Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
File: uQ9AvbnmZHaekXWQ942253GT11E.mft (raw, json)
Hash identifier: wTpT8jdiWMmEVVHw8u3qeqcCI9PSow9fQRQSQae04vQ=
Subject key identifier: 2D:C3:A1:83:8C:E1:0C:4A:71:86:97:1E:67:3D:A4:9C:26:71:DF:30
Authority key identifier: B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
Certificate issuer: /CN=b90f40bdb9e664769e917590f78db6e77193d751
Certificate serial: 019749D629834412F023F24903AE05AC8EA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
Manifest number: 0839
Signing time: Sat 07 Jun 2025 10:01:01 +0000
Manifest this update: Sat 07 Jun 2025 10:01:01 +0000
Manifest next update: Sun 08 Jun 2025 10:01:01 +0000
Files and hashes: 1: IVNizmINzGKtS16vA6MUtf-GXl0.roa (hash: G8i6jSbmxzUZcDObDJ5m5iiPjmE+XboSGsF4lQOtdC8=)
2: uQ9AvbnmZHaekXWQ942253GT11E.crl (hash: YPcg/HObzCaMc6zpTJFYI+8uoPH3JucPqO9a7oG586Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:29:83:44:12:f0:23:f2:49:03:ae:05:ac:8e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b90f40bdb9e664769e917590f78db6e77193d751
Validity
Not Before: Jun 7 10:01:01 2025 GMT
Not After : Jun 8 10:01:01 2025 GMT
Subject: CN=2dc3a1838ce10c4a7186971e673da49c2671df30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:eb:9e:f1:d5:f9:19:66:8d:c7:b1:13:89:6e:
9d:c9:80:d7:44:c4:35:3e:32:a3:04:6f:9c:3d:1f:
f9:41:3e:73:43:67:48:86:be:47:1f:2a:cc:59:5f:
67:b3:a1:9a:c9:03:ba:ff:a6:c4:9d:4f:74:7b:6a:
e9:65:82:67:f7:83:31:10:90:49:78:59:0f:6f:31:
12:5a:53:62:1f:85:aa:b1:af:ff:b8:5f:f9:da:ff:
65:70:8e:84:3e:88:9a:20:fc:62:a5:00:23:91:82:
b2:e6:54:51:46:0a:f5:55:e1:64:9b:78:ae:96:f1:
b9:ff:44:95:91:66:7e:a7:2f:8e:63:27:08:9a:78:
d8:26:b5:d7:f1:6a:f2:88:c1:19:a7:54:27:9f:41:
00:33:ee:3a:04:e6:09:1c:12:a9:24:b1:9d:75:c0:
d0:11:22:1e:25:c2:58:bd:ea:32:f8:44:fe:bc:3d:
40:0c:c7:8a:91:24:d1:ee:ef:a6:b9:e0:10:a9:cb:
44:3f:7d:a0:75:b2:b0:46:96:b3:32:0d:35:cb:1a:
30:11:3d:88:83:e7:8e:93:8f:51:ec:06:91:91:ef:
2a:aa:e7:aa:a1:32:e9:30:ea:b1:fc:7e:ad:e9:90:
ba:ee:90:1d:39:e3:fe:4f:6f:37:a8:01:d8:e0:77:
ee:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C3:A1:83:8C:E1:0C:4A:71:86:97:1E:67:3D:A4:9C:26:71:DF:30
X509v3 Authority Key Identifier:
keyid:B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a0:1f:1a:47:19:2f:29:81:b4:8b:fe:f8:f2:d5:69:a4:c7:
e2:e7:b1:eb:c7:6c:0a:e6:70:13:69:1a:52:b1:e3:87:d4:ee:
35:b5:1c:50:d6:8b:55:83:fb:6c:d4:ab:71:ca:e6:d6:fa:6e:
59:0a:08:d2:09:dd:6b:53:de:c1:96:e9:6f:f5:ee:a8:d1:ea:
0c:e8:64:57:2c:b8:75:2d:e9:1d:7e:96:7a:98:4f:9f:57:d5:
f1:45:d6:34:7a:a1:6a:2f:b8:6f:76:3e:b4:e7:6a:70:32:14:
83:b8:56:65:e6:8b:c2:47:bf:4d:3a:23:ec:b6:ae:ff:5d:1c:
52:b1:f9:99:28:c6:e1:71:86:3c:13:c1:ff:86:90:87:d4:a2:
71:23:64:ec:3d:f7:1b:61:3c:36:f2:21:86:04:51:81:ce:22:
c1:4f:67:a2:04:75:2a:52:ec:a4:a2:aa:41:a8:d5:9b:c7:b0:
bc:9b:c1:46:72:52:0d:7f:ac:8a:4e:de:19:e4:d1:31:6c:d5:
44:13:cd:84:1b:09:0e:48:92:ae:53:57:bd:eb:4d:46:7d:e6:
58:28:dd:ed:93:94:e4:57:7e:fc:66:78:e5:8e:89:ea:6f:5c:
0c:45:a5:c1:5c:51:27:01:6c:57:60:e7:d9:c7:8e:4c:21:80:
3b:0f:af:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1imDRBLwI/JJA64FrI6gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MGY0MGJkYjllNjY0NzY5ZTkxNzU5MGY3OGRiNmU3NzE5
M2Q3NTEwHhcNMjUwNjA3MTAwMTAxWhcNMjUwNjA4MTAwMTAxWjAzMTEwLwYDVQQD
EygyZGMzYTE4MzhjZTEwYzRhNzE4Njk3MWU2NzNkYTQ5YzI2NzFkZjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+ue8dX5GWaNx7ETiW6dyYDXRMQ1
PjKjBG+cPR/5QT5zQ2dIhr5HHyrMWV9ns6GayQO6/6bEnU90e2rpZYJn94MxEJBJ
eFkPbzESWlNiH4Wqsa//uF/52v9lcI6EPoiaIPxipQAjkYKy5lRRRgr1VeFkm3iu
lvG5/0SVkWZ+py+OYycImnjYJrXX8WryiMEZp1Qnn0EAM+46BOYJHBKpJLGddcDQ
ESIeJcJYveoy+ET+vD1ADMeKkSTR7u+mueAQqctEP32gdbKwRpazMg01yxowET2I
g+eOk49R7AaRke8qqueqoTLpMOqx/H6t6ZC67pAdOeP+T283qAHY4HfucQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3DoYOM4QxKcYaXHmc9pJwmcd8wMB8GA1UdIwQY
MBaAFLkPQL255mR2npF1kPeNtudxk9dRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVE5QXZibm1aSGFla1hXUTk0MjI1M0dUMTFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9iOTJjYzMtZGRmMS00M2NiLWI0YjEt
NDE1NGRhNWNlYjliLzEvdVE5QXZibm1aSGFla1hXUTk0MjI1M0dUMTFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9iOTJjYzMtZGRmMS00M2NiLWI0YjEtNDE1NGRhNWNlYjli
LzEvdVE5QXZibm1aSGFla1hXUTk0MjI1M0dUMTFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkKAfGkcZ
LymBtIv++PLVaaTH4uex68dsCuZwE2kaUrHjh9TuNbUcUNaLVYP7bNSrccrm1vpu
WQoI0gnda1PewZbpb/XuqNHqDOhkVyy4dS3pHX6WephPn1fV8UXWNHqhai+4b3Y+
tOdqcDIUg7hWZeaLwke/TToj7Lau/10cUrH5mSjG4XGGPBPB/4aQh9SicSNk7D33
G2E8NvIhhgRRgc4iwU9nogR1KlLspKKqQajVm8ewvJvBRnJSDX+sik7eGeTRMWzV
RBPNhBsJDkiSrlNXvetNRn3mWCjd7ZOU5Fd+/GZ45Y6J6m9cDEWlwVxRJwFsV2Dn
2ceOTCGAOw+v4A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:35:30 2025 by rpki-client