Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
File: uas2E5RoPk8kOXz8jyPqssaCjeo.mft (raw, json)
Hash identifier: kBbT8rAzf66butiLrgtEO2/YtzBy06ZjD/LFhkXoAXo=
Subject key identifier: AD:57:0F:0D:81:89:5E:6F:09:E6:23:4C:3B:C0:22:97:D7:E6:BB:0F
Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
Certificate issuer: /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Certificate serial: 0196078B16D3347FDFB0739BB603438B2426
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
Manifest number: 0B25
Signing time: Sat 05 Apr 2025 20:01:17 +0000
Manifest this update: Sat 05 Apr 2025 20:01:17 +0000
Manifest next update: Sun 06 Apr 2025 20:01:17 +0000
Files and hashes: 1: ACKE5m4AhVASTJNcm4VTbtA6kdI.roa (hash: +hhyUiJYozW/jQNJrsdrV+fUd6uIWqN4Ua7y2mknaNU=)
2: nBeQB2Y8xUPw-3swsy1_kLM7Es4.roa (hash: /D6LUGVQYGSE8+TaS0MmXKU2c7huCXgV7UKacZf5IA8=)
3: uas2E5RoPk8kOXz8jyPqssaCjeo.crl (hash: 7sb+wCTVctlB+zwspTk21M8HSmXR8Gk+aHz/78bU8TU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:07:8b:16:d3:34:7f:df:b0:73:9b:b6:03:43:8b:24:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Validity
Not Before: Apr 5 20:01:17 2025 GMT
Not After : Apr 6 20:01:17 2025 GMT
Subject: CN=ad570f0d81895e6f09e6234c3bc02297d7e6bb0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b1:d2:fd:32:3b:94:fb:8f:52:25:d7:bc:c2:
17:be:bf:42:1e:a1:24:0c:d7:6c:82:70:7d:2a:4d:
4c:f1:ef:03:d0:aa:45:83:c2:3e:a6:4a:70:85:3b:
2f:68:c4:72:16:8d:cd:43:9d:fd:94:e6:be:a1:35:
2d:09:4b:0e:a3:f0:e3:06:75:d0:76:55:e2:25:91:
f5:d3:9b:7a:53:fc:56:3f:e2:d2:8d:06:14:13:f5:
37:fc:08:5e:3f:5a:e4:21:45:c6:1c:d4:9a:24:47:
1d:33:f8:53:38:d9:b2:69:db:8f:4f:03:d2:38:9f:
76:97:0f:a6:03:5e:bc:2c:e7:a2:fc:16:3b:47:cd:
17:ce:d4:9d:00:ee:72:1d:a9:3c:84:95:22:0b:6b:
78:c1:99:fc:f9:06:e1:a6:79:11:c4:27:8e:b9:e5:
f0:00:1f:8e:62:7c:c9:31:d5:1a:80:3c:e4:ad:9b:
a0:59:e6:95:6a:05:fb:34:dc:61:3b:ee:87:94:57:
86:9c:2c:d1:1c:00:bd:e5:66:c9:68:01:f6:cb:d8:
42:f4:0a:c5:9e:bc:7b:09:c4:f3:bb:1a:84:78:c4:
d4:49:46:60:c2:80:b3:59:2d:f1:df:f7:5c:f6:d1:
50:b6:0b:fc:86:b4:f1:8b:33:f2:56:8a:0f:4b:7a:
3e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:57:0F:0D:81:89:5E:6F:09:E6:23:4C:3B:C0:22:97:D7:E6:BB:0F
X509v3 Authority Key Identifier:
keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e5:5c:07:58:59:7b:4d:ca:fc:71:96:e1:c4:c8:de:28:98:
4e:1d:ff:52:8a:a1:0b:93:5d:62:60:46:68:af:5f:8b:b4:2a:
7f:44:5c:e3:ca:e3:fb:39:68:aa:7a:6a:a8:f2:f1:76:eb:05:
48:d0:78:2e:69:9b:f7:fc:08:6c:01:d9:c3:39:df:0b:58:98:
f0:de:f0:ce:10:55:8c:3b:ca:20:4f:67:c3:71:70:8a:9e:4e:
a0:e4:c9:51:0c:ce:f2:31:7e:bc:33:c5:a8:27:26:d9:17:86:
b6:64:aa:f9:c0:7e:1e:bf:15:69:c0:9f:30:06:e6:3c:cd:de:
2d:21:94:d6:70:a0:81:c7:fc:6d:af:9b:f3:1a:f7:4f:21:39:
a8:5f:dc:5a:cb:82:e4:ea:81:95:4d:b5:16:0e:93:04:f3:ff:
67:1b:21:9d:81:9b:ec:e1:b8:98:67:c3:e8:9e:72:1e:02:52:
c9:5e:57:e9:53:43:07:03:5b:86:36:e1:74:57:c9:1c:d9:e1:
c1:6a:b0:8b:8a:04:42:fe:05:ce:9b:d8:d2:b6:45:d2:fa:74:
49:22:94:c4:60:6c:11:dc:94:a9:58:ab:29:a8:9b:73:b5:ea:
08:23:84:9e:82:c6:5e:84:d9:8d:9c:98:b6:7c:2b:73:f0:55:
5e:7b:c6:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYHixbTNH/fsHObtgNDiyQmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YWIzNjEzOTQ2ODNlNGYyNDM5N2NmYzhmMjNlYWIyYzY4
MjhkZWEwHhcNMjUwNDA1MjAwMTE3WhcNMjUwNDA2MjAwMTE3WjAzMTEwLwYDVQQD
EyhhZDU3MGYwZDgxODk1ZTZmMDllNjIzNGMzYmMwMjI5N2Q3ZTZiYjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLHS/TI7lPuPUiXXvMIXvr9CHqEk
DNdsgnB9Kk1M8e8D0KpFg8I+pkpwhTsvaMRyFo3NQ539lOa+oTUtCUsOo/DjBnXQ
dlXiJZH105t6U/xWP+LSjQYUE/U3/AheP1rkIUXGHNSaJEcdM/hTONmyaduPTwPS
OJ92lw+mA168LOei/BY7R80XztSdAO5yHak8hJUiC2t4wZn8+QbhpnkRxCeOueXw
AB+OYnzJMdUagDzkrZugWeaVagX7NNxhO+6HlFeGnCzRHAC95WbJaAH2y9hC9ArF
nrx7CcTzuxqEeMTUSUZgwoCzWS3x3/dc9tFQtgv8hrTxizPyVooPS3o+OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1XDw2BiV5vCeYjTDvAIpfX5rsPMB8GA1UdIwQY
MBaAFLmrNhOUaD5PJDl8/I8j6rLGgo3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWFzMkU1Um9QazhrT1h6OGp5UHFzc2FDamVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8zNjBlZjktZWMyMC00ZTEzLTk2NDct
ZGRmZWI0MjRhZGY1LzEvdWFzMkU1Um9QazhrT1h6OGp5UHFzc2FDamVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8zNjBlZjktZWMyMC00ZTEzLTk2NDctZGRmZWI0MjRhZGY1
LzEvdWFzMkU1Um9QazhrT1h6OGp5UHFzc2FDamVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOuVcB1hZ
e03K/HGW4cTI3iiYTh3/UoqhC5NdYmBGaK9fi7Qqf0Rc48rj+zloqnpqqPLxdusF
SNB4Lmmb9/wIbAHZwznfC1iY8N7wzhBVjDvKIE9nw3Fwip5OoOTJUQzO8jF+vDPF
qCcm2ReGtmSq+cB+Hr8VacCfMAbmPM3eLSGU1nCggcf8ba+b8xr3TyE5qF/cWsuC
5OqBlU21Fg6TBPP/ZxshnYGb7OG4mGfD6J5yHgJSyV5X6VNDBwNbhjbhdFfJHNnh
wWqwi4oEQv4FzpvY0rZF0vp0SSKUxGBsEdyUqVirKaibc7XqCCOEnoLGXoTZjZyY
tnwrc/BVXnvGBA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:33 2025 by rpki-client