Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
File: ucNjOsv2PC7LECBbm5JYCrtOuH4.mft (raw, json)
Hash identifier: u/Yb3ZhnfvN09RnA8LVz7bBqLFfoIh+hMHdLoJsYmRE=
Subject key identifier: 55:48:42:EF:41:B9:7C:0C:D0:21:0E:C0:9E:B3:DB:DF:14:60:31:3C
Authority key identifier: B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
Certificate issuer: /CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Certificate serial: 01967FEB0BFCC2640022E1EE7829D378BFA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
Manifest number: 0D89
Signing time: Tue 29 Apr 2025 05:00:32 +0000
Manifest this update: Tue 29 Apr 2025 05:00:32 +0000
Manifest next update: Wed 30 Apr 2025 05:00:32 +0000
Files and hashes: 1: SVqYet6gqafuP93fvR-cXcD_lZE.roa (hash: W9VR4dYgi4TiBeDzcyIekcyHyO1LO5e+JjlzGp7Zlac=)
2: jJL_UCt1xKDnehMaxOeWEPnn1w4.roa (hash: OUjyb/sGoJvyBaOSinwB5CR/YZjUj96cHrntVj6IrpM=)
3: ucNjOsv2PC7LECBbm5JYCrtOuH4.crl (hash: gK5DJPvip3zoRQKHw56waCM2/cxtauXU6Widb9LCpJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:eb:0b:fc:c2:64:00:22:e1:ee:78:29:d3:78:bf:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Validity
Not Before: Apr 29 05:00:32 2025 GMT
Not After : Apr 30 05:00:32 2025 GMT
Subject: CN=554842ef41b97c0cd0210ec09eb3dbdf1460313c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c2:69:58:62:3f:5f:0b:d5:83:9e:2f:1c:d0:
6c:f0:e4:3a:ea:91:6f:a0:22:41:21:23:48:80:84:
e5:d8:59:52:a4:e8:99:92:97:81:c5:8d:b4:ed:f8:
35:3f:42:37:04:10:6b:f2:18:79:2f:b4:0c:e5:10:
37:ff:76:26:a5:a0:03:a5:98:5c:b9:51:ef:9f:98:
fb:96:26:9f:25:4e:56:25:03:2e:16:e8:7e:be:da:
6a:47:8a:08:fa:1b:74:84:02:8f:17:b1:cf:ae:e8:
fe:06:3c:68:25:97:d5:d7:dc:1e:55:04:0a:7f:5a:
9a:b1:f9:d7:96:6e:71:e1:a4:f3:83:3e:b9:6d:b1:
d6:d7:ee:d2:a6:81:19:4a:89:75:c7:cb:02:a2:ce:
73:13:7f:be:39:6d:dd:b5:64:45:57:dd:d6:08:96:
e2:75:a1:d3:45:9a:54:8a:18:69:b0:f8:c3:8f:67:
a7:1a:5c:e3:90:66:06:04:fe:4a:3d:cc:e0:78:70:
ae:ec:0e:64:5e:98:0b:b5:dd:d5:a7:0b:c7:c0:f2:
0a:c5:5a:cc:14:65:0e:87:89:14:8b:ba:f5:38:42:
08:4c:ea:f0:27:3f:60:8e:e1:93:0c:8e:76:d0:91:
d1:4e:8b:3c:28:a0:1b:72:70:3c:4e:d1:b8:e4:5c:
c7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:48:42:EF:41:B9:7C:0C:D0:21:0E:C0:9E:B3:DB:DF:14:60:31:3C
X509v3 Authority Key Identifier:
keyid:B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:6b:4a:33:e1:59:ab:ff:4f:2d:02:01:06:d0:28:a0:05:2f:
89:29:b1:25:a1:d8:52:d1:ed:e5:4b:7a:24:71:3c:86:3b:9c:
9a:a9:b2:56:20:43:0f:f3:34:96:90:6e:42:40:77:74:6b:3b:
4d:f9:34:e6:9a:be:e8:76:d0:dd:d3:39:ee:b7:f3:3d:1c:f3:
7b:67:d5:b0:5e:90:70:9f:42:da:a9:1c:60:d1:d8:ee:85:ee:
09:20:82:f0:5c:c9:34:a6:32:0c:63:74:16:bc:56:cc:53:6f:
81:bf:b2:08:60:a0:dc:23:2b:0c:36:97:3c:96:0e:0c:c4:22:
ae:22:05:ea:f6:72:bc:23:1a:f3:4b:51:6e:67:ec:d7:20:99:
b8:c3:39:0b:c7:37:ea:9d:a1:02:30:91:b2:d9:d1:66:1c:dd:
8f:4c:e6:65:49:76:28:63:18:d2:e9:69:1f:b7:46:c6:03:b5:
b3:20:4f:99:fe:b0:41:f6:c4:cd:f3:37:a9:2f:1e:a5:2e:a8:
d8:14:01:4f:b4:02:83:8e:d6:cf:32:45:e6:fd:fa:69:6b:ce:
67:f0:63:1b:86:31:73:8b:00:08:62:ca:5d:7a:17:12:03:57:
16:3b:f7:5a:11:3b:dc:ce:2c:f2:77:4e:3f:c6:90:92:57:bc:
6b:e8:c2:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/6wv8wmQAIuHueCnTeL+mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YzM2MzNhY2JmNjNjMmVjYjEwMjA1YjliOTI1ODBhYmI0
ZWI4N2UwHhcNMjUwNDI5MDUwMDMyWhcNMjUwNDMwMDUwMDMyWjAzMTEwLwYDVQQD
Eyg1NTQ4NDJlZjQxYjk3YzBjZDAyMTBlYzA5ZWIzZGJkZjE0NjAzMTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMJpWGI/XwvVg54vHNBs8OQ66pFv
oCJBISNIgITl2FlSpOiZkpeBxY207fg1P0I3BBBr8hh5L7QM5RA3/3YmpaADpZhc
uVHvn5j7liafJU5WJQMuFuh+vtpqR4oI+ht0hAKPF7HPruj+BjxoJZfV19weVQQK
f1qasfnXlm5x4aTzgz65bbHW1+7SpoEZSol1x8sCos5zE3++OW3dtWRFV93WCJbi
daHTRZpUihhpsPjDj2enGlzjkGYGBP5KPczgeHCu7A5kXpgLtd3VpwvHwPIKxVrM
FGUOh4kUi7r1OEIITOrwJz9gjuGTDI520JHRTos8KKAbcnA8TtG45FzH7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVIQu9BuXwM0CEOwJ6z298UYDE8MB8GA1UdIwQY
MBaAFLnDYzrL9jwuyxAgW5uSWAq7Trh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWNOak9zdjJQQzdMRUNCYm01SllDcnRPdUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8wY2QyZjMtMGY2YS00ZWFhLTk4NDUt
OTllY2E1NjUxMDIzLzEvdWNOak9zdjJQQzdMRUNCYm01SllDcnRPdUg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8wY2QyZjMtMGY2YS00ZWFhLTk4NDUtOTllY2E1NjUxMDIz
LzEvdWNOak9zdjJQQzdMRUNCYm01SllDcnRPdUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGtKM+FZ
q/9PLQIBBtAooAUviSmxJaHYUtHt5Ut6JHE8hjucmqmyViBDD/M0lpBuQkB3dGs7
Tfk05pq+6HbQ3dM57rfzPRzze2fVsF6QcJ9C2qkcYNHY7oXuCSCC8FzJNKYyDGN0
FrxWzFNvgb+yCGCg3CMrDDaXPJYODMQiriIF6vZyvCMa80tRbmfs1yCZuMM5C8c3
6p2hAjCRstnRZhzdj0zmZUl2KGMY0ulpH7dGxgO1syBPmf6wQfbEzfM3qS8epS6o
2BQBT7QCg47WzzJF5v36aWvOZ/BjG4Yxc4sACGLKXXoXEgNXFjv3WhE73M4s8ndO
P8aQkle8a+jCYg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:37:04 2025 by rpki-client