Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
File: UsbdFxnihP9ccH-BIujtDYeVrz0.mft (raw, json)
Hash identifier: LB/yWp7I9qS6tRTw1RT6V30YkTCrGBL3ChLX/moFl/E=
Subject key identifier: 06:F5:52:B0:22:95:E0:09:40:A9:91:BE:39:F7:11:F3:EB:E4:52:B5
Authority key identifier: 52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
Certificate issuer: /CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Certificate serial: 0196771F02BBEE951C57D8EF29ECD64ED85C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
Manifest number: 0C76
Signing time: Sun 27 Apr 2025 12:00:43 +0000
Manifest this update: Sun 27 Apr 2025 12:00:43 +0000
Manifest next update: Mon 28 Apr 2025 12:00:43 +0000
Files and hashes: 1: SumLRFjRvRGsHVms3q07VcTY_zw.roa (hash: BPeYsAog1nRhSt1D1QkdbQMs20o6awTKDrStYSXvjag=)
2: UsbdFxnihP9ccH-BIujtDYeVrz0.crl (hash: xQHN3Nv/j58vEyu6cvL0JGsd9028TAyRJIdz4GCWH1o=)
3: xXmylsNIs75YVB4GEqmFrbYzlMQ.roa (hash: yK7A998kaxjXj5Rw2EsVAdh1pDJ8+Nt5YxCPheVH4gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1f:02:bb:ee:95:1c:57:d8:ef:29:ec:d6:4e:d8:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Validity
Not Before: Apr 27 12:00:43 2025 GMT
Not After : Apr 28 12:00:43 2025 GMT
Subject: CN=06f552b02295e00940a991be39f711f3ebe452b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c5:5f:09:71:1c:e6:4f:f1:26:0c:0e:70:ae:
f1:12:e8:5f:d3:af:e9:41:5d:92:d2:ca:39:48:d4:
70:bd:99:c5:71:27:7d:91:d3:52:9b:43:1f:53:7d:
26:2a:75:96:e1:fa:81:6b:2c:54:63:a0:5f:e2:d7:
a8:4e:da:8a:a4:53:16:cc:a8:55:2a:88:0e:ff:5e:
69:75:0b:72:6e:bb:7d:7b:57:30:84:b6:0e:a2:54:
2b:20:8f:11:80:83:4b:65:15:65:65:bf:db:c3:f6:
96:13:68:95:77:65:ba:7a:78:e4:df:02:70:d2:86:
70:18:34:df:9d:c2:83:1a:85:b5:f7:68:27:21:d3:
58:92:45:d5:2d:e0:6e:be:99:c3:7f:c8:b9:14:12:
7f:50:01:8b:d1:c7:5d:a0:b5:02:2e:9a:52:e2:77:
66:ed:ee:2a:8c:38:8b:69:48:6e:1c:82:39:d3:9a:
d6:1a:f5:ec:1a:34:43:8f:30:07:8d:00:a3:85:6f:
aa:67:02:ec:e5:90:35:05:e5:aa:a2:b6:94:5d:d6:
47:9a:31:11:dd:58:2a:85:a6:d6:8e:6a:30:f8:d3:
ef:f8:56:bc:8b:46:73:cd:77:5e:dc:b7:9d:0f:f3:
50:14:92:82:5a:e3:e2:93:50:a6:d9:2f:b3:bc:4c:
72:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F5:52:B0:22:95:E0:09:40:A9:91:BE:39:F7:11:F3:EB:E4:52:B5
X509v3 Authority Key Identifier:
keyid:52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:4f:e7:74:99:35:07:f9:8e:ae:e9:0f:00:b9:1b:c7:a3:37:
3c:b2:a5:6a:b8:ab:ae:bf:5d:a7:5f:4c:63:c6:08:03:ba:1d:
29:37:35:5b:50:c4:a8:65:30:16:e0:2b:be:c2:a1:1f:1f:9f:
e2:f0:a2:0d:bc:cb:6a:6f:56:4f:5c:42:7a:53:99:cf:00:bf:
7f:29:23:70:52:58:27:f9:9c:57:9f:7d:2a:38:27:3d:11:c1:
52:cf:ae:2d:e0:ec:c3:07:dc:99:b7:87:e9:fa:04:b5:f8:3d:
00:41:fc:fa:15:e1:61:02:d6:03:97:04:da:2c:66:5e:d0:f1:
86:02:73:14:14:2c:70:c3:1a:00:5d:77:35:4e:83:b7:1b:4a:
b2:3d:ac:15:2b:a7:49:45:06:d2:63:db:ed:61:49:f2:e4:9e:
32:af:82:f4:fe:d1:6c:44:5a:20:02:1e:15:b3:9f:33:9b:1a:
ec:b0:2b:4f:58:a4:aa:71:b7:10:2d:43:c9:1d:f9:15:38:27:
5c:98:2d:2e:ea:15:26:2d:b6:b0:2f:a5:19:18:3b:f4:97:06:
95:ca:ff:59:50:ca:7b:a7:1b:86:91:c7:76:44:c4:33:20:34:
95:59:bb:41:d5:0d:91:13:fe:9f:1f:59:37:d8:be:75:f5:36:
54:ab:c7:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3HwK77pUcV9jvKezWTthcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYzZkZDE3MTllMjg0ZmY1YzcwN2Y4MTIyZThlZDBkODc5
NWFmM2QwHhcNMjUwNDI3MTIwMDQzWhcNMjUwNDI4MTIwMDQzWjAzMTEwLwYDVQQD
EygwNmY1NTJiMDIyOTVlMDA5NDBhOTkxYmUzOWY3MTFmM2ViZTQ1MmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksVfCXEc5k/xJgwOcK7xEuhf06/p
QV2S0so5SNRwvZnFcSd9kdNSm0MfU30mKnWW4fqBayxUY6Bf4teoTtqKpFMWzKhV
KogO/15pdQtybrt9e1cwhLYOolQrII8RgINLZRVlZb/bw/aWE2iVd2W6enjk3wJw
0oZwGDTfncKDGoW192gnIdNYkkXVLeBuvpnDf8i5FBJ/UAGL0cddoLUCLppS4ndm
7e4qjDiLaUhuHII505rWGvXsGjRDjzAHjQCjhW+qZwLs5ZA1BeWqoraUXdZHmjER
3VgqhabWjmow+NPv+Fa8i0ZzzXde3LedD/NQFJKCWuPik1Cm2S+zvExyUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAb1UrAileAJQKmRvjn3EfPr5FK1MB8GA1UdIwQY
MBaAFFLG3RcZ4oT/XHB/gSLo7Q2Hla89MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXNiZEZ4bmloUDljY0gtQkl1anREWWVWcnowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8xMGIyOGUtZjkyOC00YTMwLTk0ZjMt
NjlkNDA2ZTE4NjUzLzEvVXNiZEZ4bmloUDljY0gtQkl1anREWWVWcnowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8xMGIyOGUtZjkyOC00YTMwLTk0ZjMtNjlkNDA2ZTE4NjUz
LzEvVXNiZEZ4bmloUDljY0gtQkl1anREWWVWcnowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApk/ndJk1
B/mOrukPALkbx6M3PLKlarirrr9dp19MY8YIA7odKTc1W1DEqGUwFuArvsKhHx+f
4vCiDbzLam9WT1xCelOZzwC/fykjcFJYJ/mcV599KjgnPRHBUs+uLeDswwfcmbeH
6foEtfg9AEH8+hXhYQLWA5cE2ixmXtDxhgJzFBQscMMaAF13NU6DtxtKsj2sFSun
SUUG0mPb7WFJ8uSeMq+C9P7RbERaIAIeFbOfM5sa7LArT1ikqnG3EC1DyR35FTgn
XJgtLuoVJi22sC+lGRg79JcGlcr/WVDKe6cbhpHHdkTEMyA0lVm7QdUNkRP+nx9Z
N9i+dfU2VKvHqw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 19:05:17 2025 by rpki-client