Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
File: UhowB3IjwlxvN9z1lIB3jAtbEGg.mft (raw, json)
Hash identifier: WDBq553fBVzAQf9zXnUJAM26y++YAxznOPc8vFHeaFg=
Subject key identifier: D0:65:54:63:8C:1E:B5:BB:3E:73:2A:76:6A:A2:61:88:40:77:AF:E4
Authority key identifier: 52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
Certificate issuer: /CN=521a30077223c25c6f37dcf59480778c0b5b1068
Certificate serial: 019672D3E80452CC34A36A7D8B9FFDCD01F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
Manifest number: 02AF
Signing time: Sat 26 Apr 2025 16:00:12 +0000
Manifest this update: Sat 26 Apr 2025 16:00:12 +0000
Manifest next update: Sun 27 Apr 2025 16:00:12 +0000
Files and hashes: 1: EZLCIrzpeAQOgAoPRAnL9Jsnyns.roa (hash: zKcPyyZHtwlaeSTOg+sebV3wQH2iDfrkeYXwI2IGAm8=)
2: Fe3o1H2NZOXORu_5Q3H36pU8vac.roa (hash: ya8j4YYjDXSgsigCjodSN9yQH9BwQm9h+hSBpcdeQQk=)
3: IgamqUciVdLhTEl8qUlCv8gTk2M.roa (hash: qputrlAgmF8QE3+FmBu/iwhtSGf2HPJS8f3o4AngQYQ=)
4: OxnjvwWUCiqbD04iEI8NBnyYtDw.roa (hash: 0+WrmCLNh//XhCaulKTd1Ril/nIlAEF8FUGZmKvO2G4=)
5: UhowB3IjwlxvN9z1lIB3jAtbEGg.crl (hash: yPvRA8lp4HjSH+Z2UzZAXf8QNToQ5WlyaHtN1kJmO00=)
6: gLn6sYEOn9pRWAXsMvSDkoXwul4.roa (hash: Df6Gtp6PcMtkpweTizYMEjfslePoNKL+sfgagrdFwYw=)
7: qJ7iy-90HrN5J6Yv_EGcJYH3P0E.roa (hash: izkvvs6On2oZ0CO9kwq9OoiGecybl4o+ykCCyBRuqwI=)
8: tWQPgt2ULgR-XHuKbKbtwnO0yt4.roa (hash: FTezREACVvewvxdnyIiPFrHTxEp8/emPQ8i+6JCdMYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 16:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:d3:e8:04:52:cc:34:a3:6a:7d:8b:9f:fd:cd:01:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521a30077223c25c6f37dcf59480778c0b5b1068
Validity
Not Before: Apr 26 16:00:12 2025 GMT
Not After : Apr 27 16:00:12 2025 GMT
Subject: CN=d06554638c1eb5bb3e732a766aa261884077afe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7c:9f:8b:de:44:1b:ab:ff:8a:11:81:f3:ec:
65:65:d2:9d:72:ba:ce:01:d7:de:02:04:9f:f2:95:
d1:f0:51:ac:57:ef:1b:c6:14:84:39:3f:6a:f3:21:
3f:5b:79:d0:70:c8:33:d7:79:a7:f9:87:98:4e:e3:
57:c2:5d:f8:ce:e6:fd:a5:ce:df:79:c1:8d:54:74:
c5:e2:64:6a:1d:c3:56:4c:a6:bd:53:4c:8b:bc:0c:
5a:86:68:5f:c5:0d:ed:dd:5f:d1:10:63:4b:a3:94:
f6:87:a9:59:e1:e8:9e:f9:e5:c2:a0:c7:9e:e7:8f:
6d:83:a1:86:cc:ac:9b:31:75:11:e3:6b:f0:8e:c3:
3c:45:de:7a:14:54:24:0f:df:2f:a4:a4:65:e0:f0:
bf:50:5f:89:f0:50:91:93:71:12:cd:08:1e:e7:d6:
9e:95:96:ef:d1:05:bd:af:73:66:7b:6e:4c:24:27:
22:93:49:b3:be:63:50:3e:4a:b1:df:2b:77:28:99:
51:89:2c:04:f6:c3:20:0b:18:16:54:3e:a3:87:55:
fa:00:d9:f6:88:4e:57:60:d3:a8:10:3e:dc:e8:4f:
4a:c1:c6:29:2d:0e:a2:b5:14:7f:3b:f5:e6:c0:36:
d5:23:66:a5:0b:9b:e8:28:4f:a8:ee:b3:54:66:0f:
23:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:65:54:63:8C:1E:B5:BB:3E:73:2A:76:6A:A2:61:88:40:77:AF:E4
X509v3 Authority Key Identifier:
keyid:52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:6a:b0:a6:f7:bb:4e:6d:8d:53:4e:d4:9f:44:4e:80:11:f8:
ac:02:35:0f:67:3a:ef:ed:32:26:aa:b6:d1:a6:5e:e0:9d:47:
8c:a2:a2:82:21:c8:ae:3e:82:b3:47:f0:e3:36:5e:e0:94:6b:
da:b2:d2:d2:7d:f4:fb:f5:2a:06:64:d1:15:e0:3c:ec:f0:30:
55:6b:f0:9e:e8:03:6c:fc:55:b0:cf:ef:7a:a5:86:8c:04:a4:
44:58:1e:f3:1b:44:fa:91:22:58:69:9e:5d:d3:8a:40:d9:e8:
11:45:8e:6e:76:6d:cd:3d:9d:8e:6b:00:19:b8:97:d3:ae:1f:
42:bd:ba:12:b4:7f:37:f5:01:30:7f:3a:f3:b3:7c:da:bb:b0:
5b:4c:1d:14:91:97:4b:82:23:09:82:ed:5a:28:a5:75:cb:d5:
b1:4f:55:28:80:f1:9f:6d:a9:34:25:04:a8:3d:b6:f7:61:23:
7e:bd:59:84:db:04:02:c2:0e:53:53:13:2a:c5:c3:1b:3c:2f:
e2:dc:56:41:de:f5:c3:7e:ca:8b:80:45:84:6c:66:ff:f5:d3:
28:a9:ac:70:d0:0a:5a:34:b3:f5:04:09:67:56:3f:34:d2:b7:
54:b7:8e:98:f7:ef:24:63:e9:e9:71:fc:0e:af:18:6d:f9:8a:
16:ae:8b:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZy0+gEUsw0o2p9i5/9zQH2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWEzMDA3NzIyM2MyNWM2ZjM3ZGNmNTk0ODA3NzhjMGI1
YjEwNjgwHhcNMjUwNDI2MTYwMDEyWhcNMjUwNDI3MTYwMDEyWjAzMTEwLwYDVQQD
EyhkMDY1NTQ2MzhjMWViNWJiM2U3MzJhNzY2YWEyNjE4ODQwNzdhZmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13yfi95EG6v/ihGB8+xlZdKdcrrO
AdfeAgSf8pXR8FGsV+8bxhSEOT9q8yE/W3nQcMgz13mn+YeYTuNXwl34zub9pc7f
ecGNVHTF4mRqHcNWTKa9U0yLvAxahmhfxQ3t3V/REGNLo5T2h6lZ4eie+eXCoMee
549tg6GGzKybMXUR42vwjsM8Rd56FFQkD98vpKRl4PC/UF+J8FCRk3ESzQge59ae
lZbv0QW9r3Nme25MJCcik0mzvmNQPkqx3yt3KJlRiSwE9sMgCxgWVD6jh1X6ANn2
iE5XYNOoED7c6E9KwcYpLQ6itRR/O/XmwDbVI2alC5voKE+o7rNUZg8jWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBlVGOMHrW7PnMqdmqiYYhAd6/kMB8GA1UdIwQY
MBaAFFIaMAdyI8Jcbzfc9ZSAd4wLWxBoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82YjExNTEtYjA1YS00YTAyLWE4ODMt
MGY1ZjA5YjJlYjE0LzEvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82YjExNTEtYjA1YS00YTAyLWE4ODMtMGY1ZjA5YjJlYjE0
LzEvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgmqwpve7
Tm2NU07Un0ROgBH4rAI1D2c67+0yJqq20aZe4J1HjKKigiHIrj6Cs0fw4zZe4JRr
2rLS0n30+/UqBmTRFeA87PAwVWvwnugDbPxVsM/veqWGjASkRFge8xtE+pEiWGme
XdOKQNnoEUWObnZtzT2djmsAGbiX064fQr26ErR/N/UBMH8687N82ruwW0wdFJGX
S4IjCYLtWiildcvVsU9VKIDxn22pNCUEqD2292Ejfr1ZhNsEAsIOU1MTKsXDGzwv
4txWQd71w37Ki4BFhGxm//XTKKmscNAKWjSz9QQJZ1Y/NNK3VLeOmPfvJGPp6XH8
Dq8YbfmKFq6LHA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 23:00:56 2025 by rpki-client