Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft
File: M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft (raw, json)
Hash identifier: RrAav6ai+V9wO6WBgOonWpF8V04Ge7PVo31b3IgJJBY=
Subject key identifier: 7F:50:F3:BE:58:BF:AF:92:7C:5E:5F:47:C0:EF:4D:C9:32:20:53:73
Authority key identifier: 33:F5:0A:8D:E9:71:F8:54:7F:5B:56:C9:7C:36:C2:87:EF:54:BD:B8
Certificate issuer: /CN=33f50a8de971f8547f5b56c97c36c287ef54bdb8
Certificate serial: 01958F610DEB45A80519F2BF7150A5200289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft
Manifest number: 1224
Signing time: Thu 13 Mar 2025 12:00:57 +0000
Manifest this update: Thu 13 Mar 2025 12:00:57 +0000
Manifest next update: Fri 14 Mar 2025 12:00:57 +0000
Files and hashes: 1: M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl (hash: +Z0g7yJ3YKGfgfwlupDIih0OJb5PkH0X1yfrvGE2lME=)
2: pMHjgJekdS1MaOx6NO05QRcLwkA.roa (hash: 0cAR/UsqHx4Uoat+wXKZE3sY02i0A2U0Zxjt7/F3FS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:61:0d:eb:45:a8:05:19:f2:bf:71:50:a5:20:02:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33f50a8de971f8547f5b56c97c36c287ef54bdb8
Validity
Not Before: Mar 13 12:00:57 2025 GMT
Not After : Mar 14 12:00:57 2025 GMT
Subject: CN=7f50f3be58bfaf927c5e5f47c0ef4dc932205373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:80:00:47:f9:8b:1e:88:44:d1:2d:e7:26:d1:
18:72:de:10:3b:a5:d3:b6:a5:de:0b:ed:2e:85:1d:
0c:e7:32:20:38:4f:87:5d:65:45:69:9e:58:bc:5d:
b7:7c:49:4e:3f:34:bc:b1:39:d2:4f:2f:3f:ce:67:
d8:1f:13:e5:09:16:1f:ff:93:b1:6e:f1:29:74:8c:
51:d7:50:cc:2e:b8:bc:62:e5:14:60:d2:17:d6:2c:
fa:32:25:09:af:08:ae:fc:47:ac:3a:38:70:c7:21:
59:6b:8f:dc:e5:34:34:af:7e:ea:30:fe:af:41:0a:
27:ec:ec:82:10:8d:25:18:c1:78:8a:b7:a8:c6:e1:
dc:ac:59:ef:9a:05:2e:8c:ec:41:1a:15:31:8a:b3:
d1:e1:35:88:60:0c:be:e3:bf:d2:e5:99:f3:a5:1c:
9d:b9:8d:cc:9c:d9:1c:e1:c2:e3:99:cf:c6:43:57:
ca:b5:34:ae:4d:08:ea:72:dd:3d:75:d4:7b:5a:9a:
f6:ca:95:06:e3:0e:aa:55:3e:71:0b:cc:88:89:6c:
52:c6:4a:36:e5:b5:55:df:58:4f:67:e0:1e:5e:09:
25:7c:9d:70:9a:dd:4a:30:be:df:f1:f3:bb:e6:ff:
18:00:95:e2:d6:83:96:3f:82:21:32:6f:1d:6a:5b:
ce:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:50:F3:BE:58:BF:AF:92:7C:5E:5F:47:C0:EF:4D:C9:32:20:53:73
X509v3 Authority Key Identifier:
keyid:33:F5:0A:8D:E9:71:F8:54:7F:5B:56:C9:7C:36:C2:87:EF:54:BD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:eb:f1:68:65:9f:83:f1:89:53:c0:88:93:cd:ff:30:79:b0:
2e:69:19:7d:2f:c7:f3:29:69:91:c2:f2:84:0d:b3:f8:43:7a:
e6:fa:2c:c8:ca:9e:e1:bd:09:a5:89:4a:88:51:06:8c:e9:41:
49:82:2c:fc:a8:bb:4b:b9:04:ef:0a:68:eb:d2:6c:99:27:43:
ca:9b:e6:a2:08:6e:0d:39:40:ac:74:f3:f3:7e:b1:b5:f0:61:
38:43:7f:fd:7e:9d:38:6a:7b:46:33:3e:0b:36:03:e5:23:08:
36:50:20:26:19:1d:48:01:e3:d9:dd:82:d5:c7:45:57:87:d3:
07:ad:32:a9:10:61:2b:a6:f2:ba:5b:5a:c7:ec:21:dc:e7:9c:
72:db:ac:40:86:63:b6:01:e7:26:76:78:da:fe:6f:95:ac:17:
47:72:62:2e:f2:f3:81:15:7f:bd:30:61:7b:0c:15:89:76:b6:
0b:ac:c6:b2:e5:c5:39:53:23:02:9d:b4:a2:24:a1:48:9f:c4:
b2:bf:95:01:dd:04:37:4f:79:9d:b8:c9:26:80:86:d5:23:9a:
f9:a8:ff:d7:d3:e6:8d:95:fb:91:b4:b0:8e:70:e5:9e:48:f7:
e0:53:42:77:d1:48:ee:35:ba:91:d0:b5:d1:e3:26:87:6a:48:
4b:5e:e6:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWPYQ3rRagFGfK/cVClIAKJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZjUwYThkZTk3MWY4NTQ3ZjViNTZjOTdjMzZjMjg3ZWY1
NGJkYjgwHhcNMjUwMzEzMTIwMDU3WhcNMjUwMzE0MTIwMDU3WjAzMTEwLwYDVQQD
Eyg3ZjUwZjNiZTU4YmZhZjkyN2M1ZTVmNDdjMGVmNGRjOTMyMjA1MzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYAAR/mLHohE0S3nJtEYct4QO6XT
tqXeC+0uhR0M5zIgOE+HXWVFaZ5YvF23fElOPzS8sTnSTy8/zmfYHxPlCRYf/5Ox
bvEpdIxR11DMLri8YuUUYNIX1iz6MiUJrwiu/EesOjhwxyFZa4/c5TQ0r37qMP6v
QQon7OyCEI0lGMF4ireoxuHcrFnvmgUujOxBGhUxirPR4TWIYAy+47/S5ZnzpRyd
uY3MnNkc4cLjmc/GQ1fKtTSuTQjqct09ddR7Wpr2ypUG4w6qVT5xC8yIiWxSxko2
5bVV31hPZ+AeXgklfJ1wmt1KML7f8fO75v8YAJXi1oOWP4IhMm8dalvOfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9Q875Yv6+SfF5fR8DvTckyIFNzMB8GA1UdIwQY
MBaAFDP1Co3pcfhUf1tWyXw2wofvVL24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTV9VS2plbHgtRlJfVzFiSmZEYkNoLTlVdmJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jOGZkMDctZDVjNy00ZWQzLTgwNzUt
Mjc0ZjEwYTVlMWUzLzEvTV9VS2plbHgtRlJfVzFiSmZEYkNoLTlVdmJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9jOGZkMDctZDVjNy00ZWQzLTgwNzUtMjc0ZjEwYTVlMWUz
LzEvTV9VS2plbHgtRlJfVzFiSmZEYkNoLTlVdmJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAduvxaGWf
g/GJU8CIk83/MHmwLmkZfS/H8ylpkcLyhA2z+EN65vosyMqe4b0JpYlKiFEGjOlB
SYIs/Ki7S7kE7wpo69JsmSdDypvmoghuDTlArHTz836xtfBhOEN//X6dOGp7RjM+
CzYD5SMINlAgJhkdSAHj2d2C1cdFV4fTB60yqRBhK6byultax+wh3OecctusQIZj
tgHnJnZ42v5vlawXR3JiLvLzgRV/vTBhewwViXa2C6zGsuXFOVMjAp20oiShSJ/E
sr+VAd0EN095nbjJJoCG1SOa+aj/19PmjZX7kbSwjnDlnkj34FNCd9FI7jW6kdC1
0eMmh2pIS17mEQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:27:32 2025 by rpki-client