Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
File: UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft (raw, json)
Hash identifier: gtJXXkXKGHStC7QSuqhjAJNwuf5zwIuvdIRK9fsiCYs=
Subject key identifier: E8:5A:27:69:93:C4:F9:0E:8A:E5:DB:CA:1D:05:A1:2D:26:E8:4B:6D
Authority key identifier: 51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37
Certificate issuer: /CN=51476318d71bf658f9a845f54ab27bd899892437
Certificate serial: 01965726075B3E630704CF1EAAEDC9B21B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 07:00:32 +0000
Manifest this update: Mon 21 Apr 2025 07:00:32 +0000
Manifest next update: Tue 22 Apr 2025 07:00:32 +0000
Files and hashes: 1: EPpzGnxJ9r252oa5CpCAjLjJAgw.roa (hash: 9S/swt0ExX/3EIBGsHjHQcT/9v/asJqd/AUXI6MuTis=)
2: UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl (hash: 9ARzu2rhIkav24m9t0mDdNg4YTfgbmnrenqVUtXA0JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:07:5b:3e:63:07:04:cf:1e:aa:ed:c9:b2:1b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51476318d71bf658f9a845f54ab27bd899892437
Validity
Not Before: Apr 21 07:00:32 2025 GMT
Not After : Apr 22 07:00:32 2025 GMT
Subject: CN=e85a276993c4f90e8ae5dbca1d05a12d26e84b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7f:bc:e1:96:8c:14:a0:63:8d:3b:71:0d:f9:
62:b1:01:63:85:fb:d3:d1:57:91:38:a7:36:42:fd:
38:29:c2:e3:1f:fc:1a:04:64:7a:01:b9:3f:5f:21:
a2:09:2f:e7:68:1a:11:01:52:58:28:49:e2:78:59:
7a:c4:80:0e:8d:a5:e8:f8:a8:f3:8a:05:58:57:0e:
ef:ef:3d:a9:ce:1b:a0:f7:bd:80:22:98:a6:70:50:
d3:6c:7d:41:d5:45:fe:4d:3b:0f:fb:c0:c3:31:24:
82:71:54:d0:ee:23:3d:4d:dd:b0:61:12:74:6a:ae:
98:2f:46:ec:93:be:74:d2:43:9d:a6:92:3d:19:a6:
44:85:83:b6:d6:08:dc:d8:92:25:24:f1:e2:fd:c3:
a4:35:4f:97:25:d2:b1:28:72:e3:7f:25:31:2b:37:
a5:62:ad:9b:be:73:a5:fb:5f:57:e4:83:3c:23:83:
41:92:71:aa:ec:8c:a3:98:f0:93:49:bd:3f:a3:2d:
6d:52:2c:d7:42:82:d5:d7:81:eb:0f:2e:87:c1:c0:
b1:cf:54:52:a2:f6:f1:56:f7:55:1c:38:fe:b8:96:
3c:f3:a0:a6:01:45:6a:a0:59:71:a0:66:14:95:00:
9f:9b:c2:b5:08:22:4b:10:d9:eb:47:6b:6b:a4:e0:
5b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5A:27:69:93:C4:F9:0E:8A:E5:DB:CA:1D:05:A1:2D:26:E8:4B:6D
X509v3 Authority Key Identifier:
keyid:51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b8:81:3d:11:7c:2d:b2:6f:24:34:5b:6f:32:d6:48:bd:f4:
1d:1e:28:b6:27:d0:08:fa:d1:78:4d:49:a4:c4:35:59:e3:cf:
39:7d:24:aa:24:91:d7:2b:02:f7:9f:fb:02:72:e4:ff:fe:02:
ef:97:21:1e:4f:63:9b:c0:8a:cd:82:24:9c:57:45:f1:eb:30:
cd:f0:85:b7:23:bf:a4:fa:15:dc:65:7b:32:6f:5e:f3:38:7b:
17:4e:04:f8:ae:2c:f2:37:ba:64:3f:e4:7f:ba:43:84:a9:9a:
bf:a2:9f:cf:1c:59:f5:9a:67:ce:d4:7c:3d:0b:39:5a:ee:57:
4b:6d:fd:37:ea:80:ea:89:dc:bf:f6:f2:ad:84:39:a8:9f:05:
2c:e9:67:f5:af:cb:a6:33:91:ff:b3:67:03:ea:a8:ad:6f:95:
bb:93:31:51:70:45:0d:f5:48:20:36:aa:2f:25:a9:7b:53:ea:
bc:f0:e2:fd:61:bf:ee:cb:3b:bd:80:d8:ac:1d:a0:73:e6:97:
c5:f2:55:05:a8:eb:11:bc:14:ad:d8:17:24:0f:96:84:ff:45:
18:e6:46:58:80:59:0d:d3:05:0c:2c:09:9b:9d:98:3d:88:bd:
8d:30:3d:71:c8:97:19:d1:5e:9e:da:df:b8:02:47:65:72:76:
97:e8:8d:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXJgdbPmMHBM8equ3JshtmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNDc2MzE4ZDcxYmY2NThmOWE4NDVmNTRhYjI3YmQ4OTk4
OTI0MzcwHhcNMjUwNDIxMDcwMDMyWhcNMjUwNDIyMDcwMDMyWjAzMTEwLwYDVQQD
EyhlODVhMjc2OTkzYzRmOTBlOGFlNWRiY2ExZDA1YTEyZDI2ZTg0YjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH+84ZaMFKBjjTtxDflisQFjhfvT
0VeROKc2Qv04KcLjH/waBGR6Abk/XyGiCS/naBoRAVJYKEnieFl6xIAOjaXo+Kjz
igVYVw7v7z2pzhug972AIpimcFDTbH1B1UX+TTsP+8DDMSSCcVTQ7iM9Td2wYRJ0
aq6YL0bsk7500kOdppI9GaZEhYO21gjc2JIlJPHi/cOkNU+XJdKxKHLjfyUxKzel
Yq2bvnOl+19X5IM8I4NBknGq7IyjmPCTSb0/oy1tUizXQoLV14HrDy6HwcCxz1RS
ovbxVvdVHDj+uJY886CmAUVqoFlxoGYUlQCfm8K1CCJLENnrR2trpOBb5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhaJ2mTxPkOiuXbyh0FoS0m6EttMB8GA1UdIwQY
MBaAFFFHYxjXG/ZY+ahF9Uqye9iZiSQ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVVkakdOY2I5bGo1cUVYMVNySjcySm1KSkRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi82MjA3ZTgtZWViNS00MzM0LThkZmUt
NjM3OTljMDI2YTU3LzEvVVVkakdOY2I5bGo1cUVYMVNySjcySm1KSkRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi82MjA3ZTgtZWViNS00MzM0LThkZmUtNjM3OTljMDI2YTU3
LzEvVVVkakdOY2I5bGo1cUVYMVNySjcySm1KSkRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7iBPRF8
LbJvJDRbbzLWSL30HR4otifQCPrReE1JpMQ1WePPOX0kqiSR1ysC95/7AnLk//4C
75chHk9jm8CKzYIknFdF8eswzfCFtyO/pPoV3GV7Mm9e8zh7F04E+K4s8je6ZD/k
f7pDhKmav6KfzxxZ9ZpnztR8PQs5Wu5XS239N+qA6oncv/byrYQ5qJ8FLOln9a/L
pjOR/7NnA+qorW+Vu5MxUXBFDfVIIDaqLyWpe1PqvPDi/WG/7ss7vYDYrB2gc+aX
xfJVBajrEbwUrdgXJA+WhP9FGOZGWIBZDdMFDCwJm52YPYi9jTA9cciXGdFentrf
uAJHZXJ2l+iNrg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:39:43 2025 by rpki-client