Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
File: UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft (raw, json)
Hash identifier: 420nQv6wismhvZPjoYLdHtzBBv1wvRDAYOJrG1KzPF4=
Subject key identifier: 66:50:9E:52:CD:6D:94:47:2F:28:55:9C:37:70:8E:60:9E:52:DE:0A
Authority key identifier: 53:31:66:E3:F7:09:FB:3B:AC:A9:AE:79:AC:BE:C6:CA:1D:0F:C5:03
Certificate issuer: /CN=533166e3f709fb3baca9ae79acbec6ca1d0fc503
Certificate serial: 01974DE9AD5F67CFE5417A754EBF668554AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
Manifest number: 0438
Signing time: Sun 08 Jun 2025 05:00:49 +0000
Manifest this update: Sun 08 Jun 2025 05:00:49 +0000
Manifest next update: Mon 09 Jun 2025 05:00:49 +0000
Files and hashes: 1: JfX_uE4ZrNpyAWrN6XZ19h68cHI.roa (hash: von2tcOSfatHPq0+8nIPwywF9HUMabxhy1Hbp0s6xOY=)
2: UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl (hash: z+S+L+8yEfPBTEDeeKW5HDkD+rWcA3/y1AM3apBBmSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:ad:5f:67:cf:e5:41:7a:75:4e:bf:66:85:54:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533166e3f709fb3baca9ae79acbec6ca1d0fc503
Validity
Not Before: Jun 8 05:00:49 2025 GMT
Not After : Jun 9 05:00:49 2025 GMT
Subject: CN=66509e52cd6d94472f28559c37708e609e52de0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ed:e4:27:20:b4:7a:47:e1:46:82:a3:84:c7:
ea:b7:15:6f:a3:78:4a:c9:4a:fc:56:c8:93:7c:1f:
f9:e3:5a:b2:98:66:85:e6:c8:74:65:18:6e:ec:9b:
83:c6:9f:b6:7a:9e:c2:68:75:26:bd:e4:9a:c6:c2:
2b:69:2a:80:88:f8:e4:bd:26:9c:dd:97:78:35:c1:
6e:7f:cd:e7:f6:da:36:ff:83:39:ce:6c:b0:7c:cf:
c4:bf:6c:ae:97:27:5b:9e:23:66:e2:b5:60:d2:3b:
c5:c5:77:cf:39:4a:04:e2:5f:16:58:c6:8a:8d:6e:
13:44:74:1c:86:93:d0:34:04:cc:16:57:a6:c4:59:
8a:a6:ab:29:38:08:23:dc:0c:7e:ac:06:dc:2a:61:
0b:dc:e0:e4:e8:82:9d:d7:d0:cf:e8:f5:2e:f7:ff:
d5:60:55:00:d6:81:02:4c:be:16:47:08:57:b7:7f:
3e:10:14:24:93:1d:ff:05:e2:0e:5c:bd:14:f1:19:
6c:75:82:56:e6:ee:1d:44:92:0d:0d:71:ec:d2:1d:
2c:75:a3:1e:32:5f:e2:f5:8a:72:89:ec:bd:8b:46:
e6:71:c9:d0:5a:6e:25:e3:91:cc:e3:7e:4f:f0:da:
10:26:a8:76:9a:f8:65:09:70:11:b3:b5:eb:11:b0:
84:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:50:9E:52:CD:6D:94:47:2F:28:55:9C:37:70:8E:60:9E:52:DE:0A
X509v3 Authority Key Identifier:
keyid:53:31:66:E3:F7:09:FB:3B:AC:A9:AE:79:AC:BE:C6:CA:1D:0F:C5:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:55:2a:ce:b8:83:63:f6:a3:70:57:0b:88:ff:ca:ad:62:4a:
56:fc:eb:bf:30:b4:5e:ab:8d:af:4a:e4:96:f6:32:b9:8b:47:
14:9e:65:ad:e6:ad:f2:3d:39:0e:5f:fa:d3:83:92:44:ee:da:
ea:c6:96:40:4e:03:c9:46:98:20:85:94:4d:90:6d:c6:ff:d0:
f2:35:9e:e5:b3:af:cd:11:19:98:60:e8:43:44:7a:1a:a7:e5:
81:4d:fd:de:94:04:54:9c:f8:d8:6f:c5:1c:12:8b:b1:72:3a:
66:39:07:49:c9:b2:61:14:b2:2a:47:92:53:9e:ea:01:bc:1d:
35:fe:ca:15:bb:5b:5c:a2:73:d6:8d:0f:fb:ad:39:f1:ef:36:
95:08:d1:a6:98:b5:22:12:6f:13:58:5a:52:0c:9d:c3:37:bc:
28:f1:b0:73:71:4a:73:28:af:7a:6f:ea:2f:60:aa:be:cd:e5:
28:f7:08:6d:91:73:db:69:34:9a:8d:a2:35:56:f8:ef:67:97:
e9:1b:df:8f:93:e8:43:bc:53:9b:bf:c0:47:58:68:57:c4:02:
0a:68:e8:c0:5d:30:cc:41:f4:8f:c3:33:25:96:3a:c4:d9:7a:
e7:24:13:b0:1a:57:e7:13:6d:83:88:9e:5b:ea:e2:77:b8:af:
53:fd:6f:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdN6a1fZ8/lQXp1Tr9mhVStMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMzE2NmUzZjcwOWZiM2JhY2E5YWU3OWFjYmVjNmNhMWQw
ZmM1MDMwHhcNMjUwNjA4MDUwMDQ5WhcNMjUwNjA5MDUwMDQ5WjAzMTEwLwYDVQQD
Eyg2NjUwOWU1MmNkNmQ5NDQ3MmYyODU1OWMzNzcwOGU2MDllNTJkZTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO3kJyC0ekfhRoKjhMfqtxVvo3hK
yUr8VsiTfB/541qymGaF5sh0ZRhu7JuDxp+2ep7CaHUmveSaxsIraSqAiPjkvSac
3Zd4NcFuf83n9to2/4M5zmywfM/Ev2yulydbniNm4rVg0jvFxXfPOUoE4l8WWMaK
jW4TRHQchpPQNATMFlemxFmKpqspOAgj3Ax+rAbcKmEL3ODk6IKd19DP6PUu9//V
YFUA1oECTL4WRwhXt38+EBQkkx3/BeIOXL0U8RlsdYJW5u4dRJINDXHs0h0sdaMe
Ml/i9Ypyiey9i0bmccnQWm4l45HM435P8NoQJqh2mvhlCXARs7XrEbCETQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZQnlLNbZRHLyhVnDdwjmCeUt4KMB8GA1UdIwQY
MBaAFFMxZuP3Cfs7rKmueay+xsodD8UDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXpGbTRfY0otenVzcWE1NXJMN0d5aDBQeFFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8wOTE5MTEtMDZkOC00NWM4LWIwNWQt
ZTRiYmY0YzBkYjU5LzEvVXpGbTRfY0otenVzcWE1NXJMN0d5aDBQeFFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8wOTE5MTEtMDZkOC00NWM4LWIwNWQtZTRiYmY0YzBkYjU5
LzEvVXpGbTRfY0otenVzcWE1NXJMN0d5aDBQeFFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS1UqzriD
Y/ajcFcLiP/KrWJKVvzrvzC0XquNr0rklvYyuYtHFJ5lreat8j05Dl/604OSRO7a
6saWQE4DyUaYIIWUTZBtxv/Q8jWe5bOvzREZmGDoQ0R6GqflgU393pQEVJz42G/F
HBKLsXI6ZjkHScmyYRSyKkeSU57qAbwdNf7KFbtbXKJz1o0P+6058e82lQjRppi1
IhJvE1haUgydwze8KPGwc3FKcyivem/qL2Cqvs3lKPcIbZFz22k0mo2iNVb472eX
6Rvfj5PoQ7xTm7/AR1hoV8QCCmjowF0wzEH0j8MzJZY6xNl65yQTsBpX5xNtg4ie
W+rid7ivU/1vhw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:52:15 2025 by rpki-client