Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
File: uZDIXPoM7VKDY0mX56SqjOeDbbY.mft (raw, json)
Hash identifier: Wf7vEOgTEDckCD/kbyciwIpN10CJv+77qHleTJ4r4Vg=
Subject key identifier: 9F:87:E8:3B:65:81:AE:0A:11:B9:18:70:33:00:16:A4:02:98:7C:B8
Authority key identifier: B9:90:C8:5C:FA:0C:ED:52:83:63:49:97:E7:A4:AA:8C:E7:83:6D:B6
Certificate issuer: /CN=b990c85cfa0ced5283634997e7a4aa8ce7836db6
Certificate serial: 01965CB9FEC5603FB1725F0B086ECF447224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
Manifest number: 1502
Signing time: Tue 22 Apr 2025 09:00:15 +0000
Manifest this update: Tue 22 Apr 2025 09:00:15 +0000
Manifest next update: Wed 23 Apr 2025 09:00:15 +0000
Files and hashes: 1: fhezsDFSO4Gg3v-2EzPO1VJN5k4.roa (hash: Hb04qv2mCfUH3swl1KX6h239vXc62PCAwsB9N2VdCD0=)
2: uZDIXPoM7VKDY0mX56SqjOeDbbY.crl (hash: SjI9r54bGJmzZkyAhJwc9UZPh0gfOx/UlECCy9QRD0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:b9:fe:c5:60:3f:b1:72:5f:0b:08:6e:cf:44:72:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b990c85cfa0ced5283634997e7a4aa8ce7836db6
Validity
Not Before: Apr 22 09:00:15 2025 GMT
Not After : Apr 23 09:00:15 2025 GMT
Subject: CN=9f87e83b6581ae0a11b91870330016a402987cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3a:85:30:3b:4e:81:0b:ab:d3:7b:c6:37:9a:
43:29:f0:c0:03:37:37:36:34:27:ea:58:f5:49:52:
c8:1b:32:b7:d0:65:b2:2e:63:b4:28:1b:e3:c3:52:
a3:6b:6f:5f:11:d3:e2:0b:48:55:45:68:26:98:d7:
44:7a:2f:ec:44:b2:9b:19:22:1f:ac:9c:96:08:a3:
aa:b6:0b:ce:cc:bc:f5:c0:79:9d:b0:08:33:9c:16:
f0:37:e3:a4:9a:c1:0c:57:46:36:c5:e2:f1:2f:bb:
4c:ae:f8:70:10:21:08:51:13:46:63:6c:98:76:48:
50:2a:df:9f:21:ab:d7:8b:9d:29:25:59:88:b0:dc:
ae:a0:97:c0:e3:bc:6f:3a:b8:85:40:a9:1a:eb:3c:
af:0e:e1:6d:cb:a7:e3:d5:e8:8d:02:e5:fa:5a:f7:
52:b0:e1:2e:4e:3e:c5:86:c5:ba:ca:22:f9:16:0a:
9b:ef:20:e8:12:f8:29:4f:2e:63:24:00:1e:c4:9b:
7f:97:8f:0d:04:ba:97:cb:81:66:52:50:a8:05:98:
d1:98:90:0e:ea:89:43:b2:04:ff:bf:1b:35:d3:e5:
12:56:14:05:8c:20:ea:cb:39:d9:15:ff:80:c5:24:
c5:be:08:45:34:5d:79:83:3f:d8:65:ca:34:09:91:
f5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:87:E8:3B:65:81:AE:0A:11:B9:18:70:33:00:16:A4:02:98:7C:B8
X509v3 Authority Key Identifier:
keyid:B9:90:C8:5C:FA:0C:ED:52:83:63:49:97:E7:A4:AA:8C:E7:83:6D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:b1:97:01:8a:91:6e:70:2e:4c:f4:be:8a:af:b2:30:e5:25:
80:4d:82:fb:7f:69:b2:26:16:56:76:08:0b:d7:98:86:23:96:
b8:8c:d6:21:07:25:76:5a:7d:b3:8e:a6:78:04:ba:76:1e:92:
7a:7a:c0:aa:54:0f:38:06:7e:78:7c:cc:32:d4:8e:af:cd:6e:
39:43:f4:dd:5c:ea:03:db:14:c1:5e:f4:fc:c0:9f:20:0d:87:
f0:9a:cc:43:31:c4:f9:5b:2d:77:72:d2:74:1b:45:92:e9:dc:
7f:5d:05:9b:af:b2:c1:43:45:91:8f:ee:35:be:32:69:b0:45:
02:6d:1d:e5:ea:23:f4:89:ae:e6:25:db:63:3d:ab:91:7e:10:
ab:30:82:9a:4d:31:21:41:9d:11:07:d4:5a:e7:05:6a:36:27:
5d:fa:e8:12:7a:d3:77:7d:03:d3:cc:2c:c7:ff:4b:69:86:c4:
8a:d8:6f:f0:5f:a4:74:ab:61:25:21:7b:fc:ce:6a:1f:e5:36:
67:50:d0:3e:88:77:d8:8f:27:06:60:ca:dd:4a:b6:60:d6:20:
75:58:ad:16:47:ff:c4:b8:cb:19:f8:ab:7c:24:b2:4a:a2:2d:
2a:96:b9:d9:01:95:92:20:5a:79:b6:91:3c:79:9a:ab:38:75:
7f:81:19:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZcuf7FYD+xcl8LCG7PRHIkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTBjODVjZmEwY2VkNTI4MzYzNDk5N2U3YTRhYThjZTc4
MzZkYjYwHhcNMjUwNDIyMDkwMDE1WhcNMjUwNDIzMDkwMDE1WjAzMTEwLwYDVQQD
Eyg5Zjg3ZTgzYjY1ODFhZTBhMTFiOTE4NzAzMzAwMTZhNDAyOTg3Y2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTqFMDtOgQur03vGN5pDKfDAAzc3
NjQn6lj1SVLIGzK30GWyLmO0KBvjw1Kja29fEdPiC0hVRWgmmNdEei/sRLKbGSIf
rJyWCKOqtgvOzLz1wHmdsAgznBbwN+OkmsEMV0Y2xeLxL7tMrvhwECEIURNGY2yY
dkhQKt+fIavXi50pJVmIsNyuoJfA47xvOriFQKka6zyvDuFty6fj1eiNAuX6WvdS
sOEuTj7FhsW6yiL5Fgqb7yDoEvgpTy5jJAAexJt/l48NBLqXy4FmUlCoBZjRmJAO
6olDsgT/vxs10+USVhQFjCDqyznZFf+AxSTFvghFNF15gz/YZco0CZH19wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+H6Dtlga4KEbkYcDMAFqQCmHy4MB8GA1UdIwQY
MBaAFLmQyFz6DO1Sg2NJl+ekqozng222MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpESVhQb003VktEWTBtWDU2U3FqT2VEYmJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8xNzBlY2QtZTU3Ny00MDU4LTkzNTgt
NDczZjE1ZWMwZDUyLzEvdVpESVhQb003VktEWTBtWDU2U3FqT2VEYmJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8xNzBlY2QtZTU3Ny00MDU4LTkzNTgtNDczZjE1ZWMwZDUy
LzEvdVpESVhQb003VktEWTBtWDU2U3FqT2VEYmJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt7GXAYqR
bnAuTPS+iq+yMOUlgE2C+39psiYWVnYIC9eYhiOWuIzWIQcldlp9s46meAS6dh6S
enrAqlQPOAZ+eHzMMtSOr81uOUP03VzqA9sUwV70/MCfIA2H8JrMQzHE+Vstd3LS
dBtFkuncf10Fm6+ywUNFkY/uNb4yabBFAm0d5eoj9Imu5iXbYz2rkX4QqzCCmk0x
IUGdEQfUWucFajYnXfroEnrTd30D08wsx/9LaYbEithv8F+kdKthJSF7/M5qH+U2
Z1DQPoh32I8nBmDK3Uq2YNYgdVitFkf/xLjLGfirfCSySqItKpa52QGVkiBaebaR
PHmaqzh1f4EZhQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 11:15:45 2025 by rpki-client