Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft
File: UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft (raw, json)
Hash identifier: TjP/9XG+1tNbhpVZXXqmUrJRmUnYmpEhPpzhwgE7WLw=
Subject key identifier: 3D:6E:68:09:6F:66:29:0B:1C:87:AD:52:5B:01:17:1E:36:78:80:8B
Authority key identifier: 51:40:B5:CB:59:86:08:41:26:F6:8D:60:32:31:6D:3B:1B:57:69:6E
Certificate issuer: /CN=5140b5cb5986084126f68d6032316d3b1b57696e
Certificate serial: 019659F07D72719039B75EA6D79F51BD6A4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUC1y1mGCEEm9o1gMjFtOxtXaW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft
Manifest number: 1506
Signing time: Mon 21 Apr 2025 20:00:55 +0000
Manifest this update: Mon 21 Apr 2025 20:00:55 +0000
Manifest next update: Tue 22 Apr 2025 20:00:55 +0000
Files and hashes: 1: UUC1y1mGCEEm9o1gMjFtOxtXaW4.crl (hash: CG+e+t7ODIgKB4R4/fO9mknoS+vzSCzttZGKIWoMZis=)
2: Xjz46GAzHTdy9Og4DKomwuVi-1g.roa (hash: NqL6rYTZkhuuc0nFfTByZAzgwSO1D7DNJ/FzmVF0OjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UUC1y1mGCEEm9o1gMjFtOxtXaW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:7d:72:71:90:39:b7:5e:a6:d7:9f:51:bd:6a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5140b5cb5986084126f68d6032316d3b1b57696e
Validity
Not Before: Apr 21 20:00:55 2025 GMT
Not After : Apr 22 20:00:55 2025 GMT
Subject: CN=3d6e68096f66290b1c87ad525b01171e3678808b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ec:a7:d6:33:c9:a5:36:65:af:c1:24:d4:b5:
50:25:73:a4:29:28:40:53:0b:b1:73:d9:14:bb:7d:
7e:fe:da:69:5b:7a:a0:2b:03:63:07:5d:62:4c:89:
f4:65:84:9c:b0:7d:14:60:b2:0f:84:65:1f:27:84:
0a:a0:37:b9:54:d3:fa:85:06:cc:8a:88:d3:bd:a5:
8b:9b:ff:1c:d7:75:8e:fb:bc:9e:14:18:3e:af:53:
eb:9b:51:0e:de:83:5a:85:8e:16:e3:b0:79:ca:76:
05:83:bc:31:57:4d:0e:d6:44:b8:85:14:50:fd:fb:
1c:d0:36:65:01:ae:3c:31:09:38:f3:5a:4d:0a:4d:
0b:20:60:e0:36:43:04:0f:49:0b:cd:d6:ac:cc:ba:
12:4d:fc:f6:2e:53:93:a6:ab:45:cb:7e:6b:a7:a4:
33:96:c3:f6:8e:07:a1:3f:fd:9d:3a:0c:a8:7e:fb:
19:0b:85:49:68:10:b7:8d:7e:15:03:b5:f3:61:8d:
fa:b4:75:96:a3:48:23:8e:22:51:cf:36:ab:1a:90:
7e:41:0f:73:43:85:9a:f7:96:d6:ac:c5:84:c5:db:
71:c9:ab:61:3d:34:ea:64:b3:f6:a8:3b:33:08:fb:
c7:6c:96:b2:c9:a2:d3:da:3e:4c:a9:be:a8:ec:59:
8e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6E:68:09:6F:66:29:0B:1C:87:AD:52:5B:01:17:1E:36:78:80:8B
X509v3 Authority Key Identifier:
keyid:51:40:B5:CB:59:86:08:41:26:F6:8D:60:32:31:6D:3B:1B:57:69:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUC1y1mGCEEm9o1gMjFtOxtXaW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:9d:70:ee:4d:60:22:4a:af:30:e2:71:b6:c6:31:9c:5e:fc:
1d:af:e8:20:b3:2a:9a:70:d0:85:cd:62:79:01:27:6d:19:a0:
39:cf:73:66:9c:31:f2:13:ff:ea:87:71:3e:e1:90:45:62:4a:
92:d3:2e:26:78:16:f8:64:e1:b3:be:c6:4f:15:51:e8:7b:02:
32:4a:c3:81:2e:e2:47:36:41:6c:f9:d3:48:48:9a:cb:86:9a:
0d:90:76:59:48:1f:d2:90:18:4c:21:15:30:4f:8e:3c:15:14:
45:7d:60:06:c7:2f:3e:21:49:40:65:0d:5e:f1:9a:7d:19:3a:
3b:3c:76:99:54:44:1e:91:44:0a:b3:36:b6:36:84:4e:53:13:
4c:60:a9:89:d3:a4:49:b3:6d:87:fa:1e:01:5c:d3:3b:4b:98:
6f:c1:bd:ac:91:b2:eb:61:fb:34:70:4c:34:5b:c7:4c:74:bc:
ac:23:e5:cb:59:5e:86:9d:fe:42:18:14:a9:da:43:c3:93:b6:
28:33:a8:7e:a2:b4:24:99:6d:07:d0:8f:4b:76:7c:fd:22:f3:
44:71:6b:d3:44:0c:e7:9a:7f:06:c4:82:39:30:d4:f1:ca:be:
fd:14:97:40:41:e6:2a:3b:98:72:a5:7e:a0:6f:bb:bb:10:c1:
4b:72:ed:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZ8H1ycZA5t16m159RvWpMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNDBiNWNiNTk4NjA4NDEyNmY2OGQ2MDMyMzE2ZDNiMWI1
NzY5NmUwHhcNMjUwNDIxMjAwMDU1WhcNMjUwNDIyMjAwMDU1WjAzMTEwLwYDVQQD
EygzZDZlNjgwOTZmNjYyOTBiMWM4N2FkNTI1YjAxMTcxZTM2Nzg4MDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOyn1jPJpTZlr8Ek1LVQJXOkKShA
Uwuxc9kUu31+/tppW3qgKwNjB11iTIn0ZYScsH0UYLIPhGUfJ4QKoDe5VNP6hQbM
iojTvaWLm/8c13WO+7yeFBg+r1Prm1EO3oNahY4W47B5ynYFg7wxV00O1kS4hRRQ
/fsc0DZlAa48MQk481pNCk0LIGDgNkMED0kLzdaszLoSTfz2LlOTpqtFy35rp6Qz
lsP2jgehP/2dOgyofvsZC4VJaBC3jX4VA7XzYY36tHWWo0gjjiJRzzarGpB+QQ9z
Q4Wa95bWrMWExdtxyathPTTqZLP2qDszCPvHbJayyaLT2j5Mqb6o7FmO1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1uaAlvZikLHIetUlsBFx42eICLMB8GA1UdIwQY
MBaAFFFAtctZhghBJvaNYDIxbTsbV2luMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVVDMXkxbUdDRUVtOW8xZ01qRnRPeHRYYVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9kMTlmMmQtOTY1OS00OGIxLWIxZTgt
ZGUxM2E1NTJkZjYzLzEvVVVDMXkxbUdDRUVtOW8xZ01qRnRPeHRYYVc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9kMTlmMmQtOTY1OS00OGIxLWIxZTgtZGUxM2E1NTJkZjYz
LzEvVVVDMXkxbUdDRUVtOW8xZ01qRnRPeHRYYVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAep1w7k1g
IkqvMOJxtsYxnF78Ha/oILMqmnDQhc1ieQEnbRmgOc9zZpwx8hP/6odxPuGQRWJK
ktMuJngW+GThs77GTxVR6HsCMkrDgS7iRzZBbPnTSEiay4aaDZB2WUgf0pAYTCEV
ME+OPBUURX1gBscvPiFJQGUNXvGafRk6Ozx2mVREHpFECrM2tjaETlMTTGCpidOk
SbNth/oeAVzTO0uYb8G9rJGy62H7NHBMNFvHTHS8rCPly1lehp3+QhgUqdpDw5O2
KDOofqK0JJltB9CPS3Z8/SLzRHFr00QM55p/BsSCOTDU8cq+/RSXQEHmKjuYcqV+
oG+7uxDBS3LtIQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 23:58:37 2025 by rpki-client