Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
File: UeK-E5rnec09T-68zTaCgaH156A.mft (raw, json)
Hash identifier: WwIbdyoezNejxylq0h1KW0OxELUFfjYAi3uB4dUZP/Y=
Subject key identifier: CF:A8:77:58:A4:EF:C2:EC:B2:BF:17:70:29:8F:A9:B7:A2:B8:59:7A
Authority key identifier: 51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0
Certificate issuer: /CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
Certificate serial: 01965BDEC6D1ECA398B6AA3D425B3D2CD72D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
Manifest number: 1500
Signing time: Tue 22 Apr 2025 05:00:48 +0000
Manifest this update: Tue 22 Apr 2025 05:00:48 +0000
Manifest next update: Wed 23 Apr 2025 05:00:48 +0000
Files and hashes: 1: UeK-E5rnec09T-68zTaCgaH156A.crl (hash: 8qMm+o1hua6Z8Cbn9OFCbOduKNqMO2ritXb+1SjaPyE=)
2: VSiusRPyIc9Tc8bThvks1NkGA7Q.roa (hash: uzDtGIiakPGkLOEGtmPHEX+erK/AAaDobyuB+l6q1NI=)
3: oEAOgGGkZaklYkgZV_R2RLLowJE.roa (hash: nmzYZ74qwgtxEwczkSmrHUbIJNO39YmkNHQC+ORU3+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:de:c6:d1:ec:a3:98:b6:aa:3d:42:5b:3d:2c:d7:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
Validity
Not Before: Apr 22 05:00:48 2025 GMT
Not After : Apr 23 05:00:48 2025 GMT
Subject: CN=cfa87758a4efc2ecb2bf1770298fa9b7a2b8597a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9c:c3:1f:c9:b3:1d:84:19:74:fc:45:bd:0f:
16:b9:f0:80:3a:b1:0c:ea:b1:4a:e3:ae:d2:44:40:
41:96:bb:32:98:65:8a:a6:a4:84:6c:c1:ef:fd:01:
74:2e:05:27:e6:ff:2b:1c:67:ab:e9:df:12:f1:ab:
ae:ca:60:2f:60:73:b5:b5:6d:94:fa:cc:6e:92:d1:
ac:75:f5:cc:10:4a:fc:0e:fe:64:b5:1a:39:31:56:
2b:ee:34:b7:f7:08:fb:f9:e6:a5:87:09:9c:47:92:
32:28:b8:2a:1a:a9:05:40:ea:2d:27:a9:34:a0:e2:
b5:6e:af:21:32:9b:8b:8b:65:a9:02:2a:76:b4:2d:
a8:2f:46:57:31:86:ef:32:87:a8:9a:96:be:60:e4:
43:e1:b9:9b:d4:b1:94:51:0f:ba:56:8f:65:66:7f:
6f:dd:21:d7:b2:ea:7a:c8:a4:3c:9c:62:0f:5a:cc:
a0:48:54:42:3a:8f:9f:8e:ac:dd:d9:8c:e5:5f:ea:
bc:99:b0:e4:17:32:c8:64:ab:23:62:6c:dc:38:63:
15:9f:f9:0d:51:8a:1e:21:aa:36:06:49:ea:ef:0f:
5a:ce:29:c3:32:53:7b:b8:c3:91:4c:76:96:d8:d0:
a2:f0:ab:f8:6c:26:9e:40:ad:f8:0d:f8:b9:dd:e0:
fb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A8:77:58:A4:EF:C2:EC:B2:BF:17:70:29:8F:A9:B7:A2:B8:59:7A
X509v3 Authority Key Identifier:
keyid:51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:23:f1:31:93:dd:bc:3f:eb:35:a8:30:d3:cc:4f:39:17:3e:
ba:6c:e0:1f:3f:d4:c9:8f:32:09:de:cc:ef:66:65:f5:08:db:
a5:d6:4d:de:5f:87:4d:b9:7a:e8:36:cc:98:28:46:ff:62:a3:
a4:03:41:dc:47:82:cc:1b:98:d7:79:22:45:e6:48:2b:d7:76:
13:dd:35:f5:ce:57:09:9f:5b:a1:cf:f7:8c:a0:4c:4f:79:ef:
79:41:a5:bf:45:33:de:31:6e:d8:0f:3a:15:a7:c8:04:bf:f0:
36:ac:60:8f:f5:3a:91:6b:d8:53:bf:5b:b1:67:11:83:a8:bc:
24:70:e8:99:02:44:0d:70:ad:22:ec:6c:59:b6:8f:d9:03:9b:
56:88:cd:68:17:e7:a1:b2:78:15:3f:27:b0:1c:80:76:a3:55:
7c:38:23:d9:69:ea:48:36:f6:eb:dd:3a:df:6e:ec:32:26:36:
20:1c:2a:e4:80:4b:c7:6c:cb:0b:64:62:f3:5c:14:ed:b7:9e:
8a:f5:58:b9:91:bf:bc:d8:ec:58:bf:e9:8b:2c:61:4d:ad:69:
44:44:46:2e:e0:98:86:b7:48:26:dc:a9:b7:39:9b:f4:78:b4:
15:5e:cf:45:0d:5a:65:f1:9c:f1:a9:89:2e:a8:76:9e:87:35:
f7:3d:9a:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZb3sbR7KOYtqo9Qls9LNctMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZTJiZTEzOWFlNzc5Y2QzZDRmZWViY2NkMzY4MjgxYTFm
NWU3YTAwHhcNMjUwNDIyMDUwMDQ4WhcNMjUwNDIzMDUwMDQ4WjAzMTEwLwYDVQQD
EyhjZmE4Nzc1OGE0ZWZjMmVjYjJiZjE3NzAyOThmYTliN2EyYjg1OTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pzDH8mzHYQZdPxFvQ8WufCAOrEM
6rFK467SREBBlrsymGWKpqSEbMHv/QF0LgUn5v8rHGer6d8S8auuymAvYHO1tW2U
+sxuktGsdfXMEEr8Dv5ktRo5MVYr7jS39wj7+ealhwmcR5IyKLgqGqkFQOotJ6k0
oOK1bq8hMpuLi2WpAip2tC2oL0ZXMYbvMoeompa+YORD4bmb1LGUUQ+6Vo9lZn9v
3SHXsup6yKQ8nGIPWsygSFRCOo+fjqzd2YzlX+q8mbDkFzLIZKsjYmzcOGMVn/kN
UYoeIao2Bknq7w9azinDMlN7uMORTHaW2NCi8Kv4bCaeQK34Dfi53eD7iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+od1ik78Lssr8XcCmPqbeiuFl6MB8GA1UdIwQY
MBaAFFHivhOa53nNPU/uvM02goGh9eegMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWVLLUU1cm5lYzA5VC02OHpUYUNnYUgxNTZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yZjU5MzEtMDVhOC00MzZiLTkyNzMt
Y2Q3YjZlZGJmY2Y1LzEvVWVLLUU1cm5lYzA5VC02OHpUYUNnYUgxNTZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8yZjU5MzEtMDVhOC00MzZiLTkyNzMtY2Q3YjZlZGJmY2Y1
LzEvVWVLLUU1cm5lYzA5VC02OHpUYUNnYUgxNTZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCPxMZPd
vD/rNagw08xPORc+umzgHz/UyY8yCd7M72Zl9QjbpdZN3l+HTbl66DbMmChG/2Kj
pANB3EeCzBuY13kiReZIK9d2E9019c5XCZ9boc/3jKBMT3nveUGlv0Uz3jFu2A86
FafIBL/wNqxgj/U6kWvYU79bsWcRg6i8JHDomQJEDXCtIuxsWbaP2QObVojNaBfn
obJ4FT8nsByAdqNVfDgj2WnqSDb26906327sMiY2IBwq5IBLx2zLC2Ri81wU7bee
ivVYuZG/vNjsWL/piyxhTa1pRERGLuCYhrdIJtyptzmb9Hi0FV7PRQ1aZfGc8amJ
Lqh2noc19z2amQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 11:20:05 2025 by rpki-client