Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
File: UaLCwG3bhGaaiamfuHVglRNMh2Y.mft (raw, json)
Hash identifier: t9IX2qrLBnzFPjhsZqfkrmqB8kBwe6qKBLeEERUh9hQ=
Subject key identifier: 26:9A:3E:D8:F8:C6:7C:92:F4:BA:1F:FD:AC:8B:38:CA:E6:6A:7E:81
Authority key identifier: 51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66
Certificate issuer: /CN=51a2c2c06ddb84669a89a99fb8756095134c8766
Certificate serial: 01963B09BFDBC13CED9B74B494C96C7E0A50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
Manifest number: 034F
Signing time: Tue 15 Apr 2025 20:00:16 +0000
Manifest this update: Tue 15 Apr 2025 20:00:16 +0000
Manifest next update: Wed 16 Apr 2025 20:00:16 +0000
Files and hashes: 1: 38SRARiPlqZX0gFjhdztc5C7_lM.roa (hash: dkiUuBXjsldgNm4qMr8SQIBsw8iMYziR9AeYndQSEBg=)
2: UaLCwG3bhGaaiamfuHVglRNMh2Y.crl (hash: jR66xqIjgyntA5MLF3igM+xj+KVONdLINorjjr2FoV4=)
3: VET9fIhBlbMTkKoXploMWOAPmAw.roa (hash: IZFEuAAvRivghgtvVt+QUqUo/tUxGCoadK0TgrUsiYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 20:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:09:bf:db:c1:3c:ed:9b:74:b4:94:c9:6c:7e:0a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51a2c2c06ddb84669a89a99fb8756095134c8766
Validity
Not Before: Apr 15 20:00:16 2025 GMT
Not After : Apr 16 20:00:16 2025 GMT
Subject: CN=269a3ed8f8c67c92f4ba1ffdac8b38cae66a7e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cc:ac:3e:e8:1b:c4:22:f6:d4:b7:77:c7:23:
3d:d5:93:56:64:2c:73:b9:a2:91:5c:79:fc:b4:e3:
0c:17:89:a2:97:c6:48:f0:be:12:b3:26:08:ee:c2:
28:35:2d:49:81:68:10:ce:48:2b:2e:c5:d9:dc:a5:
eb:d7:14:ca:94:3a:34:be:1f:d0:2b:fd:2b:d3:83:
40:37:43:8a:fd:12:58:2d:da:09:9d:4a:b9:0a:f8:
0a:5e:d1:df:60:3c:85:fa:20:3d:8e:af:19:49:81:
9a:dc:bd:cb:ef:58:ef:e5:da:ad:ef:43:d6:af:48:
38:0e:50:b3:7c:c4:d4:14:e4:3f:3e:df:5f:95:8b:
22:fd:38:7d:4b:ad:d5:17:d0:3c:52:92:15:a5:b0:
b6:39:25:2f:8f:bf:51:cf:f5:58:71:cc:5c:d1:fd:
0c:31:fe:cf:7f:60:ca:d5:b5:e3:ed:27:f8:0a:3b:
07:6e:95:d9:f4:f4:05:c9:72:09:36:f8:96:43:87:
29:34:60:a1:f9:6a:b5:c8:73:2e:cb:66:95:80:ba:
10:0e:90:40:5a:b3:9a:0c:2f:df:00:25:23:d5:65:
3d:8f:65:f5:7a:96:36:f9:f5:c2:37:41:ca:a5:18:
52:8a:a9:e4:4d:eb:d9:bb:93:96:e4:58:bc:da:9f:
ad:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9A:3E:D8:F8:C6:7C:92:F4:BA:1F:FD:AC:8B:38:CA:E6:6A:7E:81
X509v3 Authority Key Identifier:
keyid:51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:13:ba:4f:39:88:6d:65:17:57:bc:a0:a1:a3:ae:22:3c:1e:
43:24:39:0a:46:cf:79:bb:59:0b:e7:34:0f:99:2a:80:e6:87:
ba:20:f5:b5:65:1b:5c:e3:64:15:62:f3:f0:8f:17:d2:54:be:
e1:5c:3b:fc:d5:de:c8:1d:87:de:0c:20:ba:98:98:42:c3:23:
ad:c1:eb:a1:c4:92:52:6b:d5:34:01:85:be:d3:4d:e8:07:4a:
01:da:07:92:9a:e7:3c:33:cc:76:58:ad:20:f8:53:6f:22:bb:
87:4d:17:90:fe:51:19:76:6d:71:18:2a:c3:a7:1a:ec:7f:10:
02:80:3e:04:ff:88:28:58:72:43:7a:9e:6b:5d:2b:41:cf:43:
c0:0c:d5:8b:c6:e6:32:e2:f5:c2:1a:0b:cf:08:cb:e8:56:5e:
fd:68:98:95:61:89:1c:49:5f:bd:87:fd:33:68:bf:ca:c8:1c:
4a:64:25:6a:25:ec:f4:e1:ce:76:a2:be:38:b4:07:de:02:6d:
33:0a:2d:32:a9:91:3f:91:b5:c0:4a:e5:ba:53:79:f5:e9:f7:
06:f1:60:e0:fa:e2:1b:b9:97:4c:ad:37:1d:88:96:5b:59:ca:
80:1f:cc:4d:69:58:8a:60:cb:53:eb:30:8e:83:1d:81:c5:b8:
05:7e:ee:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY7Cb/bwTztm3S0lMlsfgpQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYTJjMmMwNmRkYjg0NjY5YTg5YTk5ZmI4NzU2MDk1MTM0
Yzg3NjYwHhcNMjUwNDE1MjAwMDE2WhcNMjUwNDE2MjAwMDE2WjAzMTEwLwYDVQQD
EygyNjlhM2VkOGY4YzY3YzkyZjRiYTFmZmRhYzhiMzhjYWU2NmE3ZTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMysPugbxCL21Ld3xyM91ZNWZCxz
uaKRXHn8tOMMF4mil8ZI8L4SsyYI7sIoNS1JgWgQzkgrLsXZ3KXr1xTKlDo0vh/Q
K/0r04NAN0OK/RJYLdoJnUq5CvgKXtHfYDyF+iA9jq8ZSYGa3L3L71jv5dqt70PW
r0g4DlCzfMTUFOQ/Pt9flYsi/Th9S63VF9A8UpIVpbC2OSUvj79Rz/VYccxc0f0M
Mf7Pf2DK1bXj7Sf4CjsHbpXZ9PQFyXIJNviWQ4cpNGCh+Wq1yHMuy2aVgLoQDpBA
WrOaDC/fACUj1WU9j2X1epY2+fXCN0HKpRhSiqnkTevZu5OW5Fi82p+tZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCaaPtj4xnyS9Lof/ayLOMrman6BMB8GA1UdIwQY
MBaAFFGiwsBt24Rmmompn7h1YJUTTIdmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWFMQ3dHM2JoR2FhaWFtZnVIVmdsUk5NaDJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82YWYzMTktNWY5My00M2RiLThiMjct
NzA1NGVhNmE2MGQ2LzEvVWFMQ3dHM2JoR2FhaWFtZnVIVmdsUk5NaDJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy82YWYzMTktNWY5My00M2RiLThiMjctNzA1NGVhNmE2MGQ2
LzEvVWFMQ3dHM2JoR2FhaWFtZnVIVmdsUk5NaDJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoxO6TzmI
bWUXV7ygoaOuIjweQyQ5CkbPebtZC+c0D5kqgOaHuiD1tWUbXONkFWLz8I8X0lS+
4Vw7/NXeyB2H3gwgupiYQsMjrcHrocSSUmvVNAGFvtNN6AdKAdoHkprnPDPMdlit
IPhTbyK7h00XkP5RGXZtcRgqw6ca7H8QAoA+BP+IKFhyQ3qea10rQc9DwAzVi8bm
MuL1whoLzwjL6FZe/WiYlWGJHElfvYf9M2i/ysgcSmQlaiXs9OHOdqK+OLQH3gJt
MwotMqmRP5G1wErlulN59en3BvFg4PriG7mXTK03HYiWW1nKgB/MTWlYimDLU+sw
joMdgcW4BX7uZg==
-----END CERTIFICATE-----
Generated at Wed Apr 16 06:37:41 2025 by rpki-client