Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
File: Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft (raw, json)
Hash identifier: z406ok+xujR5WRRGIuc5qvN8dNaa7jmFBsjf/dckghs=
Subject key identifier: 1A:99:D1:E5:19:28:B9:EE:13:B6:5B:11:52:85:0B:AC:F1:49:1E:3A
Authority key identifier: 51:AE:DC:57:6B:DF:56:00:BF:E4:C4:79:03:85:FA:CE:DC:46:F0:34
Certificate issuer: /CN=51aedc576bdf5600bfe4c4790385facedc46f034
Certificate serial: 01964E2363A77C1B62A0B05BD1E7747AAF49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
Manifest number: 141C
Signing time: Sat 19 Apr 2025 13:01:04 +0000
Manifest this update: Sat 19 Apr 2025 13:01:04 +0000
Manifest next update: Sun 20 Apr 2025 13:01:04 +0000
Files and hashes: 1: CNVq6hwjcvgKEJLlVTlQtSTBrJw.roa (hash: XXymanpZ2oFTMQyHo/xvD9pTSAOM/yLCZqhwlA0NOiw=)
2: Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl (hash: ocV54OUeaBTkBhiZPH530x6q2Z386CL5wZtSz+WyNYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:23:63:a7:7c:1b:62:a0:b0:5b:d1:e7:74:7a:af:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51aedc576bdf5600bfe4c4790385facedc46f034
Validity
Not Before: Apr 19 13:01:04 2025 GMT
Not After : Apr 20 13:01:04 2025 GMT
Subject: CN=1a99d1e51928b9ee13b65b1152850bacf1491e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ef:af:7f:2b:7f:2f:66:46:dd:dd:69:53:2b:
16:54:9a:95:bd:3c:c4:f1:fb:73:67:44:89:a7:c8:
23:0d:e1:c7:0a:01:72:72:24:40:b9:5c:be:58:6b:
44:e0:8e:f2:73:50:8b:5a:e6:5a:b9:74:c6:36:ba:
05:5f:c8:58:95:eb:2e:b0:97:f2:4f:27:94:57:77:
21:f4:d9:e4:63:4e:f8:92:13:3c:70:51:62:99:95:
a1:7b:89:6d:13:c7:eb:7a:e7:e2:85:f8:f4:45:3d:
51:78:25:86:63:7a:42:49:34:51:e0:07:63:04:d7:
96:17:7b:c2:e9:80:a1:bd:db:f3:56:3a:3c:74:c5:
23:74:3f:94:74:5b:d0:b8:63:90:5f:91:26:5f:12:
8d:8b:05:cc:54:75:b6:98:ed:fc:5a:e4:16:01:37:
db:0a:b5:67:1f:3b:3a:3d:c8:72:8c:4e:53:15:89:
99:76:d1:a7:8c:59:d4:1d:ea:48:f2:7b:63:ec:7e:
fd:80:d4:c8:de:07:b0:d6:d9:33:d6:67:6f:61:13:
80:86:aa:92:9f:7a:d2:a8:06:da:e9:f6:f9:9b:9e:
ee:95:e0:e0:28:64:5a:25:a6:e1:a4:2d:44:b1:35:
18:cb:13:73:fd:40:ea:9f:0e:38:2d:66:10:55:d8:
85:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:99:D1:E5:19:28:B9:EE:13:B6:5B:11:52:85:0B:AC:F1:49:1E:3A
X509v3 Authority Key Identifier:
keyid:51:AE:DC:57:6B:DF:56:00:BF:E4:C4:79:03:85:FA:CE:DC:46:F0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:6a:30:ea:a5:ca:b1:16:18:83:c3:0f:07:f5:0a:58:68:5b:
0b:4e:fb:68:11:6a:d9:2b:98:4a:52:23:55:63:16:d8:b1:8d:
4d:8c:b9:92:ca:a8:2c:35:3c:3d:78:b7:00:dd:1b:41:33:e0:
d9:ed:cd:63:3f:f4:44:8e:f5:09:6c:e1:3e:51:c5:ac:eb:8a:
c4:02:bd:0f:17:fe:8d:cd:f1:ba:4e:b6:19:f1:0c:e5:b7:4c:
15:f8:21:f2:0f:90:f0:08:cf:25:f9:71:d6:f7:64:3e:e9:8e:
17:62:45:29:64:85:f2:e6:eb:65:24:83:40:c4:ff:70:f7:77:
eb:8c:03:1f:06:44:18:70:16:07:c4:7c:18:3a:72:67:2c:62:
1b:7f:f6:ff:6b:d4:f1:1b:b1:7f:0d:03:1b:f7:c2:bb:0f:15:
71:6a:38:88:46:a1:2c:2c:aa:1a:4f:fe:8e:73:96:eb:4f:e0:
b8:a2:73:b7:d2:df:03:83:2f:46:c3:85:14:a2:55:44:b1:2f:
17:bf:ec:07:c2:46:14:7f:25:16:8f:52:7f:aa:ae:5d:0c:d5:
6c:87:ca:0d:9f:45:db:a9:54:34:ac:80:86:83:cf:e6:5e:1f:
da:b6:f1:e0:a3:0e:48:1e:1e:a6:00:38:ba:67:68:b6:d0:b3:
ae:32:bf:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZOI2OnfBtioLBb0ed0eq9JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYWVkYzU3NmJkZjU2MDBiZmU0YzQ3OTAzODVmYWNlZGM0
NmYwMzQwHhcNMjUwNDE5MTMwMTA0WhcNMjUwNDIwMTMwMTA0WjAzMTEwLwYDVQQD
EygxYTk5ZDFlNTE5MjhiOWVlMTNiNjViMTE1Mjg1MGJhY2YxNDkxZTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie+vfyt/L2ZG3d1pUysWVJqVvTzE
8ftzZ0SJp8gjDeHHCgFyciRAuVy+WGtE4I7yc1CLWuZauXTGNroFX8hYlesusJfy
TyeUV3ch9NnkY074khM8cFFimZWhe4ltE8freufihfj0RT1ReCWGY3pCSTRR4Adj
BNeWF3vC6YChvdvzVjo8dMUjdD+UdFvQuGOQX5EmXxKNiwXMVHW2mO38WuQWATfb
CrVnHzs6PchyjE5TFYmZdtGnjFnUHepI8ntj7H79gNTI3gew1tkz1mdvYROAhqqS
n3rSqAba6fb5m57uleDgKGRaJabhpC1EsTUYyxNz/UDqnw44LWYQVdiF3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBqZ0eUZKLnuE7ZbEVKFC6zxSR46MB8GA1UdIwQY
MBaAFFGu3Fdr31YAv+TEeQOF+s7cRvA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWE3Y1YydmZWZ0NfNU1SNUE0WDZ6dHhHOERRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9iNWQzYjgtYmRiZi00NmZiLWFhOTQt
YjE0ZTU5OWMwY2MyLzEvVWE3Y1YydmZWZ0NfNU1SNUE0WDZ6dHhHOERRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9iNWQzYjgtYmRiZi00NmZiLWFhOTQtYjE0ZTU5OWMwY2My
LzEvVWE3Y1YydmZWZ0NfNU1SNUE0WDZ6dHhHOERRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB2ow6qXK
sRYYg8MPB/UKWGhbC077aBFq2SuYSlIjVWMW2LGNTYy5ksqoLDU8PXi3AN0bQTPg
2e3NYz/0RI71CWzhPlHFrOuKxAK9Dxf+jc3xuk62GfEM5bdMFfgh8g+Q8AjPJflx
1vdkPumOF2JFKWSF8ubrZSSDQMT/cPd364wDHwZEGHAWB8R8GDpyZyxiG3/2/2vU
8Ruxfw0DG/fCuw8VcWo4iEahLCyqGk/+jnOW60/guKJzt9LfA4MvRsOFFKJVRLEv
F7/sB8JGFH8lFo9Sf6quXQzVbIfKDZ9F26lUNKyAhoPP5l4f2rbx4KMOSB4epgA4
umdottCzrjK/2w==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:24:42 2025 by rpki-client