Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
File: UxIuA6hBuIeJY6__9pXKT5_QaCw.mft (raw, json)
Hash identifier: TeoYgnRb3czVjBsX5/Kg+WzfQZUrYrbUrpmBfHvPL0Y=
Subject key identifier: 4E:44:0E:81:A0:0D:1A:2A:74:D6:50:10:B6:C3:A0:DD:C9:6A:C6:F8
Authority key identifier: 53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
Certificate issuer: /CN=53122e03a841b8878963affff695ca4f9fd0682c
Certificate serial: 01965C4C428D82C71A9EA08F3E183DB93CE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
Manifest number: 0E16
Signing time: Tue 22 Apr 2025 07:00:23 +0000
Manifest this update: Tue 22 Apr 2025 07:00:23 +0000
Manifest next update: Wed 23 Apr 2025 07:00:23 +0000
Files and hashes: 1: 8Gu79OIRNXvUo-bIQSvBx7xUqx0.roa (hash: BX2fgKcwA/D+GDVmNic2yN4VwJrGKaQ4xJFsZbX1RYA=)
2: UxIuA6hBuIeJY6__9pXKT5_QaCw.crl (hash: N1NRUGM8/y6MK/5/HifDOk4tgioiNwzRQZ6V99MKS2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:4c:42:8d:82:c7:1a:9e:a0:8f:3e:18:3d:b9:3c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53122e03a841b8878963affff695ca4f9fd0682c
Validity
Not Before: Apr 22 07:00:23 2025 GMT
Not After : Apr 23 07:00:23 2025 GMT
Subject: CN=4e440e81a00d1a2a74d65010b6c3a0ddc96ac6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e9:44:43:cb:b8:b3:8b:1c:51:96:0c:2a:c2:
38:7b:c0:19:07:da:34:a4:99:4b:e7:5e:8e:33:7c:
f2:0b:59:97:e5:a5:50:1f:1c:a4:e7:5f:bb:b6:34:
09:3b:da:8c:79:be:3a:9b:9e:1b:5d:93:e4:d0:b0:
89:12:9f:e2:0f:65:6a:3c:af:3c:52:88:77:51:41:
9f:26:f9:ed:c1:45:55:e4:1b:91:54:25:87:ce:3d:
18:ba:aa:b6:c7:40:37:37:f9:2d:59:d7:92:d1:42:
03:0e:d8:be:d5:0c:6b:19:59:c6:48:38:95:45:9e:
98:31:af:45:e0:d8:3d:6b:c0:15:f5:4d:25:c2:6b:
ec:ae:38:53:b0:32:f6:59:c1:ae:2c:d6:31:ae:1e:
90:ff:05:65:b6:bb:1d:98:90:fc:b6:a8:93:8c:40:
a7:98:e3:79:a9:f7:bd:9c:02:6c:95:33:39:a5:e1:
52:43:3f:b4:81:18:54:c9:b8:24:0b:af:90:55:24:
2c:95:15:71:5b:ee:d2:b5:c4:94:43:0d:79:cc:5a:
7c:5f:1b:f5:3c:19:43:34:54:87:82:b4:cc:9d:42:
74:25:ad:7f:b3:1e:c2:43:08:b2:b9:d0:29:9c:d1:
fb:df:db:16:29:ba:88:22:70:60:52:50:d5:07:21:
3a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:44:0E:81:A0:0D:1A:2A:74:D6:50:10:B6:C3:A0:DD:C9:6A:C6:F8
X509v3 Authority Key Identifier:
keyid:53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:3f:7e:6a:9d:4d:3f:cd:92:fa:f7:da:e9:8e:9f:80:09:ff:
a8:b2:a4:06:28:df:72:04:5e:4d:da:ec:9b:f9:65:07:de:e0:
36:5d:aa:79:9a:b0:48:f2:4f:bd:54:fd:f4:95:f7:a1:e5:80:
bf:95:04:c2:15:66:1a:49:85:a5:ac:e7:f9:00:4f:8f:bc:f0:
8f:ce:42:ec:69:60:31:f9:34:fa:b4:98:7e:99:2f:52:28:4d:
88:2f:0c:b9:18:50:73:52:51:12:28:ce:da:cf:8e:71:71:45:
72:0a:9f:6b:9a:46:8c:30:d8:d6:ef:93:c0:c8:4d:78:24:f7:
1f:8e:93:d5:01:c1:b3:cc:6d:c4:6c:28:05:6b:eb:15:94:69:
7a:9c:e0:01:88:95:76:41:1a:66:7d:d0:e4:04:ac:7f:ef:f8:
9c:13:15:5c:e8:52:36:7a:65:01:ef:74:bf:7b:87:f6:21:11:
4a:93:19:ae:b0:be:44:68:3e:15:9a:e4:16:27:de:f6:ee:6b:
05:83:ec:db:b2:18:ae:e1:9d:67:0d:f5:97:e5:fb:aa:a2:52:
53:19:73:e9:37:00:f5:e5:02:38:3d:ec:a7:65:1c:9d:b8:5e:
8e:18:07:be:e8:9c:dc:76:0b:e1:a3:c4:08:a4:bb:66:c2:ac:
6d:a0:45:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZcTEKNgscanqCPPhg9uTziMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMTIyZTAzYTg0MWI4ODc4OTYzYWZmZmY2OTVjYTRmOWZk
MDY4MmMwHhcNMjUwNDIyMDcwMDIzWhcNMjUwNDIzMDcwMDIzWjAzMTEwLwYDVQQD
Eyg0ZTQ0MGU4MWEwMGQxYTJhNzRkNjUwMTBiNmMzYTBkZGM5NmFjNmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxulEQ8u4s4scUZYMKsI4e8AZB9o0
pJlL516OM3zyC1mX5aVQHxyk51+7tjQJO9qMeb46m54bXZPk0LCJEp/iD2VqPK88
Uoh3UUGfJvntwUVV5BuRVCWHzj0Yuqq2x0A3N/ktWdeS0UIDDti+1QxrGVnGSDiV
RZ6YMa9F4Ng9a8AV9U0lwmvsrjhTsDL2WcGuLNYxrh6Q/wVltrsdmJD8tqiTjECn
mON5qfe9nAJslTM5peFSQz+0gRhUybgkC6+QVSQslRVxW+7StcSUQw15zFp8Xxv1
PBlDNFSHgrTMnUJ0Ja1/sx7CQwiyudApnNH739sWKbqIInBgUlDVByE6cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5EDoGgDRoqdNZQELbDoN3Jasb4MB8GA1UdIwQY
MBaAFFMSLgOoQbiHiWOv//aVyk+f0GgsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXhJdUE2aEJ1SWVKWTZfXzlwWEtUNV9RYUN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mNTM5Y2ItMTRiZi00OGEyLWE4MzUt
Y2U4ZDJkZDQzMDY2LzEvVXhJdUE2aEJ1SWVKWTZfXzlwWEtUNV9RYUN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mNTM5Y2ItMTRiZi00OGEyLWE4MzUtY2U4ZDJkZDQzMDY2
LzEvVXhJdUE2aEJ1SWVKWTZfXzlwWEtUNV9RYUN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkj9+ap1N
P82S+vfa6Y6fgAn/qLKkBijfcgReTdrsm/llB97gNl2qeZqwSPJPvVT99JX3oeWA
v5UEwhVmGkmFpazn+QBPj7zwj85C7GlgMfk0+rSYfpkvUihNiC8MuRhQc1JREijO
2s+OcXFFcgqfa5pGjDDY1u+TwMhNeCT3H46T1QHBs8xtxGwoBWvrFZRpepzgAYiV
dkEaZn3Q5ASsf+/4nBMVXOhSNnplAe90v3uH9iERSpMZrrC+RGg+FZrkFife9u5r
BYPs27IYruGdZw31l+X7qqJSUxlz6TcA9eUCOD3sp2UcnbhejhgHvuic3HYL4aPE
CKS7ZsKsbaBFmQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 13:16:22 2025 by rpki-client