Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
File: UzahBs7N66kuC4Dl6aXHibp0xis.mft (raw, json)
Hash identifier: JAzjFt6v10NakPCiUMS/6zKFcBymuZuvqBf4b5g02AU=
Subject key identifier: 18:E0:D1:3F:4C:54:BD:9C:97:39:3D:45:7C:FB:DF:D7:D3:BD:EF:05
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial: 01960FE92F0787FC1253A99CF5A3E127A6E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
Manifest number: 0984
Signing time: Mon 07 Apr 2025 11:01:02 +0000
Manifest this update: Mon 07 Apr 2025 11:01:02 +0000
Manifest next update: Tue 08 Apr 2025 11:01:02 +0000
Files and hashes: 1: 3XFZjvmipuYl3ZWlHwQH5J3zMBo.roa (hash: waCPVYUPagNA2C/8qUWA6TsWBhxDDZLgjh2zXP9UUxQ=)
2: 7k8l9jRcUvUU0PoFjWmWy5vQ4RU.roa (hash: EkvhsCktAS/aEN7qGD8m7gGA2WllZuGA03mFu0p4SxA=)
3: NQzxfbg6mUjToWYd761iH1Aj8M0.roa (hash: gTeoWCaUXq7PaCcs+yvz12eVkeAA0ArL5OPG5CvIUNQ=)
4: QDeglJ-kf-CPwjwijAyu-xuaRJQ.roa (hash: F1qjIGAjhb4CCD6+mprPcFrHYg12/ZjUkVJtYzNpI98=)
5: UzahBs7N66kuC4Dl6aXHibp0xis.crl (hash: ru8VG4cYiir5su/LnAJXrqLBFW6lOsNXJhVixtU5eIU=)
6: bjcT27Mkrmm6YUKTzHgcNPrjPBU.roa (hash: Yn0RgyPmmLSzCmXSFkvVjdwnmhf67ZsvVo3LY47XFQY=)
7: jegjWR7VprdJlP9Id7lnXfq_3BY.roa (hash: 3+QVUbiATKXjEawCpJp9FdwXwbHQPUAeJSJ9r2KyWeA=)
8: l5UHl_04bz9hmdByW-mS5aOLzVQ.roa (hash: 44oRNABvdxfx6PrHpOdx7KjJ3dNX5DY1G8L30+SPRh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:e9:2f:07:87:fc:12:53:a9:9c:f5:a3:e1:27:a6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Validity
Not Before: Apr 7 11:01:02 2025 GMT
Not After : Apr 8 11:01:02 2025 GMT
Subject: CN=18e0d13f4c54bd9c97393d457cfbdfd7d3bdef05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fa:d0:98:c0:a9:a9:f8:2c:07:32:7a:df:cd:
21:a8:85:5e:8f:79:2b:d0:05:c0:ee:e2:47:76:67:
ae:16:31:45:b3:1a:b1:a7:e0:40:b7:1f:88:ea:77:
fa:27:ab:e9:b0:9e:d8:a0:b9:e9:9d:5c:9e:54:6a:
cb:07:76:d9:f1:95:f3:5b:ec:22:00:ce:b0:19:82:
d7:9b:a5:ec:07:7f:c0:09:11:b0:4d:d3:fd:ed:05:
d0:77:da:bd:e2:ff:df:86:cb:de:86:3f:61:d9:bb:
8b:06:e2:ad:f5:5d:57:12:0b:ec:fa:4b:c9:8e:e3:
a1:89:17:c5:c8:c0:88:8a:58:6d:77:d7:e6:62:19:
d8:8f:95:52:70:d0:b2:21:e3:23:20:d3:92:50:7f:
14:11:c2:1d:59:03:5f:79:21:4c:50:8b:dd:0b:00:
49:92:c6:a3:b0:21:dc:e6:c4:8a:4d:ed:08:c5:21:
15:79:6b:f5:c9:8d:0d:0d:03:f7:c5:e9:9e:52:ef:
77:15:6e:8a:61:64:57:14:2e:2b:5f:62:9a:d8:48:
55:ad:f8:af:16:46:8b:0e:74:1f:fa:79:14:da:6e:
0b:29:46:54:8c:d6:ec:30:8f:55:d2:40:10:85:89:
c2:51:02:91:8f:83:aa:6a:d7:0f:60:31:0a:5c:e9:
0f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E0:D1:3F:4C:54:BD:9C:97:39:3D:45:7C:FB:DF:D7:D3:BD:EF:05
X509v3 Authority Key Identifier:
keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:77:6f:df:5d:d2:a1:bb:9e:47:e0:53:85:09:43:4e:79:74:
4a:90:b2:1f:ab:e7:ce:dd:7f:f6:44:24:fa:e8:e8:2e:81:50:
f0:d2:db:0e:a6:64:17:43:cc:d4:f2:20:0a:fb:52:2d:05:c4:
f7:62:cd:5a:e5:f8:59:5c:6b:b8:86:03:34:45:d8:95:38:da:
06:9c:c7:f0:0f:0a:6b:5d:18:1c:02:16:90:8b:23:c6:9a:84:
df:c3:41:42:d8:ef:94:0c:9a:54:c8:4c:6f:bd:44:af:84:8e:
a4:d6:c3:5a:27:09:16:0c:70:28:97:82:c5:cf:d4:7f:e3:3a:
5e:58:62:ce:16:84:26:0e:71:5a:ef:88:16:27:67:b2:38:e4:
e4:14:76:c8:c0:34:03:3b:7b:cb:f7:0e:c4:47:72:58:1b:40:
53:ca:54:c9:f6:38:72:57:f5:b1:df:bf:f0:e4:dc:fb:cb:12:
4c:0e:cc:98:84:46:a1:f1:e2:ca:e4:13:68:46:d5:1a:3d:55:
7f:f5:39:fa:22:4b:ce:3a:51:e0:f3:41:0c:e9:87:2e:cc:89:
42:0f:ec:c8:8b:26:20:b6:2d:a3:1f:e5:8f:fd:80:9c:c3:cd:
a9:ed:a1:e2:56:88:d9:76:dd:c3:51:54:06:f8:be:f0:f9:6c:
9b:d9:23:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYP6S8Hh/wSU6mc9aPhJ6bhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMzZhMTA2Y2VjZGViYTkyZTBiODBlNWU5YTVjNzg5YmE3
NGM2MmIwHhcNMjUwNDA3MTEwMTAyWhcNMjUwNDA4MTEwMTAyWjAzMTEwLwYDVQQD
EygxOGUwZDEzZjRjNTRiZDljOTczOTNkNDU3Y2ZiZGZkN2QzYmRlZjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvrQmMCpqfgsBzJ6380hqIVej3kr
0AXA7uJHdmeuFjFFsxqxp+BAtx+I6nf6J6vpsJ7YoLnpnVyeVGrLB3bZ8ZXzW+wi
AM6wGYLXm6XsB3/ACRGwTdP97QXQd9q94v/fhsvehj9h2buLBuKt9V1XEgvs+kvJ
juOhiRfFyMCIilhtd9fmYhnYj5VScNCyIeMjINOSUH8UEcIdWQNfeSFMUIvdCwBJ
ksajsCHc5sSKTe0IxSEVeWv1yY0NDQP3xemeUu93FW6KYWRXFC4rX2Ka2EhVrfiv
FkaLDnQf+nkU2m4LKUZUjNbsMI9V0kAQhYnCUQKRj4OqatcPYDEKXOkPYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjg0T9MVL2clzk9RXz739fTve8FMB8GA1UdIwQY
MBaAFFM2oQbOzeupLguA5emlx4m6dMYrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXphaEJzN042Nmt1QzREbDZhWEhpYnAweGlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8yNjY5ZWUtNGJhNy00MTEwLTgzNzAt
ZGQ4MDNjNWI4NWRiLzEvVXphaEJzN042Nmt1QzREbDZhWEhpYnAweGlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8yNjY5ZWUtNGJhNy00MTEwLTgzNzAtZGQ4MDNjNWI4NWRi
LzEvVXphaEJzN042Nmt1QzREbDZhWEhpYnAweGlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgHdv313S
obueR+BThQlDTnl0SpCyH6vnzt1/9kQk+ujoLoFQ8NLbDqZkF0PM1PIgCvtSLQXE
92LNWuX4WVxruIYDNEXYlTjaBpzH8A8Ka10YHAIWkIsjxpqE38NBQtjvlAyaVMhM
b71Er4SOpNbDWicJFgxwKJeCxc/Uf+M6XlhizhaEJg5xWu+IFidnsjjk5BR2yMA0
Azt7y/cOxEdyWBtAU8pUyfY4clf1sd+/8OTc+8sSTA7MmIRGofHiyuQTaEbVGj1V
f/U5+iJLzjpR4PNBDOmHLsyJQg/syIsmILYtox/lj/2AnMPNqe2h4laI2Xbdw1FU
Bvi+8Plsm9kjeA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:45:45 2025 by rpki-client