Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
File: Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft (raw, json)
Hash identifier: 9zC7AZSmV9VIKTpc9FaZ3sjecbKMwMduAysOqBAbe2I=
Subject key identifier: A1:71:0B:76:E0:03:82:39:7A:A2:1C:A0:DD:FB:7A:75:E9:8D:10:0B
Authority key identifier: 51:CF:73:2A:8A:74:39:E9:28:0F:23:EF:57:84:98:14:AF:19:5A:E0
Certificate issuer: /CN=51cf732a8a7439e9280f23ef57849814af195ae0
Certificate serial: 01967831B12914CBDAAD6D9DFD07A44B3ED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
Manifest number: 0B7A
Signing time: Sun 27 Apr 2025 17:00:44 +0000
Manifest this update: Sun 27 Apr 2025 17:00:44 +0000
Manifest next update: Mon 28 Apr 2025 17:00:44 +0000
Files and hashes: 1: 6U9v2b9_H16oPmmsjyxvxUr0E3s.roa (hash: vTyGtdDSUJCCG+RyWL7dyY03BLe4INjU/wmtj3pLFUM=)
2: Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl (hash: RnPfXeI+/YQwNvbSP/JhN5H9CL1YXUro2YZ4pj6r7f0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:b1:29:14:cb:da:ad:6d:9d:fd:07:a4:4b:3e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51cf732a8a7439e9280f23ef57849814af195ae0
Validity
Not Before: Apr 27 17:00:44 2025 GMT
Not After : Apr 28 17:00:44 2025 GMT
Subject: CN=a1710b76e00382397aa21ca0ddfb7a75e98d100b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c7:2d:45:ec:b3:b7:8e:fa:6f:51:62:35:e6:
73:a5:21:24:ef:d6:83:ed:52:30:4b:69:2b:89:9d:
f8:e2:c0:14:45:9d:16:8c:cd:0f:f0:7e:76:65:3b:
78:10:f8:69:15:89:94:b4:be:2e:d8:54:68:34:35:
71:4c:9b:81:61:89:ca:b1:8f:f1:04:35:96:d1:67:
e4:34:d2:8a:2f:57:3b:d3:2a:a8:0f:02:60:5d:7c:
7b:ff:ee:38:e7:f5:3c:70:2a:bd:59:c8:65:28:8b:
5d:5b:6f:75:59:73:64:b2:78:66:26:c2:46:12:15:
e8:4e:3c:8b:03:21:07:4d:70:fe:1a:cf:b2:20:aa:
3f:8d:3a:57:4a:23:9b:f7:3f:d3:13:9a:1c:b1:34:
8a:f0:6a:35:3d:19:93:d0:19:74:d6:a5:11:3a:12:
ed:76:05:48:38:bf:84:73:e1:0d:95:da:ec:ae:94:
4c:ba:d0:31:54:51:0b:79:a1:21:36:c9:49:4a:4f:
fd:72:43:d5:fa:89:23:b3:d3:24:a0:91:10:fa:06:
36:2f:09:04:28:72:0e:78:21:ce:fd:b7:f7:8a:dd:
5f:36:34:f2:b9:d4:5c:57:1c:2a:af:e2:c5:dc:eb:
c1:ed:3e:43:e1:06:53:60:10:c7:ea:7d:67:d1:96:
0c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:71:0B:76:E0:03:82:39:7A:A2:1C:A0:DD:FB:7A:75:E9:8D:10:0B
X509v3 Authority Key Identifier:
keyid:51:CF:73:2A:8A:74:39:E9:28:0F:23:EF:57:84:98:14:AF:19:5A:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:73:53:f5:18:1a:99:b5:e0:21:11:80:92:35:52:62:30:61:
cb:12:49:8d:c2:9b:10:f8:c7:fa:42:4c:a9:36:71:4a:23:8d:
de:b6:66:a7:5a:d6:e3:68:a4:da:c6:4b:0d:cd:b3:59:60:53:
2f:85:4d:8c:37:62:66:8f:d8:77:0e:74:e6:da:7b:c4:fe:2c:
2c:9b:8a:c1:01:a1:10:41:56:d0:ec:3d:80:e1:69:71:27:78:
33:7e:5d:f0:6a:ff:63:e7:07:c6:3f:6e:51:26:86:36:3c:63:
fc:92:56:39:44:e5:85:0c:9b:38:f3:ac:01:92:9a:cb:01:e7:
9b:65:2d:b9:9e:76:b4:8a:5f:6e:0d:b9:97:4f:d6:25:8d:70:
a4:78:ab:e3:74:ec:e8:7f:d9:f0:fa:a1:24:b6:e9:b4:f5:a1:
4d:50:fe:2c:69:ee:31:ed:66:d1:3a:26:f3:82:0d:79:51:6c:
d7:d0:20:9c:3d:c1:6d:11:61:a6:01:8c:87:19:44:95:cc:b4:
48:b6:8f:b5:da:d7:f0:9b:5b:3a:f6:2c:13:cd:20:9d:e2:6f:
c0:44:ee:c8:8c:28:4e:92:0f:10:7f:c4:34:45:4f:b0:5d:e8:
6f:0e:ba:6a:cf:5d:16:d7:d0:e8:95:45:f0:4c:2a:ac:6e:79:
4d:95:53:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4MbEpFMvarW2d/QekSz7RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxY2Y3MzJhOGE3NDM5ZTkyODBmMjNlZjU3ODQ5ODE0YWYx
OTVhZTAwHhcNMjUwNDI3MTcwMDQ0WhcNMjUwNDI4MTcwMDQ0WjAzMTEwLwYDVQQD
EyhhMTcxMGI3NmUwMDM4MjM5N2FhMjFjYTBkZGZiN2E3NWU5OGQxMDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysctReyzt476b1FiNeZzpSEk79aD
7VIwS2kriZ344sAURZ0WjM0P8H52ZTt4EPhpFYmUtL4u2FRoNDVxTJuBYYnKsY/x
BDWW0WfkNNKKL1c70yqoDwJgXXx7/+445/U8cCq9WchlKItdW291WXNksnhmJsJG
EhXoTjyLAyEHTXD+Gs+yIKo/jTpXSiOb9z/TE5ocsTSK8Go1PRmT0Bl01qUROhLt
dgVIOL+Ec+ENldrsrpRMutAxVFELeaEhNslJSk/9ckPV+okjs9MkoJEQ+gY2LwkE
KHIOeCHO/bf3it1fNjTyudRcVxwqr+LF3OvB7T5D4QZTYBDH6n1n0ZYMNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKFxC3bgA4I5eqIcoN37enXpjRALMB8GA1UdIwQY
MBaAFFHPcyqKdDnpKA8j71eEmBSvGVrgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWM5ektvcDBPZWtvRHlQdlY0U1lGSzhaV3VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy85YTY2MzgtYzhmZC00M2NmLWIxYzQt
YjA3MWM3ZWZkOTE1LzEvVWM5ektvcDBPZWtvRHlQdlY0U1lGSzhaV3VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy85YTY2MzgtYzhmZC00M2NmLWIxYzQtYjA3MWM3ZWZkOTE1
LzEvVWM5ektvcDBPZWtvRHlQdlY0U1lGSzhaV3VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh3NT9Rga
mbXgIRGAkjVSYjBhyxJJjcKbEPjH+kJMqTZxSiON3rZmp1rW42ik2sZLDc2zWWBT
L4VNjDdiZo/Ydw505tp7xP4sLJuKwQGhEEFW0Ow9gOFpcSd4M35d8Gr/Y+cHxj9u
USaGNjxj/JJWOUTlhQybOPOsAZKaywHnm2UtuZ52tIpfbg25l0/WJY1wpHir43Ts
6H/Z8PqhJLbptPWhTVD+LGnuMe1m0Tom84INeVFs19AgnD3BbRFhpgGMhxlElcy0
SLaPtdrX8JtbOvYsE80gneJvwETuyIwoTpIPEH/ENEVPsF3obw66as9dFtfQ6JVF
8EwqrG55TZVThw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:56:20 2025 by rpki-client