b:76:bb:8c:d1:b0:
04:27:d3:65:e2:d2:84:25:a4:ea:9f:c1:05:a4:94:
18:9e:72:1b:1b:7e:b9:7f:20:fa:d2:aa:62:50:b4:
8a:38:87:5d:e0:37:55:c3:ae:a8:b7:07:1f:6b:0c:
58:cf:72:d3:42:01:b2:72:5f:87:52:f1:86:67:25:
48:91:09:90:c2:7b:ff:17:23:f8:40:ec:63:c3:dd:
4f:37:bb:ed:fc:76:d0:09:3f:92:82:d4:2a:46:f8:
c0:c4:a4:7a:b3:12:5e:8d:76:88:ef:ee:3c:ab:a6:
d1:0d:7c:53:df:d6:31:ef:e1:2f:59:1e:e5:7e:e3:
e4:39:ae:b9:3c:38:14:b8:6d:0c:de:33:9d:bf:ce:
85:74:87:32:18:9a:56:28:ad:dc:48:89:d7:66:32:
6e:87:73:fd:00:7d:09:7f:64:2c:90:3d:d3:ff:91:
6f:9b:32:d8:39:c2:ef:9a:74:15:e7:29:96:f8:ac:
e1:9d:a1:f8:fb:14:8b:30:fb:80:52:a2:11:25:79:
4f:85:54:e2:8d:03:34:4b:ef:b4:26:69:ba:35:c2:
db:2e:d8:e1:c5:9e:fb:3b:a7:17:7a:8c:5c:0a:25:
ab:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F8:00:8D:1E:61:68:80:AC:5C:EA:03:3E:79:C1:29:21:AB:2E:4A
X509v3 Authority Key Identifier:
keyid:B8:01:C3:30:94:A0:99:22:C0:A1:04:86:D2:1D:F5:58:96:75:BC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:48:90:c5:69:e6:c9:74:fe:cf:13:0f:66:13:1d:9f:35:a9:
0f:36:b1:5c:d7:3d:60:c8:51:23:b9:6f:1a:16:b6:52:98:6a:
75:0b:44:a2:62:29:14:c3:6c:71:c8:a0:68:ab:40:2f:92:78:
36:84:29:c0:db:d6:50:b6:c6:60:d9:4a:27:1b:ad:ee:42:34:
51:48:92:e5:2d:5b:20:03:4e:0f:54:c6:46:43:05:b3:c3:3c:
e2:40:87:dc:2a:6f:83:5d:29:ff:ec:2b:69:12:ef:5b:e0:5d:
c7:75:10:00:da:b0:fa:f3:76:8a:19:dc:43:0c:b7:39:4c:fb:
ee:14:73:0b:13:cf:ae:0b:1f:e0:94:ba:6f:f1:60:cd:ee:0f:
c5:8e:c5:7e:a5:63:17:02:34:04:94:34:c6:ac:e1:e8:c0:e1:
f2:df:04:81:d4:04:6d:05:51:51:be:e1:10:6b:a9:3a:28:e7:
5b:15:a5:c6:ef:3e:fe:d5:bc:86:56:ef:d7:be:0a:46:e8:b4:
4e:c2:c2:0a:1b:00:f6:85:01:05:db:65:d8:04:b2:b4:99:c9:
97:84:c2:7b:d1:dc:2e:6b:0c:35:31:b5:c5:6f:bf:ce:1f:84:
bd:4a:fa:aa:61:7e:a6:43:02:de:02:fa:55:9b:cb:26:42:6f:
22:df:9a:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ56S+oc3ZNSve65wZxYuueMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDFjMzMwOTRhMDk5MjJjMGExMDQ4NmQyMWRmNTU4OTY3
NWJjOTQwHhcNMjUwNDI4MDEwMDQ3WhcNMjUwNDI5MDEwMDQ3WjAzMTEwLwYDVQQD
EyhiOWY4MDA4ZDFlNjE2ODgwYWM1Y2VhMDMzZTc5YzEyOTIxYWIyZTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvZ1OtmtZv/3LB+Y5iRgKW0WSRE+
sUuLdruM0bAEJ9Nl4tKEJaTqn8EFpJQYnnIbG365fyD60qpiULSKOIdd4DdVw66o
twcfawxYz3LTQgGycl+HUvGGZyVIkQmQwnv/FyP4QOxjw91PN7vt/HbQCT+SgtQq
RvjAxKR6sxJejXaI7+48q6bRDXxT39Yx7+EvWR7lfuPkOa65PDgUuG0M3jOdv86F
dIcyGJpWKK3cSInXZjJuh3P9AH0Jf2QskD3T/5FvmzLYOcLvmnQV5ymW+KzhnaH4
+xSLMPuAUqIRJXlPhVTijQM0S++0Jmm6NcLbLtjhxZ77O6cXeoxcCiWrcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLn4AI0eYWiArFzqAz55wSkhqy5KMB8GA1UdIwQY
MBaAFLgBwzCUoJkiwKEEhtId9ViWdbyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFIRE1KU2dtU0xBb1FTRzBoMzFXSloxdkpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS81YjI5ZmYtYmY5MC00ODgzLTk3ZGEt
M2M4NjI3ZDk3ODhkLzEvdUFIRE1KU2dtU0xBb1FTRzBoMzFXSloxdkpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS81YjI5ZmYtYmY5MC00ODgzLTk3ZGEtM2M4NjI3ZDk3ODhk
LzEvdUFIRE1KU2dtU0xBb1FTRzBoMzFXSloxdkpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHkiQxWnm
yXT+zxMPZhMdnzWpDzaxXNc9YMhRI7lvGha2UphqdQtEomIpFMNsccigaKtAL5J4
NoQpwNvWULbGYNlKJxut7kI0UUiS5S1bIANOD1TGRkMFs8M84kCH3Cpvg10p/+wr
aRLvW+Bdx3UQANqw+vN2ihncQwy3OUz77hRzCxPPrgsf4JS6b/Fgze4PxY7FfqVj
FwI0BJQ0xqzh6MDh8t8EgdQEbQVRUb7hEGupOijnWxWlxu8+/tW8hlbv174KRui0
TsLCChsA9oUBBdtl2ASytJnJl4TCe9HcLmsMNTG1xW+/zh+EvUr6qmF+pkMC3gL6
VZvLJkJvIt+aUA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:10:53 2025 by rpki-client