Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
File: uRFN_za5SLVsIR0l85h1HTW5PMI.mft (raw, json)
Hash identifier: hIchgJdHhzykOBG454DTHv3BrwjZOQfw/Gs/gCXmTss=
Subject key identifier: EA:3A:25:3D:E5:5A:4C:20:16:75:AC:C5:FA:3B:88:3C:C8:3D:1B:B7
Authority key identifier: B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
Certificate issuer: /CN=b9114dff36b948b56c211d25f398751d35b93cc2
Certificate serial: 0196809023AB0052B0E80FCCE75C5980F997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
Manifest number: 0D1F
Signing time: Tue 29 Apr 2025 08:00:52 +0000
Manifest this update: Tue 29 Apr 2025 08:00:52 +0000
Manifest next update: Wed 30 Apr 2025 08:00:52 +0000
Files and hashes: 1: 1-_Px5n1Sga5Zt8S-x1iB09Td3qo.roa (hash: 23ZQeG0ng9+MyZlvY3tVFGHtF3ECWQ2rfUxxtpg8t4c=)
2: NYoZjbIugQuxKbQ3AOfllIqIvGI.roa (hash: MP3bZZbgC6I+guroq7hjxBmjZFMjOlVQchFUz6yhGNE=)
3: u36ax0xpTJgFKndS5YsGMSqnq7s.roa (hash: uik0LuaE13Pf2kO3ppprzpbjfY2DRZ0GXchvvKMGvNo=)
4: uRFN_za5SLVsIR0l85h1HTW5PMI.crl (hash: iZ16VK125TUGGRxr3V22dWiSE7l8TLR8FrCFqfPCEdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:90:23:ab:00:52:b0:e8:0f:cc:e7:5c:59:80:f9:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9114dff36b948b56c211d25f398751d35b93cc2
Validity
Not Before: Apr 29 08:00:52 2025 GMT
Not After : Apr 30 08:00:52 2025 GMT
Subject: CN=ea3a253de55a4c201675acc5fa3b883cc83d1bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:34:e3:ee:8b:01:07:48:c7:24:7b:c1:a2:e0:
81:4c:bd:54:8f:46:9f:24:0d:8e:fa:0b:81:1b:85:
b3:de:3d:d5:5e:99:83:c6:07:db:d7:06:57:85:ba:
ce:ce:2f:b1:b5:ee:1f:c4:77:20:94:9b:8a:be:44:
92:b9:15:9b:c0:ff:6d:77:d1:39:64:37:48:15:ea:
a1:2e:bc:61:62:3c:79:81:04:92:dd:ae:69:94:a8:
c5:9b:c2:a8:7f:dd:3d:cd:53:d8:a8:da:68:56:3e:
be:51:10:01:a6:58:06:7a:d9:e2:3e:ea:ca:cc:b3:
eb:c1:4d:c4:3a:4a:ce:0c:b0:42:f9:fd:1b:cf:08:
53:61:17:a1:58:25:32:54:1d:e0:a5:5d:47:b9:2b:
d3:08:c5:66:7d:14:40:e8:e8:a7:07:16:64:85:87:
db:f0:3d:e4:e1:e3:b7:dc:5f:7a:ee:cc:b4:32:1b:
47:0b:35:4c:32:c5:71:01:0a:48:ec:ea:4d:5c:1f:
69:35:84:3b:57:ba:c1:39:5a:38:e7:73:3d:ae:63:
b4:2e:83:1f:99:f0:66:c6:8b:69:e4:b0:91:d5:fd:
97:b8:6a:92:6e:72:50:8c:db:b7:a0:08:5b:52:4f:
2a:66:b9:f6:85:ed:1f:0e:dc:93:7b:91:ea:57:be:
c1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3A:25:3D:E5:5A:4C:20:16:75:AC:C5:FA:3B:88:3C:C8:3D:1B:B7
X509v3 Authority Key Identifier:
keyid:B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:65:a9:66:71:65:cb:31:b7:69:ee:d0:66:66:6f:c7:ed:3c:
a7:f0:46:02:cb:8f:1e:4a:c3:98:fe:dd:1d:2f:82:1b:04:d5:
36:5c:16:db:84:ca:12:8c:0c:5f:e7:59:b1:4a:3a:13:30:79:
d0:1a:63:40:ef:bd:77:3f:f7:14:e0:7c:bf:a3:ad:dc:43:85:
1e:e8:08:ea:bf:9f:a9:5d:8f:a7:1f:9d:61:e7:11:b2:2b:6b:
c4:d8:14:ca:7f:95:82:36:6a:d1:55:49:e8:2f:b0:23:54:51:
8f:bb:08:9f:b8:18:2f:39:24:d8:05:d0:91:bb:f6:a7:b1:35:
1f:2a:ae:35:6f:8b:c3:97:ef:b3:2d:08:2a:eb:6c:c2:cd:83:
b3:7a:7f:47:d2:80:78:df:c6:73:73:27:e7:2d:61:d4:ee:06:
7f:f1:ac:5e:08:64:e8:5b:59:30:60:80:38:84:57:a9:9e:f5:
16:aa:79:a2:e8:b0:63:ac:5b:6d:74:a9:8b:c6:cc:17:cd:bd:
15:c1:03:dd:87:f3:dc:80:3e:5a:c8:af:6b:18:e0:2d:d3:3c:
48:47:7a:5d:c6:41:8a:af:d8:18:e6:ac:b9:d1:2c:6f:1a:19:
71:37:d2:6d:7c:d1:45:00:05:ac:bf:07:b6:38:ae:7f:f4:4f:
3a:03:6f:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaAkCOrAFKw6A/M51xZgPmXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTE0ZGZmMzZiOTQ4YjU2YzIxMWQyNWYzOTg3NTFkMzVi
OTNjYzIwHhcNMjUwNDI5MDgwMDUyWhcNMjUwNDMwMDgwMDUyWjAzMTEwLwYDVQQD
EyhlYTNhMjUzZGU1NWE0YzIwMTY3NWFjYzVmYTNiODgzY2M4M2QxYmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6TTj7osBB0jHJHvBouCBTL1Uj0af
JA2O+guBG4Wz3j3VXpmDxgfb1wZXhbrOzi+xte4fxHcglJuKvkSSuRWbwP9td9E5
ZDdIFeqhLrxhYjx5gQSS3a5plKjFm8Kof909zVPYqNpoVj6+URABplgGetniPurK
zLPrwU3EOkrODLBC+f0bzwhTYRehWCUyVB3gpV1HuSvTCMVmfRRA6OinBxZkhYfb
8D3k4eO33F967sy0MhtHCzVMMsVxAQpI7OpNXB9pNYQ7V7rBOVo453M9rmO0LoMf
mfBmxotp5LCR1f2XuGqSbnJQjNu3oAhbUk8qZrn2he0fDtyTe5HqV77BsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOo6JT3lWkwgFnWsxfo7iDzIPRu3MB8GA1UdIwQY
MBaAFLkRTf82uUi1bCEdJfOYdR01uTzCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJGTl96YTVTTFZzSVIwbDg1aDFIVFc1UE1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8zYzY4NzYtOTZhZS00OGFmLWFlN2Et
ZmYwNWQ0NDZlN2ZkLzEvdVJGTl96YTVTTFZzSVIwbDg1aDFIVFc1UE1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8zYzY4NzYtOTZhZS00OGFmLWFlN2EtZmYwNWQ0NDZlN2Zk
LzEvdVJGTl96YTVTTFZzSVIwbDg1aDFIVFc1UE1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs2WpZnFl
yzG3ae7QZmZvx+08p/BGAsuPHkrDmP7dHS+CGwTVNlwW24TKEowMX+dZsUo6EzB5
0BpjQO+9dz/3FOB8v6Ot3EOFHugI6r+fqV2Ppx+dYecRsitrxNgUyn+VgjZq0VVJ
6C+wI1RRj7sIn7gYLzkk2AXQkbv2p7E1HyquNW+Lw5fvsy0IKutsws2Ds3p/R9KA
eN/Gc3Mn5y1h1O4Gf/GsXghk6FtZMGCAOIRXqZ71Fqp5ouiwY6xbbXSpi8bMF829
FcED3Yfz3IA+WsivaxjgLdM8SEd6XcZBiq/YGOasudEsbxoZcTfSbXzRRQAFrL8H
tjiuf/RPOgNvDg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:17:23 2025 by rpki-client