Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
File: u0cxiEug9XP6YYtuetUDoSyWWvM.mft (raw, json)
Hash identifier: MWwFuRzWDZNcifb7kbuRXiJxmaZMc/hFHp7k2s12AAM=
Subject key identifier: 4B:29:09:18:2B:4E:5A:66:47:CC:E0:CB:2B:C3:41:9C:99:5B:BD:3A
Authority key identifier: BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
Certificate issuer: /CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Certificate serial: 01964DEBC2D5B7C03FCAB85BAEF8E8BC5513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
Manifest number: 0C89
Signing time: Sat 19 Apr 2025 12:00:18 +0000
Manifest this update: Sat 19 Apr 2025 12:00:18 +0000
Manifest next update: Sun 20 Apr 2025 12:00:18 +0000
Files and hashes: 1: J2J2124S8bl0D8F_rprl_YIDy9g.roa (hash: EwSuszD8kbzr8hDPn6y6v2FnpMpKvYRTbCp+B6KwMRQ=)
2: TgyKwJa2KkbDi0Hpkc1sfLVSKbY.roa (hash: PBkxa8WbS+Zs7wyVcsYo6bQBjySTnxQqvA/GU7hJEfs=)
3: u0cxiEug9XP6YYtuetUDoSyWWvM.crl (hash: EDiTZIF3eqDLK2ltPsLpBt0uGgAJk/p92vx+kuydZpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 12:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:eb:c2:d5:b7:c0:3f:ca:b8:5b:ae:f8:e8:bc:55:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Validity
Not Before: Apr 19 12:00:18 2025 GMT
Not After : Apr 20 12:00:18 2025 GMT
Subject: CN=4b2909182b4e5a6647cce0cb2bc3419c995bbd3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:97:eb:e7:9b:23:71:0c:fd:4d:2f:c0:ff:f6:
b2:94:4c:e1:ae:d9:f1:30:6d:3d:5b:ff:5b:45:6d:
4d:59:7a:15:e9:8d:ff:2f:98:70:a0:51:2c:6c:85:
bf:80:d9:a7:c0:2d:52:d1:f6:c7:55:95:3d:5b:46:
45:ac:17:08:57:6c:82:7f:1b:4e:26:d3:34:f4:2e:
2d:ff:4a:a5:6b:54:55:49:c9:eb:99:0b:c5:32:51:
eb:e4:3b:6c:24:f4:01:bf:84:bf:83:a7:6d:0d:e3:
63:79:66:d6:69:a7:24:83:46:3a:5e:44:88:15:79:
00:5d:29:77:dc:1c:c3:51:42:75:94:2b:d2:39:7e:
bd:86:43:54:75:6b:3d:bb:6c:83:ed:be:46:21:e3:
e5:cc:69:3c:f0:96:53:23:5d:f5:f1:d0:72:5d:01:
7e:7b:47:b5:85:9b:29:06:72:73:04:e3:d5:f4:d9:
a9:2a:51:79:6f:62:44:83:63:97:b6:13:95:b6:13:
42:b2:61:fb:ad:08:43:ed:e2:96:da:00:f0:83:85:
de:25:2f:a8:79:4b:40:84:71:83:58:f1:01:d7:2f:
74:d2:ae:e8:58:45:b8:9b:1c:17:2b:58:ce:e2:dc:
eb:a5:8f:57:35:ac:35:48:5c:71:27:8e:d0:10:bc:
40:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:29:09:18:2B:4E:5A:66:47:CC:E0:CB:2B:C3:41:9C:99:5B:BD:3A
X509v3 Authority Key Identifier:
keyid:BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a2:c5:44:f4:26:c1:7a:b4:af:db:04:88:9c:c7:32:c6:86:
6d:23:6b:75:ed:5f:e8:48:be:77:5e:d5:cf:36:bc:73:2d:1d:
63:a0:a0:59:4a:7c:a6:a5:5e:7b:48:fc:0b:fc:e6:1d:c5:f3:
e6:94:71:80:83:7f:3f:e4:86:98:26:70:8c:b4:ca:4e:52:15:
29:8c:d3:67:21:d3:86:1c:01:2b:09:f6:b4:bb:89:40:bf:24:
b8:bc:f4:0b:4c:02:bb:fc:80:3d:28:ea:04:63:aa:07:48:47:
1a:c5:8e:f7:23:66:30:6c:50:1c:64:f5:33:c6:42:8b:a8:d7:
1e:c2:b0:b6:ab:cb:83:ae:1d:e3:e4:fa:60:48:aa:7d:4a:69:
26:98:7f:55:09:54:cc:05:30:6e:bf:75:3d:2d:d5:4d:57:7c:
f1:14:35:70:42:49:82:11:94:13:69:dc:86:98:f1:c6:da:4f:
dc:41:06:dc:62:42:06:55:78:31:da:0b:f2:aa:f4:6b:4e:89:
f5:99:dd:3e:36:4c:e4:0b:3f:07:85:5f:49:aa:f8:a3:89:c8:
f7:fc:e0:3c:24:70:2c:a8:8d:c9:5c:a2:40:ab:3e:f4:2d:50:
b4:dc:23:ff:6c:48:f3:be:9b:09:37:ac:83:f3:08:2c:6b:1b:
1a:55:31:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZN68LVt8A/yrhbrvjovFUTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNDczMTg4NGJhMGY1NzNmYTYxOGI2ZTdhZDUwM2ExMmM5
NjVhZjMwHhcNMjUwNDE5MTIwMDE4WhcNMjUwNDIwMTIwMDE4WjAzMTEwLwYDVQQD
Eyg0YjI5MDkxODJiNGU1YTY2NDdjY2UwY2IyYmMzNDE5Yzk5NWJiZDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZfr55sjcQz9TS/A//aylEzhrtnx
MG09W/9bRW1NWXoV6Y3/L5hwoFEsbIW/gNmnwC1S0fbHVZU9W0ZFrBcIV2yCfxtO
JtM09C4t/0qla1RVScnrmQvFMlHr5DtsJPQBv4S/g6dtDeNjeWbWaackg0Y6XkSI
FXkAXSl33BzDUUJ1lCvSOX69hkNUdWs9u2yD7b5GIePlzGk88JZTI1318dByXQF+
e0e1hZspBnJzBOPV9NmpKlF5b2JEg2OXthOVthNCsmH7rQhD7eKW2gDwg4XeJS+o
eUtAhHGDWPEB1y900q7oWEW4mxwXK1jO4tzrpY9XNaw1SFxxJ47QELxAhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEspCRgrTlpmR8zgyyvDQZyZW706MB8GA1UdIwQY
MBaAFLtHMYhLoPVz+mGLbnrVA6EsllrzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTBjeGlFdWc5WFA2WVl0dWV0VURvU3lXV3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jMjEyYTItMzdlOS00YWQ2LWJiZTYt
ODM1YTU4NDJiOTRjLzEvdTBjeGlFdWc5WFA2WVl0dWV0VURvU3lXV3ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9jMjEyYTItMzdlOS00YWQ2LWJiZTYtODM1YTU4NDJiOTRj
LzEvdTBjeGlFdWc5WFA2WVl0dWV0VURvU3lXV3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWqLFRPQm
wXq0r9sEiJzHMsaGbSNrde1f6Ei+d17Vzza8cy0dY6CgWUp8pqVee0j8C/zmHcXz
5pRxgIN/P+SGmCZwjLTKTlIVKYzTZyHThhwBKwn2tLuJQL8kuLz0C0wCu/yAPSjq
BGOqB0hHGsWO9yNmMGxQHGT1M8ZCi6jXHsKwtqvLg64d4+T6YEiqfUppJph/VQlU
zAUwbr91PS3VTVd88RQ1cEJJghGUE2nchpjxxtpP3EEG3GJCBlV4MdoL8qr0a06J
9ZndPjZM5As/B4VfSar4o4nI9/zgPCRwLKiNyVyiQKs+9C1QtNwj/2xI876bCTes
g/MILGsbGlUxvg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:13:30 2025 by rpki-client