Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
File: uveRJ-40o67pB5yOl5nEDw3I3KI.mft (raw, json)
Hash identifier: VXHGi+xkXdFFOR2vsSahlK7SvddSC2W8HcCQz2ZTa1w=
Subject key identifier: BB:F5:83:08:71:BA:4D:6D:DA:17:BB:80:3E:2D:00:13:59:C0:85:05
Authority key identifier: BA:F7:91:27:EE:34:A3:AE:E9:07:9C:8E:97:99:C4:0F:0D:C8:DC:A2
Certificate issuer: /CN=baf79127ee34a3aee9079c8e9799c40f0dc8dca2
Certificate serial: 0196575CDD0395C04E7198FA980554529588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
Manifest number: 0918
Signing time: Mon 21 Apr 2025 08:00:25 +0000
Manifest this update: Mon 21 Apr 2025 08:00:25 +0000
Manifest next update: Tue 22 Apr 2025 08:00:25 +0000
Files and hashes: 1: _M8jdVXBLepBqO_3Zez_e6x2zw4.roa (hash: eZyfLyYE2Xw4ZTr06KMTpykro4FTlkDr9TejnMS2e4E=)
2: uveRJ-40o67pB5yOl5nEDw3I3KI.crl (hash: PjAsBjOvKYAji+kSkg6g+m0rhWfunvg7ex6An2dpN8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:5c:dd:03:95:c0:4e:71:98:fa:98:05:54:52:95:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baf79127ee34a3aee9079c8e9799c40f0dc8dca2
Validity
Not Before: Apr 21 08:00:25 2025 GMT
Not After : Apr 22 08:00:25 2025 GMT
Subject: CN=bbf5830871ba4d6dda17bb803e2d001359c08505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7e:a7:a7:6e:3b:0c:82:98:d3:ad:ed:33:6c:
1d:67:d2:5c:51:10:9a:c5:8e:90:c0:40:e2:b0:58:
0a:10:ff:e9:f8:08:c1:b5:39:b9:13:c1:05:f2:05:
c8:6d:2c:52:3e:d3:24:f2:3e:77:4d:fa:70:d2:19:
d7:d8:65:14:97:48:77:31:53:b6:1c:19:97:8b:99:
88:ae:77:eb:b2:04:d0:16:c0:9a:56:57:90:e8:65:
bc:8b:ed:ef:d1:6e:8a:c8:08:1b:0f:b0:d7:ac:63:
72:d4:39:df:34:98:fe:f4:7c:fe:35:fc:d8:2d:99:
43:76:84:7f:73:ec:99:1b:1e:d4:cd:11:1f:95:08:
f0:80:91:90:1b:10:ef:d4:62:1c:2d:86:e6:35:e7:
55:be:e2:2f:1b:5c:95:b3:e9:77:cc:33:80:16:bb:
32:7a:48:17:51:49:52:91:93:b6:7e:ce:df:35:6d:
95:61:e9:e5:2b:4b:f2:08:6c:dd:e8:0d:2c:32:bf:
91:aa:1e:fc:2c:f1:ba:01:12:15:6d:ce:ad:47:38:
89:6c:f4:37:6a:4b:f9:51:6f:2d:46:50:b0:e8:3f:
8f:86:00:19:cf:0e:89:25:3f:82:27:6f:8b:76:e0:
3b:46:b7:3f:70:23:c2:62:cd:87:1a:b9:30:60:65:
d0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F5:83:08:71:BA:4D:6D:DA:17:BB:80:3E:2D:00:13:59:C0:85:05
X509v3 Authority Key Identifier:
keyid:BA:F7:91:27:EE:34:A3:AE:E9:07:9C:8E:97:99:C4:0F:0D:C8:DC:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:4d:36:e1:e2:4b:e2:1e:f7:40:77:5a:b5:c9:8c:1e:b7:a6:
25:53:ff:47:3f:e1:75:bc:13:50:9d:a8:16:9d:2f:a0:4e:24:
cf:92:7c:25:ff:64:ee:bc:bf:96:ee:97:40:55:3a:06:98:b6:
3a:72:15:f9:ca:d8:cb:3e:8c:d6:ef:a0:2f:4f:6e:a5:0f:d9:
b6:75:62:75:bf:a4:e0:0e:1d:4b:ae:aa:0a:f2:30:71:ea:86:
78:95:b7:f2:33:6e:57:3b:23:36:6a:66:46:8b:dd:cb:88:cc:
e7:bc:12:7c:2b:f1:b4:2d:ce:71:a8:c8:0d:6e:f3:00:71:ec:
24:8e:f0:50:0e:3a:70:58:03:b9:83:e7:6e:31:a8:12:0e:56:
33:e4:1d:7c:d5:65:a2:bb:3a:32:81:d2:80:be:b7:57:9f:30:
f9:83:ef:8e:95:b4:ea:f9:47:fc:7a:08:fd:c4:bf:73:bb:e5:
fe:0e:cf:f4:f9:b6:aa:3f:b0:f4:9f:fc:38:75:2a:b2:32:42:
9d:a5:e5:05:3b:35:e6:f8:f4:2c:36:4e:e3:44:c6:76:0d:79:
02:87:51:d0:5f:9c:79:1b:9e:7a:d7:69:0f:50:db:bc:76:b0:
fa:dc:fa:3f:60:4d:13:d0:7e:c3:ff:80:3c:6c:e1:52:f3:f1:
05:11:27:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXXN0DlcBOcZj6mAVUUpWIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhZjc5MTI3ZWUzNGEzYWVlOTA3OWM4ZTk3OTljNDBmMGRj
OGRjYTIwHhcNMjUwNDIxMDgwMDI1WhcNMjUwNDIyMDgwMDI1WjAzMTEwLwYDVQQD
EyhiYmY1ODMwODcxYmE0ZDZkZGExN2JiODAzZTJkMDAxMzU5YzA4NTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzH6np247DIKY063tM2wdZ9JcURCa
xY6QwEDisFgKEP/p+AjBtTm5E8EF8gXIbSxSPtMk8j53Tfpw0hnX2GUUl0h3MVO2
HBmXi5mIrnfrsgTQFsCaVleQ6GW8i+3v0W6KyAgbD7DXrGNy1DnfNJj+9Hz+NfzY
LZlDdoR/c+yZGx7UzREflQjwgJGQGxDv1GIcLYbmNedVvuIvG1yVs+l3zDOAFrsy
ekgXUUlSkZO2fs7fNW2VYenlK0vyCGzd6A0sMr+Rqh78LPG6ARIVbc6tRziJbPQ3
akv5UW8tRlCw6D+PhgAZzw6JJT+CJ2+LduA7Rrc/cCPCYs2HGrkwYGXQPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLv1gwhxuk1t2he7gD4tABNZwIUFMB8GA1UdIwQY
MBaAFLr3kSfuNKOu6QecjpeZxA8NyNyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXZlUkotNDBvNjdwQjV5T2w1bkVEdzNJM0tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9hNWZjMTEtNzJiNC00ZjlkLWFhNDUt
YTJhNWE4ZDk5ZGI4LzEvdXZlUkotNDBvNjdwQjV5T2w1bkVEdzNJM0tJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9hNWZjMTEtNzJiNC00ZjlkLWFhNDUtYTJhNWE4ZDk5ZGI4
LzEvdXZlUkotNDBvNjdwQjV5T2w1bkVEdzNJM0tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXk024eJL
4h73QHdatcmMHremJVP/Rz/hdbwTUJ2oFp0voE4kz5J8Jf9k7ry/lu6XQFU6Bpi2
OnIV+crYyz6M1u+gL09upQ/ZtnVidb+k4A4dS66qCvIwceqGeJW38jNuVzsjNmpm
Rovdy4jM57wSfCvxtC3OcajIDW7zAHHsJI7wUA46cFgDuYPnbjGoEg5WM+QdfNVl
ors6MoHSgL63V58w+YPvjpW06vlH/HoI/cS/c7vl/g7P9Pm2qj+w9J/8OHUqsjJC
naXlBTs15vj0LDZO40TGdg15AodR0F+ceRueetdpD1DbvHaw+tz6P2BNE9B+w/+A
PGzhUvPxBREnlQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:07 2025 by rpki-client