Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
File: U8mo-1WZv5O1D_u8yHeISm2BUVc.mft (raw, json)
Hash identifier: 0nSAhS3QERIl/wseZ3jw8DdPBC5jC+mAhDGfJZymtzc=
Subject key identifier: 1C:3E:11:2A:6B:4D:6C:C0:EA:8E:13:60:31:38:78:81:21:3F:C3:EB
Authority key identifier: 53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57
Certificate issuer: /CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157
Certificate serial: 019681A3155E8498274869E96E91C68E0AC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
Manifest number: 03FB
Signing time: Tue 29 Apr 2025 13:01:10 +0000
Manifest this update: Tue 29 Apr 2025 13:01:10 +0000
Manifest next update: Wed 30 Apr 2025 13:01:10 +0000
Files and hashes: 1: 62MqksUAK_QMI1ZyR0Eti3Ewyl0.roa (hash: KOBX/BSKhmGVTpkkeRJ+tRcZBJyQkoDKu0Qn8R+O3ZI=)
2: U8mo-1WZv5O1D_u8yHeISm2BUVc.crl (hash: Pz7VDfmLkQtD7GwYVZv4qnkI9UHXjQjA3GfaUEtswS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a3:15:5e:84:98:27:48:69:e9:6e:91:c6:8e:0a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157
Validity
Not Before: Apr 29 13:01:10 2025 GMT
Not After : Apr 30 13:01:10 2025 GMT
Subject: CN=1c3e112a6b4d6cc0ea8e136031387881213fc3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:23:ae:5a:48:38:83:d3:92:d1:18:d1:e7:3e:
32:cf:dd:31:63:b3:bd:8a:76:b3:11:1c:86:83:c3:
cf:f2:5a:cd:e4:04:3f:9c:35:d0:05:c8:fd:dc:ce:
18:df:1e:12:dc:ee:92:e5:d5:17:16:6f:6b:e8:75:
07:b8:f1:9d:29:70:86:63:69:f5:e4:3d:b6:6e:50:
ca:f5:cf:73:30:b2:4b:3b:f4:46:5a:e7:6e:9c:ca:
71:90:46:8d:3c:84:fa:44:a6:b2:c1:5c:e4:2e:ff:
6b:c8:a9:87:ff:95:f4:55:3a:39:00:b5:6b:be:90:
8b:73:8b:e3:f1:9d:b3:a8:4d:1e:a3:80:04:fa:15:
ba:13:c9:ca:d3:d6:55:22:85:ac:ae:e9:96:6d:2a:
75:60:fc:10:92:e7:fb:9d:84:21:0f:c2:bc:6d:61:
bc:86:07:8f:af:a1:06:b6:43:db:93:6f:9c:05:6b:
df:eb:47:7c:7e:7a:69:7f:11:f3:9e:e2:18:a4:ce:
f5:c1:3d:d5:52:5c:e2:7b:5d:44:6b:8f:9e:31:6e:
3c:c8:b5:e9:58:ec:e3:5f:b1:84:c3:00:5a:80:de:
10:06:53:96:a0:7e:75:a9:f2:77:a2:08:91:1f:c4:
7e:99:40:d4:f4:45:1c:41:80:66:c6:32:c2:db:03:
e6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3E:11:2A:6B:4D:6C:C0:EA:8E:13:60:31:38:78:81:21:3F:C3:EB
X509v3 Authority Key Identifier:
keyid:53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a0:fb:f4:09:a9:30:7f:ec:e7:f3:e6:4c:64:90:d7:33:5e:
20:3f:ce:44:ee:1c:28:1a:31:ea:0b:12:3e:af:46:96:df:0c:
1a:0e:e3:3a:d1:01:bc:cf:cf:73:3e:2f:2a:11:6e:f6:57:0a:
b2:54:60:95:20:bb:20:5f:ee:d3:ef:00:6b:62:42:8e:06:c7:
39:ea:1b:b5:7d:bc:ca:fe:24:b9:d2:c6:ed:f8:55:1e:ad:63:
74:12:33:b4:3f:a6:2a:bd:0f:0e:b2:88:2d:ce:c1:75:9d:cb:
3b:7a:32:8c:4e:29:2e:de:ac:ad:31:f4:8e:a2:b2:7b:20:db:
84:82:e7:0e:8d:50:62:31:fd:bd:9a:ba:11:58:aa:6d:78:c6:
0f:d3:e6:6b:79:dc:da:36:d5:a2:ef:a9:ea:fe:e1:00:6f:5d:
e4:7d:93:34:44:95:3f:8d:f8:b3:82:7b:d8:97:c6:34:98:6f:
f6:b4:03:ff:74:37:68:2b:96:4e:07:fb:ca:b6:68:f5:57:e0:
73:b5:76:25:6a:c3:ae:fa:4e:e6:9e:c3:50:41:8c:1f:22:a9:
9e:0d:7f:79:bc:f8:2d:4e:1f:fe:29:e6:50:ee:66:55:57:0c:
c0:30:c6:75:69:62:c7:a9:13:f5:58:0a:1c:1d:d1:55:92:55:
0b:b2:a4:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaBoxVehJgnSGnpbpHGjgrHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYzlhOGZiNTU5OWJmOTNiNTBmZmJiY2M4Nzc4ODRhNmQ4
MTUxNTcwHhcNMjUwNDI5MTMwMTEwWhcNMjUwNDMwMTMwMTEwWjAzMTEwLwYDVQQD
EygxYzNlMTEyYTZiNGQ2Y2MwZWE4ZTEzNjAzMTM4Nzg4MTIxM2ZjM2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCOuWkg4g9OS0RjR5z4yz90xY7O9
inazERyGg8PP8lrN5AQ/nDXQBcj93M4Y3x4S3O6S5dUXFm9r6HUHuPGdKXCGY2n1
5D22blDK9c9zMLJLO/RGWudunMpxkEaNPIT6RKaywVzkLv9ryKmH/5X0VTo5ALVr
vpCLc4vj8Z2zqE0eo4AE+hW6E8nK09ZVIoWsrumWbSp1YPwQkuf7nYQhD8K8bWG8
hgePr6EGtkPbk2+cBWvf60d8fnppfxHznuIYpM71wT3VUlzie11Ea4+eMW48yLXp
WOzjX7GEwwBagN4QBlOWoH51qfJ3ogiRH8R+mUDU9EUcQYBmxjLC2wPmGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBw+ESprTWzA6o4TYDE4eIEhP8PrMB8GA1UdIwQY
MBaAFFPJqPtVmb+TtQ/7vMh3iEptgVFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVThtby0xV1p2NU8xRF91OHlIZUlTbTJCVVZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yMjllNzktOWJjNC00N2JhLWIxMzYt
MzM4ODE0NjdhYzVlLzEvVThtby0xV1p2NU8xRF91OHlIZUlTbTJCVVZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8yMjllNzktOWJjNC00N2JhLWIxMzYtMzM4ODE0NjdhYzVl
LzEvVThtby0xV1p2NU8xRF91OHlIZUlTbTJCVVZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXaD79Amp
MH/s5/PmTGSQ1zNeID/ORO4cKBox6gsSPq9Glt8MGg7jOtEBvM/Pcz4vKhFu9lcK
slRglSC7IF/u0+8Aa2JCjgbHOeobtX28yv4kudLG7fhVHq1jdBIztD+mKr0PDrKI
Lc7BdZ3LO3oyjE4pLt6srTH0jqKyeyDbhILnDo1QYjH9vZq6EViqbXjGD9Pma3nc
2jbVou+p6v7hAG9d5H2TNESVP434s4J72JfGNJhv9rQD/3Q3aCuWTgf7yrZo9Vfg
c7V2JWrDrvpO5p7DUEGMHyKpng1/ebz4LU4f/inmUO5mVVcMwDDGdWlix6kT9VgK
HB3RVZJVC7Kk5g==
-----END CERTIFICATE-----
Generated at Tue Apr 29 22:17:50 2025 by rpki-client