Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
File: ufQO9_E-yaFW77DbOWCQvHXanUM.mft (raw, json)
Hash identifier: CsTML4lZC1TjA3Gpls2eZUJpAMbj0e26nTY5KTwkbRo=
Subject key identifier: 51:2B:75:A4:E2:65:C6:A4:A1:DD:F5:B1:30:0B:FF:85:F4:31:8B:0C
Authority key identifier: B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
Certificate issuer: /CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Certificate serial: 0196403097A65FD805A2CD963A18A28F0DAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
Manifest number: 14F3
Signing time: Wed 16 Apr 2025 20:00:48 +0000
Manifest this update: Wed 16 Apr 2025 20:00:48 +0000
Manifest next update: Thu 17 Apr 2025 20:00:48 +0000
Files and hashes: 1: 0iqw0_DRAXXz4sreW3NPTcIykK8.roa (hash: upy176yocnlw3ZFcrVK6vEr280ZPGUhzh/TpTxnYSg8=)
2: ufQO9_E-yaFW77DbOWCQvHXanUM.crl (hash: 95citBYAz2CyUUdUTtCGJUd8oY09XWhm50OzkG9n4AM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:30:97:a6:5f:d8:05:a2:cd:96:3a:18:a2:8f:0d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Validity
Not Before: Apr 16 20:00:48 2025 GMT
Not After : Apr 17 20:00:48 2025 GMT
Subject: CN=512b75a4e265c6a4a1ddf5b1300bff85f4318b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:35:f0:d3:3b:bf:0e:94:ab:f1:a5:0a:69:2c:
58:ac:05:45:c6:2a:4e:95:97:84:f2:a3:ec:c2:b7:
21:87:61:81:65:58:c8:42:c2:c3:aa:67:f4:ea:b3:
4b:77:cf:a3:1a:8b:a8:3d:a8:26:ec:98:c2:5a:1d:
6c:50:ba:9e:cc:38:d6:04:ab:17:0b:64:cb:74:ee:
d0:e6:a5:e1:76:47:c2:af:06:be:55:6d:bf:dc:ff:
a0:ec:71:5d:a9:92:11:45:3c:15:e5:40:db:54:6d:
19:44:f2:c1:2a:3d:bb:8b:3a:e6:85:2b:6e:d2:e1:
10:4c:bf:8b:84:e6:39:54:16:7e:da:bd:f9:33:6b:
75:f7:03:e6:41:c9:db:b9:6e:a1:05:58:93:1b:9c:
16:36:a4:9a:2c:f1:9f:7a:1f:05:29:cf:2a:48:fe:
7a:ea:e6:92:d2:04:97:ab:8b:9c:8f:bb:c7:ff:95:
34:65:40:c7:c4:7d:58:84:86:82:5c:69:c4:fc:75:
dd:5b:07:24:f1:aa:38:18:1f:0b:84:59:1f:d0:cc:
88:5e:44:af:44:50:36:46:d8:73:dc:8e:b5:78:a0:
20:f9:ce:a1:36:6d:fd:3c:80:35:45:ac:f7:43:3c:
a9:3c:6f:6f:21:51:e6:6d:12:48:42:91:cb:c9:c1:
4e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2B:75:A4:E2:65:C6:A4:A1:DD:F5:B1:30:0B:FF:85:F4:31:8B:0C
X509v3 Authority Key Identifier:
keyid:B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:77:d3:56:32:ab:17:02:f2:51:5d:58:6a:e4:6f:b8:9f:8e:
69:e0:99:72:84:86:57:97:05:ed:6e:d0:e3:e5:45:a9:c0:84:
5b:f5:78:a1:a0:34:59:e9:85:81:f6:27:73:62:61:f2:30:34:
6a:19:d8:38:db:c5:23:ba:73:0e:41:cd:63:e6:5a:23:9c:db:
30:8f:09:15:9a:2c:37:3b:4f:2b:0a:f4:75:08:7b:f0:e1:9d:
89:78:dc:83:c8:1f:f0:89:11:82:03:fe:65:35:d7:11:fc:d2:
e6:7c:d3:8e:41:c1:a6:b2:78:a0:6a:e2:2d:19:a6:4f:ed:07:
81:80:58:12:79:62:90:49:24:b4:01:ad:d0:74:1a:1e:d6:05:
99:e2:eb:1f:b6:b6:dc:5c:30:6d:2c:a8:0d:73:c9:db:a6:77:
47:b3:73:ce:b9:b8:24:56:61:5f:42:47:8f:d0:63:44:77:1a:
1f:4c:c2:31:86:53:d2:4f:e4:ce:9b:d6:d0:96:c1:61:36:a5:
18:b1:88:0d:c0:2d:86:6f:76:56:d4:8e:bf:a3:f8:37:f9:b6:
1d:67:fd:98:a8:d4:12:ce:21:79:63:02:cf:48:58:78:e6:61:
9a:14:80:3c:98:9f:10:29:e3:0a:cb:1a:a9:c5:7a:af:51:81:
71:a4:45:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZAMJemX9gFos2WOhiijw2tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZjQwZWY3ZjEzZWM5YTE1NmVmYjBkYjM5NjA5MGJjNzVk
YTlkNDMwHhcNMjUwNDE2MjAwMDQ4WhcNMjUwNDE3MjAwMDQ4WjAzMTEwLwYDVQQD
Eyg1MTJiNzVhNGUyNjVjNmE0YTFkZGY1YjEzMDBiZmY4NWY0MzE4YjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TXw0zu/DpSr8aUKaSxYrAVFxipO
lZeE8qPswrchh2GBZVjIQsLDqmf06rNLd8+jGouoPagm7JjCWh1sULqezDjWBKsX
C2TLdO7Q5qXhdkfCrwa+VW2/3P+g7HFdqZIRRTwV5UDbVG0ZRPLBKj27izrmhStu
0uEQTL+LhOY5VBZ+2r35M2t19wPmQcnbuW6hBViTG5wWNqSaLPGfeh8FKc8qSP56
6uaS0gSXq4ucj7vH/5U0ZUDHxH1YhIaCXGnE/HXdWwck8ao4GB8LhFkf0MyIXkSv
RFA2Rthz3I61eKAg+c6hNm39PIA1Raz3QzypPG9vIVHmbRJIQpHLycFOAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFErdaTiZcakod31sTAL/4X0MYsMMB8GA1UdIwQY
MBaAFLn0DvfxPsmhVu+w2zlgkLx12p1DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWZRTzlfRS15YUZXNzdEYk9XQ1F2SFhhblVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9lNzcyNWQtNGMxNi00ODY3LThjNGQt
ZmM1NTkwY2I4ZjZiLzEvdWZRTzlfRS15YUZXNzdEYk9XQ1F2SFhhblVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9lNzcyNWQtNGMxNi00ODY3LThjNGQtZmM1NTkwY2I4ZjZi
LzEvdWZRTzlfRS15YUZXNzdEYk9XQ1F2SFhhblVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKHfTVjKr
FwLyUV1YauRvuJ+OaeCZcoSGV5cF7W7Q4+VFqcCEW/V4oaA0WemFgfYnc2Jh8jA0
ahnYONvFI7pzDkHNY+ZaI5zbMI8JFZosNztPKwr0dQh78OGdiXjcg8gf8IkRggP+
ZTXXEfzS5nzTjkHBprJ4oGriLRmmT+0HgYBYEnlikEkktAGt0HQaHtYFmeLrH7a2
3FwwbSyoDXPJ26Z3R7Nzzrm4JFZhX0JHj9BjRHcaH0zCMYZT0k/kzpvW0JbBYTal
GLGIDcAthm92VtSOv6P4N/m2HWf9mKjUEs4heWMCz0hYeOZhmhSAPJifECnjCssa
qcV6r1GBcaRF6g==
-----END CERTIFICATE-----
Generated at Thu Apr 17 09:04:12 2025 by rpki-client