Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
File: ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft (raw, json)
Hash identifier: 5YqpVDott0uRsIs7YmLA+FDO1OWLiqT1daTz3L4X2eM=
Subject key identifier: 89:DF:51:FD:3E:02:7D:09:1D:51:38:A4:3B:32:27:30:1D:6B:73:EF
Authority key identifier: B9:EA:A9:9B:1B:55:B4:E5:0B:5D:9E:CC:DE:EC:DF:38:92:47:35:39
Certificate issuer: /CN=b9eaa99b1b55b4e50b5d9eccdeecdf3892473539
Certificate serial: 0196753059E43E62891BEA451361436E0206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 03:00:25 +0000
Manifest this update: Sun 27 Apr 2025 03:00:25 +0000
Manifest next update: Mon 28 Apr 2025 03:00:25 +0000
Files and hashes: 1: LLY-3_fqqLwuU8xUzGv0VRuhlCE.roa (hash: 4AsxSz12Bf5YH8H2MmV75bbJxBPmSJ6rFj3b/HihsTo=)
2: ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl (hash: 7HdcqCeYoGJ1h6YEadvJFsIP2qb4X0k3D3iKJysfSmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:59:e4:3e:62:89:1b:ea:45:13:61:43:6e:02:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9eaa99b1b55b4e50b5d9eccdeecdf3892473539
Validity
Not Before: Apr 27 03:00:25 2025 GMT
Not After : Apr 28 03:00:25 2025 GMT
Subject: CN=89df51fd3e027d091d5138a43b3227301d6b73ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:99:6c:af:9e:bf:65:38:4a:cc:e1:75:14:50:
8c:87:f8:34:a2:2c:c0:75:1d:de:db:74:3a:06:18:
e4:83:8e:fe:6b:69:9d:27:08:e2:f0:6a:6d:40:a1:
2e:f1:b3:e7:02:32:03:3a:e3:56:b9:ef:5f:90:b8:
cd:a8:e9:bf:99:60:cf:f3:31:44:59:42:49:66:6f:
51:af:93:e3:cd:08:ed:2b:6b:97:bf:64:f0:fc:8b:
b9:eb:9f:0c:f8:28:5f:eb:36:ce:b8:50:62:44:d1:
63:6b:02:bb:e3:5c:4f:e3:b6:2a:fb:bb:d5:54:32:
d4:c6:46:d3:87:c8:02:13:ff:2b:84:6b:67:9f:2c:
d5:d7:02:ef:bd:f3:a4:85:62:c6:4c:3a:c9:f4:a4:
16:b3:a9:ed:db:51:4e:16:b3:54:71:71:9e:bd:39:
59:cb:9c:d3:08:f6:8d:52:4f:63:7d:e6:61:17:4e:
25:bd:0b:e4:36:d8:9f:94:75:b7:0e:2b:f7:c4:04:
22:81:c5:ed:28:d7:e0:b0:11:1a:df:e3:24:61:28:
6a:d5:ab:b8:0e:ee:9e:10:e4:5c:47:3a:c2:b2:19:
0d:e4:39:5f:ab:8c:f8:6f:0d:df:44:c1:cc:fb:1d:
4a:7b:bf:88:9d:a7:df:f7:ce:39:31:40:12:5a:73:
73:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DF:51:FD:3E:02:7D:09:1D:51:38:A4:3B:32:27:30:1D:6B:73:EF
X509v3 Authority Key Identifier:
keyid:B9:EA:A9:9B:1B:55:B4:E5:0B:5D:9E:CC:DE:EC:DF:38:92:47:35:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:47:4d:78:fa:99:99:e0:3c:1c:10:19:8d:2b:30:02:a1:26:
e3:3c:38:e9:e9:3c:f8:09:7c:91:8d:5d:c2:0b:24:67:ba:77:
d4:ee:8f:16:a9:0c:83:25:8d:c5:b0:28:5f:35:b1:8a:8f:a5:
5a:b7:b7:1e:73:dc:e1:26:13:e7:9d:2e:43:73:27:cc:c7:21:
c3:5e:20:10:a5:e1:d7:ed:b1:f8:58:0f:dc:89:aa:9f:78:6c:
74:59:3e:b8:6a:86:0a:23:00:17:81:c8:15:4e:31:3b:ad:c9:
d8:75:30:57:85:50:1c:e3:dd:59:27:e5:9a:58:ac:07:a8:f0:
95:ee:95:8d:08:ea:7a:e0:6a:95:19:b3:00:ba:72:d0:76:d8:
3e:da:65:c1:f4:2f:35:91:b4:5a:47:40:50:fb:b9:0d:db:98:
a3:4d:47:73:5e:08:65:9d:06:b1:34:20:65:c7:bd:67:1a:f5:
6e:cd:0f:12:a2:a6:7e:de:f0:87:96:1b:92:4f:43:3a:79:01:
79:be:54:c6:48:dd:90:87:7c:a8:66:33:13:44:11:a5:f0:0f:
77:d7:57:03:28:f7:bb:b6:f6:83:84:0c:40:b5:9f:da:73:55:
21:8f:69:87:bb:25:c7:18:38:9d:09:3b:ca:24:af:a3:18:f6:
93:7c:dd:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1MFnkPmKJG+pFE2FDbgIGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZWFhOTliMWI1NWI0ZTUwYjVkOWVjY2RlZWNkZjM4OTI0
NzM1MzkwHhcNMjUwNDI3MDMwMDI1WhcNMjUwNDI4MDMwMDI1WjAzMTEwLwYDVQQD
Eyg4OWRmNTFmZDNlMDI3ZDA5MWQ1MTM4YTQzYjMyMjczMDFkNmI3M2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Jlsr56/ZThKzOF1FFCMh/g0oizA
dR3e23Q6Bhjkg47+a2mdJwji8GptQKEu8bPnAjIDOuNWue9fkLjNqOm/mWDP8zFE
WUJJZm9Rr5PjzQjtK2uXv2Tw/Iu5658M+Chf6zbOuFBiRNFjawK741xP47Yq+7vV
VDLUxkbTh8gCE/8rhGtnnyzV1wLvvfOkhWLGTDrJ9KQWs6nt21FOFrNUcXGevTlZ
y5zTCPaNUk9jfeZhF04lvQvkNtiflHW3Div3xAQigcXtKNfgsBEa3+MkYShq1au4
Du6eEORcRzrCshkN5Dlfq4z4bw3fRMHM+x1Ke7+Inaff9845MUASWnNzMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInfUf0+An0JHVE4pDsyJzAda3PvMB8GA1UdIwQY
MBaAFLnqqZsbVbTlC12ezN7s3ziSRzU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWVxcG14dFZ0T1VMWFo3TTN1emZPSkpITlRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81NWEyNzctMDM2ZS00NzM3LTlhZjEt
ZDNiZWMwNmFjOGUxLzEvdWVxcG14dFZ0T1VMWFo3TTN1emZPSkpITlRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC81NWEyNzctMDM2ZS00NzM3LTlhZjEtZDNiZWMwNmFjOGUx
LzEvdWVxcG14dFZ0T1VMWFo3TTN1emZPSkpITlRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY0dNePqZ
meA8HBAZjSswAqEm4zw46ek8+Al8kY1dwgskZ7p31O6PFqkMgyWNxbAoXzWxio+l
Wre3HnPc4SYT550uQ3MnzMchw14gEKXh1+2x+FgP3Imqn3hsdFk+uGqGCiMAF4HI
FU4xO63J2HUwV4VQHOPdWSflmlisB6jwle6VjQjqeuBqlRmzALpy0HbYPtplwfQv
NZG0WkdAUPu5DduYo01Hc14IZZ0GsTQgZce9Zxr1bs0PEqKmft7wh5Ybkk9DOnkB
eb5UxkjdkId8qGYzE0QRpfAPd9dXAyj3u7b2g4QMQLWf2nNVIY9ph7slxxg4nQk7
yiSvoxj2k3zdFg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:45:22 2025 by rpki-client