Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
File: UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft (raw, json)
Hash identifier: 2I6cAtu/XPBMuR0gEjzMeKmgleJSf099sLhF8X/esfs=
Subject key identifier: AD:B0:48:AF:E3:C0:B8:D8:7D:62:E7:14:8C:DA:C0:93:D0:B8:F9:94
Authority key identifier: 52:E8:6B:14:1C:51:C6:5E:EA:BD:6E:62:EA:52:2E:DC:59:88:52:6E
Certificate issuer: /CN=52e86b141c51c65eeabd6e62ea522edc5988526e
Certificate serial: 019679E9AFA502CAE2709E969EC771592240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
Manifest number: 091E
Signing time: Mon 28 Apr 2025 01:01:20 +0000
Manifest this update: Mon 28 Apr 2025 01:01:20 +0000
Manifest next update: Tue 29 Apr 2025 01:01:20 +0000
Files and hashes: 1: 2j26Wb_0raCGxspq8-CRAEdS8CA.roa (hash: IWSUpm2IMLrh6G4T1G4gf0s40nGd5SL/hMLUB0/qICA=)
2: UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl (hash: dQmOA4l/NPECE8KxfcEWl2cO4F64qhMWyUw/DLQA+wQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:af:a5:02:ca:e2:70:9e:96:9e:c7:71:59:22:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e86b141c51c65eeabd6e62ea522edc5988526e
Validity
Not Before: Apr 28 01:01:20 2025 GMT
Not After : Apr 29 01:01:20 2025 GMT
Subject: CN=adb048afe3c0b8d87d62e7148cdac093d0b8f994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:87:75:52:21:95:3c:b8:48:55:99:b5:c0:e8:
66:39:9c:95:89:27:ec:48:4c:3a:dc:20:06:23:86:
53:a1:ab:11:85:a3:b2:94:96:0a:41:3c:a5:8e:c1:
12:0b:bc:61:6a:f6:b9:1f:c4:e0:ef:58:f3:8d:2c:
e4:0f:47:a3:35:fd:6a:a3:b2:70:c4:3c:22:86:32:
1b:ef:59:ae:d5:f0:29:34:ec:09:f0:81:c7:ac:de:
12:ae:64:75:2f:bd:c5:a4:10:10:9d:15:0e:8e:87:
8c:35:62:22:07:dc:17:a3:d2:4d:dc:eb:3b:6d:3f:
30:70:8d:6e:50:58:b8:a7:13:20:81:77:25:1d:e3:
87:0c:78:06:bf:3a:95:3d:f4:b5:e5:3b:59:15:35:
c9:f5:50:91:9d:2e:5d:4a:9b:b5:d8:6c:ce:aa:bf:
99:e1:38:d1:89:8f:b1:8d:85:6f:a3:6a:19:49:e5:
1e:cd:41:2a:9e:eb:c5:3b:ec:8c:d5:31:88:17:8f:
74:83:73:41:78:de:d1:4e:72:54:a7:c3:42:9b:98:
54:cb:15:fd:1d:9f:c4:1a:c3:5d:8f:3a:a0:83:38:
80:5f:23:13:0b:28:d6:f0:d6:be:ec:8f:9e:45:8c:
64:81:25:ea:0c:a7:32:8b:bf:d5:3f:e0:46:ae:42:
9b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B0:48:AF:E3:C0:B8:D8:7D:62:E7:14:8C:DA:C0:93:D0:B8:F9:94
X509v3 Authority Key Identifier:
keyid:52:E8:6B:14:1C:51:C6:5E:EA:BD:6E:62:EA:52:2E:DC:59:88:52:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:2d:6a:f8:b8:c7:cb:d7:43:32:91:82:60:9f:b0:51:45:f0:
e3:40:22:ba:bd:d4:1b:ab:d3:d3:dd:f8:1a:97:67:aa:f7:e5:
9e:ca:8f:e5:16:d0:bc:78:cf:83:a7:61:d3:2a:b6:00:a9:4a:
79:24:02:0c:8a:d7:7d:e4:55:0a:d3:1e:68:f6:8d:81:77:47:
01:bc:fb:7c:e0:40:00:47:7a:44:c4:aa:e4:54:c1:92:60:30:
08:20:fa:bb:72:fb:99:7f:3b:17:8f:d8:bd:4f:23:b8:09:36:
cb:7a:a8:e4:9f:b0:1f:50:67:dd:58:24:d0:d9:6a:f0:15:61:
5f:ce:63:6c:74:0d:3c:dc:d9:71:01:3f:64:73:7a:84:08:cd:
0f:41:9a:6b:97:14:b8:00:92:97:58:f5:6c:88:0b:40:94:42:
30:43:f7:e8:94:30:82:de:32:1d:d5:b9:44:ae:e5:52:2d:2c:
3f:b9:aa:a7:52:38:7d:51:fc:1d:c6:5f:30:c5:d0:8c:3f:2e:
26:60:7f:73:b9:c8:38:a7:82:94:ce:58:75:72:ae:c4:ce:06:
d8:55:62:7f:2f:67:98:84:b1:f6:7f:7c:99:52:d9:31:5a:a4:
79:45:9b:fa:5e:53:13:a8:f8:47:b9:79:a0:ed:f0:5d:fa:8a:
3f:90:a9:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ56a+lAsricJ6WnsdxWSJAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZTg2YjE0MWM1MWM2NWVlYWJkNmU2MmVhNTIyZWRjNTk4
ODUyNmUwHhcNMjUwNDI4MDEwMTIwWhcNMjUwNDI5MDEwMTIwWjAzMTEwLwYDVQQD
EyhhZGIwNDhhZmUzYzBiOGQ4N2Q2MmU3MTQ4Y2RhYzA5M2QwYjhmOTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiod1UiGVPLhIVZm1wOhmOZyViSfs
SEw63CAGI4ZToasRhaOylJYKQTyljsESC7xhava5H8Tg71jzjSzkD0ejNf1qo7Jw
xDwihjIb71mu1fApNOwJ8IHHrN4SrmR1L73FpBAQnRUOjoeMNWIiB9wXo9JN3Os7
bT8wcI1uUFi4pxMggXclHeOHDHgGvzqVPfS15TtZFTXJ9VCRnS5dSpu12GzOqr+Z
4TjRiY+xjYVvo2oZSeUezUEqnuvFO+yM1TGIF490g3NBeN7RTnJUp8NCm5hUyxX9
HZ/EGsNdjzqggziAXyMTCyjW8Na+7I+eRYxkgSXqDKcyi7/VP+BGrkKbpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2wSK/jwLjYfWLnFIzawJPQuPmUMB8GA1UdIwQY
MBaAFFLoaxQcUcZe6r1uYupSLtxZiFJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXVockZCeFJ4bDdxdlc1aTZsSXUzRm1JVW00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81ZjQ1YTUtNzI4OC00NTM3LTg5ZGQt
YzY4N2U3OTJiMjVkLzEvVXVockZCeFJ4bDdxdlc1aTZsSXUzRm1JVW00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC81ZjQ1YTUtNzI4OC00NTM3LTg5ZGQtYzY4N2U3OTJiMjVk
LzEvVXVockZCeFJ4bDdxdlc1aTZsSXUzRm1JVW00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoC1q+LjH
y9dDMpGCYJ+wUUXw40Aiur3UG6vT0934GpdnqvflnsqP5RbQvHjPg6dh0yq2AKlK
eSQCDIrXfeRVCtMeaPaNgXdHAbz7fOBAAEd6RMSq5FTBkmAwCCD6u3L7mX87F4/Y
vU8juAk2y3qo5J+wH1Bn3Vgk0Nlq8BVhX85jbHQNPNzZcQE/ZHN6hAjND0Gaa5cU
uACSl1j1bIgLQJRCMEP36JQwgt4yHdW5RK7lUi0sP7mqp1I4fVH8HcZfMMXQjD8u
JmB/c7nIOKeClM5YdXKuxM4G2FVify9nmISx9n98mVLZMVqkeUWb+l5TE6j4R7l5
oO3wXfqKP5Cpjg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 07:51:19 2025 by rpki-client