Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft
File: uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft (raw, json)
Hash identifier: 4b48C1IweduxTKzqEmz5UHSHjE+8M07F7bt0OHMZDYk=
Subject key identifier: 29:DF:78:38:90:4F:18:4D:71:77:00:09:94:3C:C0:60:F9:95:E2:01
Authority key identifier: BB:22:CF:4C:71:A9:59:11:BD:60:46:D0:5C:0A:8B:A1:64:6C:9E:AD
Certificate issuer: /CN=bb22cf4c71a95911bd6046d05c0a8ba1646c9ead
Certificate serial: 0196741E50AC7A1832A29B2E03A5B7CC7740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uyLPTHGpWRG9YEbQXAqLoWRsnq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft
Manifest number: 150E
Signing time: Sat 26 Apr 2025 22:01:05 +0000
Manifest this update: Sat 26 Apr 2025 22:01:05 +0000
Manifest next update: Sun 27 Apr 2025 22:01:05 +0000
Files and hashes: 1: uyLPTHGpWRG9YEbQXAqLoWRsnq0.crl (hash: xElxzkmYTXTCyb0+0DR2Mo//fM5o8VMMuEBEaLzASkY=)
2: xDqVZVtr_9EDZVCNYlX0mCSaras.roa (hash: caUW0pjP9cTTEhVK0Pma740AnxF0QCHN6wxQ3vthDWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uyLPTHGpWRG9YEbQXAqLoWRsnq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:50:ac:7a:18:32:a2:9b:2e:03:a5:b7:cc:77:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb22cf4c71a95911bd6046d05c0a8ba1646c9ead
Validity
Not Before: Apr 26 22:01:05 2025 GMT
Not After : Apr 27 22:01:05 2025 GMT
Subject: CN=29df7838904f184d71770009943cc060f995e201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0f:2b:5a:41:f8:d5:da:20:8d:28:ad:54:77:
11:30:52:c1:3d:87:4b:84:e2:b5:3d:2a:ec:0a:39:
ee:2c:ec:24:d9:b6:34:af:cf:e5:33:5f:98:67:19:
c7:49:37:3c:2d:1e:0a:21:38:5b:57:14:99:20:35:
10:8b:e7:ef:47:5b:5c:78:ae:a9:d2:1a:a1:e6:96:
4f:65:05:3c:15:e5:3e:46:b4:26:fa:96:ee:5f:eb:
15:0d:b8:85:f4:51:d6:b5:cd:5b:fa:78:63:1b:11:
7f:20:fc:46:88:51:ed:bf:16:96:37:5b:af:4e:ae:
f7:04:62:de:b3:4a:8e:1e:98:d5:73:70:99:23:b5:
bb:b6:3c:9b:69:10:97:1a:44:bd:7a:18:e7:66:71:
b6:99:89:27:14:21:22:d9:4a:63:c4:54:6f:a8:26:
06:c4:12:c0:fc:37:53:e1:b8:ef:10:0a:83:f1:e8:
32:d3:78:6b:9b:77:ee:89:d2:d7:04:f7:12:e0:16:
d1:3f:ab:a9:d1:0b:cd:4e:bb:a1:bc:99:23:08:76:
16:86:97:0b:21:a9:fe:55:e4:10:7e:b7:78:75:98:
71:92:1c:66:2f:57:60:69:9b:43:53:ba:82:c4:9c:
b4:fb:4d:e6:15:da:c7:a1:9b:1e:0e:a4:90:1b:c4:
3c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DF:78:38:90:4F:18:4D:71:77:00:09:94:3C:C0:60:F9:95:E2:01
X509v3 Authority Key Identifier:
keyid:BB:22:CF:4C:71:A9:59:11:BD:60:46:D0:5C:0A:8B:A1:64:6C:9E:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uyLPTHGpWRG9YEbQXAqLoWRsnq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:21:5d:51:e9:77:16:01:6f:e4:b4:75:5a:1f:d0:25:09:32:
8c:35:63:91:12:02:51:69:c9:c4:67:e0:90:3b:87:a6:cb:10:
98:25:7e:3c:3c:89:30:a5:35:89:68:d9:33:ff:3b:f7:76:79:
8a:73:d6:3f:bc:fc:8e:71:f8:76:7f:27:fb:42:ac:55:0d:ac:
a7:4f:70:81:f5:cf:76:95:d8:0d:ca:4f:3c:78:ea:85:f6:bc:
a4:02:cf:cc:0b:8e:f2:23:0d:25:a0:08:51:d0:26:8f:3d:e8:
dd:79:44:34:e0:4b:5f:88:d7:c6:4b:56:6f:8c:4b:3b:4f:3d:
0d:8a:fc:17:ad:04:d4:d4:30:44:f8:c6:f6:4f:cd:17:8c:96:
02:79:9d:f8:e7:c1:26:98:8d:e6:e9:3b:62:4b:cf:91:37:c8:
6c:c6:e0:48:6d:7f:66:f5:d6:e3:33:40:98:5f:d3:23:5c:e6:
bc:41:14:80:58:ce:f7:bc:69:79:db:8e:0f:31:b0:2b:ec:a2:
22:c7:83:ab:49:5d:18:df:f7:74:eb:0a:f5:b2:3d:0f:18:71:
bc:e9:ee:1f:25:78:aa:86:9f:29:c8:ee:b7:3b:7f:ac:33:9f:
35:2d:7f:da:86:04:26:9d:13:74:17:47:78:3f:e3:d4:76:5a:
5c:35:e4:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0HlCsehgyopsuA6W3zHdAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMjJjZjRjNzFhOTU5MTFiZDYwNDZkMDVjMGE4YmExNjQ2
YzllYWQwHhcNMjUwNDI2MjIwMTA1WhcNMjUwNDI3MjIwMTA1WjAzMTEwLwYDVQQD
EygyOWRmNzgzODkwNGYxODRkNzE3NzAwMDk5NDNjYzA2MGY5OTVlMjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2g8rWkH41dogjSitVHcRMFLBPYdL
hOK1PSrsCjnuLOwk2bY0r8/lM1+YZxnHSTc8LR4KIThbVxSZIDUQi+fvR1tceK6p
0hqh5pZPZQU8FeU+RrQm+pbuX+sVDbiF9FHWtc1b+nhjGxF/IPxGiFHtvxaWN1uv
Tq73BGLes0qOHpjVc3CZI7W7tjybaRCXGkS9ehjnZnG2mYknFCEi2UpjxFRvqCYG
xBLA/DdT4bjvEAqD8egy03hrm3fuidLXBPcS4BbRP6up0QvNTruhvJkjCHYWhpcL
Ian+VeQQfrd4dZhxkhxmL1dgaZtDU7qCxJy0+03mFdrHoZseDqSQG8Q8hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnfeDiQTxhNcXcACZQ8wGD5leIBMB8GA1UdIwQY
MBaAFLsiz0xxqVkRvWBG0FwKi6FkbJ6tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXlMUFRIR3BXUkc5WUViUVhBcUxvV1JzbnEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hZTgyNWYtNmY1NC00M2VhLTliODMt
YmJhZWM3NTA1ZDk3LzEvdXlMUFRIR3BXUkc5WUViUVhBcUxvV1JzbnEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9hZTgyNWYtNmY1NC00M2VhLTliODMtYmJhZWM3NTA1ZDk3
LzEvdXlMUFRIR3BXUkc5WUViUVhBcUxvV1JzbnEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADiFdUel3
FgFv5LR1Wh/QJQkyjDVjkRICUWnJxGfgkDuHpssQmCV+PDyJMKU1iWjZM/8793Z5
inPWP7z8jnH4dn8n+0KsVQ2sp09wgfXPdpXYDcpPPHjqhfa8pALPzAuO8iMNJaAI
UdAmjz3o3XlENOBLX4jXxktWb4xLO089DYr8F60E1NQwRPjG9k/NF4yWAnmd+OfB
JpiN5uk7YkvPkTfIbMbgSG1/ZvXW4zNAmF/TI1zmvEEUgFjO97xpeduODzGwK+yi
IseDq0ldGN/3dOsK9bI9DxhxvOnuHyV4qoafKcjutzt/rDOfNS1/2oYEJp0TdBdH
eD/j1HZaXDXkZg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:37:32 2025 by rpki-client