Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
File: UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft (raw, json)
Hash identifier: GlgaZsLs8Og2NMWOFahCeQRRMms8g6pmuwRB1AeTycU=
Subject key identifier: 4A:2E:7B:60:70:65:45:F1:2B:2D:9D:1A:76:E2:88:29:75:94:57:B4
Authority key identifier: 51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37
Certificate issuer: /CN=51476318d71bf658f9a845f54ab27bd899892437
Certificate serial: 0194C387F10A17981643D0152EFBE58006E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
Manifest number: 142E
Signing time: Sat 01 Feb 2025 22:00:53 +0000
Manifest this update: Sat 01 Feb 2025 22:00:53 +0000
Manifest next update: Sun 02 Feb 2025 22:00:53 +0000
Files and hashes: 1: EPpzGnxJ9r252oa5CpCAjLjJAgw.roa (hash: 9S/swt0ExX/3EIBGsHjHQcT/9v/asJqd/AUXI6MuTis=)
2: UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl (hash: lN+ACkgGTn6g/ylxuDeKaN6X051HZC8T1eNcV/kbACM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:f1:0a:17:98:16:43:d0:15:2e:fb:e5:80:06:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51476318d71bf658f9a845f54ab27bd899892437
Validity
Not Before: Feb 1 22:00:53 2025 GMT
Not After : Feb 2 22:00:53 2025 GMT
Subject: CN=4a2e7b60706545f12b2d9d1a76e28829759457b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2d:f4:a0:b6:7f:fc:6a:22:24:05:fc:c9:ae:
21:02:3a:7f:2e:88:ab:d0:e3:f7:b5:75:ad:86:35:
54:ea:c5:d1:76:bd:23:90:8e:57:ca:f8:56:43:dc:
37:1f:10:20:77:14:c3:da:50:d5:d4:c6:fe:6e:bd:
e9:65:28:6e:95:64:fa:f1:1e:5a:78:e4:98:68:74:
8c:0e:b2:98:11:df:f1:9c:89:5d:52:0c:26:86:96:
90:b7:f1:e3:9c:12:89:e5:ba:51:83:a8:20:c9:cc:
92:f9:67:ca:02:d6:88:48:2b:a3:d2:fc:f6:0a:4c:
51:77:91:e7:b8:ed:3a:a3:41:8a:e9:f9:a5:86:98:
9e:5f:99:4b:ae:af:b9:08:2e:f2:1d:57:4f:e3:0e:
64:fb:58:a1:01:2a:29:65:4c:a9:75:6f:32:6c:df:
ba:36:f4:46:c9:35:5a:47:37:83:eb:cf:26:d1:a3:
44:7f:0a:23:dd:91:2a:0c:ef:cc:5b:ca:21:aa:17:
a8:c2:7b:51:09:e2:ff:e8:5e:ae:1f:90:cc:ca:dd:
7e:1e:b6:4d:35:1e:9d:03:3d:7e:4d:3f:5a:95:77:
46:5c:d4:de:92:f6:b1:1c:40:c6:b9:47:22:1c:27:
99:6f:1b:8b:12:12:47:5d:f9:96:b5:3a:f0:35:47:
7e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2E:7B:60:70:65:45:F1:2B:2D:9D:1A:76:E2:88:29:75:94:57:B4
X509v3 Authority Key Identifier:
keyid:51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:ae:cb:d3:8a:c7:6f:56:ae:d2:64:2a:b2:c3:4d:21:c9:6e:
f4:40:f2:35:20:07:da:9a:4a:a4:f6:60:cb:52:07:68:fb:66:
4b:5c:31:c5:b7:7e:3f:e9:94:51:fd:bb:bd:29:5e:de:d2:e2:
23:8a:a8:4c:e9:20:de:74:2e:b9:bc:29:76:f8:db:b9:dc:95:
a6:a3:a2:d1:30:98:2b:69:1e:9b:d0:37:82:d2:f8:c0:76:60:
3e:de:1b:fc:57:92:85:59:77:8a:77:55:4b:d8:dc:35:9a:9c:
2d:0f:0d:e2:cc:b9:0d:5f:f4:64:ed:d1:ba:46:92:3a:1d:0d:
f6:1f:22:c1:22:46:2b:2a:64:e8:3b:7b:cd:24:80:86:9a:a6:
bb:26:57:d6:10:55:3b:79:2f:1f:2f:e3:a2:d4:56:41:70:d4:
a0:4c:1a:ee:f9:81:89:86:af:89:45:e1:df:f8:47:75:4f:82:
1d:56:e5:c2:7e:b6:bc:89:fb:97:c2:82:be:4c:43:91:c7:fb:
3d:43:43:27:37:a8:f9:eb:40:37:b2:5b:55:04:98:a8:91:2b:
6d:8b:13:46:38:5d:8a:2a:02:d4:37:77:93:38:da:73:22:10:
cb:d2:0a:c2:22:a5:93:af:21:6c:5c:3b:30:33:a7:f3:06:ef:
44:c1:56:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDh/EKF5gWQ9AVLvvlgAbhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNDc2MzE4ZDcxYmY2NThmOWE4NDVmNTRhYjI3YmQ4OTk4
OTI0MzcwHhcNMjUwMjAxMjIwMDUzWhcNMjUwMjAyMjIwMDUzWjAzMTEwLwYDVQQD
Eyg0YTJlN2I2MDcwNjU0NWYxMmIyZDlkMWE3NmUyODgyOTc1OTQ1N2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi30oLZ//GoiJAX8ya4hAjp/Loir
0OP3tXWthjVU6sXRdr0jkI5XyvhWQ9w3HxAgdxTD2lDV1Mb+br3pZShulWT68R5a
eOSYaHSMDrKYEd/xnIldUgwmhpaQt/HjnBKJ5bpRg6ggycyS+WfKAtaISCuj0vz2
CkxRd5HnuO06o0GK6fmlhpieX5lLrq+5CC7yHVdP4w5k+1ihASopZUypdW8ybN+6
NvRGyTVaRzeD688m0aNEfwoj3ZEqDO/MW8ohqheowntRCeL/6F6uH5DMyt1+HrZN
NR6dAz1+TT9alXdGXNTekvaxHEDGuUciHCeZbxuLEhJHXfmWtTrwNUd+PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoue2BwZUXxKy2dGnbiiCl1lFe0MB8GA1UdIwQY
MBaAFFFHYxjXG/ZY+ahF9Uqye9iZiSQ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVVkakdOY2I5bGo1cUVYMVNySjcySm1KSkRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi82MjA3ZTgtZWViNS00MzM0LThkZmUt
NjM3OTljMDI2YTU3LzEvVVVkakdOY2I5bGo1cUVYMVNySjcySm1KSkRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi82MjA3ZTgtZWViNS00MzM0LThkZmUtNjM3OTljMDI2YTU3
LzEvVVVkakdOY2I5bGo1cUVYMVNySjcySm1KSkRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2a7L04rH
b1au0mQqssNNIclu9EDyNSAH2ppKpPZgy1IHaPtmS1wxxbd+P+mUUf27vSle3tLi
I4qoTOkg3nQuubwpdvjbudyVpqOi0TCYK2kem9A3gtL4wHZgPt4b/FeShVl3indV
S9jcNZqcLQ8N4sy5DV/0ZO3RukaSOh0N9h8iwSJGKypk6Dt7zSSAhpqmuyZX1hBV
O3kvHy/jotRWQXDUoEwa7vmBiYaviUXh3/hHdU+CHVblwn62vIn7l8KCvkxDkcf7
PUNDJzeo+etAN7JbVQSYqJErbYsTRjhdiioC1Dd3kzjacyIQy9IKwiKlk68hbFw7
MDOn8wbvRMFWJw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:44:13 2025 by rpki-client