Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.mft
File: ukQ9hkNVeFdrQjFVWg7SE_UivvM.mft (raw, json)
Hash identifier: DSDmAjvDRCJ5A2D/l6GexapgrmDLpHqO9kzRBC9ZMxc=
Subject key identifier: C6:29:92:BC:55:5E:93:DE:C5:3E:38:A5:0D:ED:52:5B:62:D8:14:80
Authority key identifier: BA:44:3D:86:43:55:78:57:6B:42:31:55:5A:0E:D2:13:F5:22:BE:F3
Certificate issuer: /CN=ba443d86435578576b4231555a0ed213f522bef3
Certificate serial: 019656813303CAC4BADFC551878D5AC08B81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukQ9hkNVeFdrQjFVWg7SE_UivvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.mft
Manifest number: 07BA
Signing time: Mon 21 Apr 2025 04:00:29 +0000
Manifest this update: Mon 21 Apr 2025 04:00:29 +0000
Manifest next update: Tue 22 Apr 2025 04:00:29 +0000
Files and hashes: 1: pJcYXodpDPmMRbZLo0Tatq1ioSM.roa (hash: reA4i3iUw1X1kJD9p6sG3wX62hmlDQuF+yso9k92RQ4=)
2: ukQ9hkNVeFdrQjFVWg7SE_UivvM.crl (hash: Fb8ZZgT2lO7d9PQbxy1vijf3rPempt5+rQYRF3WbpEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukQ9hkNVeFdrQjFVWg7SE_UivvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:81:33:03:ca:c4:ba:df:c5:51:87:8d:5a:c0:8b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba443d86435578576b4231555a0ed213f522bef3
Validity
Not Before: Apr 21 04:00:29 2025 GMT
Not After : Apr 22 04:00:29 2025 GMT
Subject: CN=c62992bc555e93dec53e38a50ded525b62d81480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5d:7f:7d:a2:8e:f6:66:41:e7:77:e5:8e:22:
7f:51:1e:c0:0e:7b:bb:14:03:e1:9e:c7:f8:fe:9a:
53:63:57:1a:2d:c8:6c:77:1f:a3:21:38:ad:a8:97:
a2:e5:b3:d2:78:6e:8e:3b:d7:3b:e0:9b:aa:48:14:
0b:75:d9:22:ed:cc:bc:3b:de:3a:12:8d:f3:84:bc:
c6:6a:17:7a:f3:4f:22:a1:a2:b9:d4:af:ad:40:05:
ae:ff:67:0b:7e:1b:2e:b9:de:63:73:b6:f5:e8:bb:
30:99:80:ce:17:02:ec:e1:c7:da:bb:e0:8f:1f:b1:
25:33:d2:45:63:26:63:b1:63:29:c5:6e:63:07:0c:
7a:68:35:11:df:65:79:ad:66:cc:f1:54:5c:25:04:
9a:4a:6d:88:05:d5:91:e5:77:c1:05:07:65:11:a8:
72:a2:2b:c4:c3:49:aa:fb:71:04:55:1e:c0:6d:73:
5c:dc:39:bf:7d:fe:59:25:0a:72:ab:fc:55:1d:bc:
e1:c5:05:12:ec:e5:10:42:ed:ce:12:a1:c7:f4:13:
1b:4c:13:98:90:70:07:b7:54:b5:5d:ba:12:a9:ba:
c8:65:c0:f0:b9:fa:7d:0a:26:9e:f7:f6:75:2d:4a:
3a:23:72:ef:35:91:c8:c8:60:15:ae:bb:c4:db:13:
c8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:29:92:BC:55:5E:93:DE:C5:3E:38:A5:0D:ED:52:5B:62:D8:14:80
X509v3 Authority Key Identifier:
keyid:BA:44:3D:86:43:55:78:57:6B:42:31:55:5A:0E:D2:13:F5:22:BE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukQ9hkNVeFdrQjFVWg7SE_UivvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:4c:3d:64:e4:5d:db:a4:14:e8:e5:75:d9:ca:e1:cb:45:4c:
4d:33:00:6e:b4:ec:df:3b:46:07:ed:f4:0a:90:ae:fb:52:ba:
89:e3:f5:36:ac:24:53:7f:9e:d6:06:f1:d1:d1:b6:8d:fb:97:
c4:43:39:4f:5f:82:70:5d:ad:84:71:9d:6c:5e:63:f2:8f:d0:
a7:41:ca:5b:5b:e4:38:ea:92:2b:6c:f9:40:43:13:28:63:60:
7c:c7:c0:93:98:8e:b6:c3:f9:8a:7a:62:aa:ed:57:02:a6:75:
e5:41:ea:b7:aa:3d:f3:cf:f1:f8:6a:d9:d4:fb:a2:db:0f:af:
4c:26:66:85:49:ec:5e:e5:84:b9:5a:67:7a:2d:15:25:77:23:
60:89:bf:14:34:b6:ad:7a:7d:63:f1:14:a5:73:7e:8b:78:06:
7f:ee:69:64:50:c2:db:16:ab:75:81:9d:0c:16:c3:99:29:96:
db:ee:3c:fd:b9:42:02:d3:b3:90:b8:21:e4:f2:49:69:47:07:
e9:04:c4:56:c4:5c:fd:3d:bc:06:3b:e3:4f:90:be:e1:34:d7:
c1:9b:71:ec:9a:2b:d5:80:f4:9f:b4:58:5f:2c:d7:73:86:81:
19:9f:d6:a3:3b:be:77:cc:00:ac:2b:c3:0b:fb:b1:69:82:7e:
4e:f5:f6:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWgTMDysS638VRh41awIuBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNDQzZDg2NDM1NTc4NTc2YjQyMzE1NTVhMGVkMjEzZjUy
MmJlZjMwHhcNMjUwNDIxMDQwMDI5WhcNMjUwNDIyMDQwMDI5WjAzMTEwLwYDVQQD
EyhjNjI5OTJiYzU1NWU5M2RlYzUzZTM4YTUwZGVkNTI1YjYyZDgxNDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv11/faKO9mZB53fljiJ/UR7ADnu7
FAPhnsf4/ppTY1caLchsdx+jITitqJei5bPSeG6OO9c74JuqSBQLddki7cy8O946
Eo3zhLzGahd6808ioaK51K+tQAWu/2cLfhsuud5jc7b16LswmYDOFwLs4cfau+CP
H7ElM9JFYyZjsWMpxW5jBwx6aDUR32V5rWbM8VRcJQSaSm2IBdWR5XfBBQdlEahy
oivEw0mq+3EEVR7AbXNc3Dm/ff5ZJQpyq/xVHbzhxQUS7OUQQu3OEqHH9BMbTBOY
kHAHt1S1XboSqbrIZcDwufp9Ciae9/Z1LUo6I3LvNZHIyGAVrrvE2xPIswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYpkrxVXpPexT44pQ3tUlti2BSAMB8GA1UdIwQY
MBaAFLpEPYZDVXhXa0IxVVoO0hP1Ir7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWtROWhrTlZlRmRyUWpGVldnN1NFX1VpdnZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lOGMyNjQtYmU0Ni00NmYxLTkyOGUt
NDhjMTBhOTc4YmQwLzEvdWtROWhrTlZlRmRyUWpGVldnN1NFX1VpdnZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9lOGMyNjQtYmU0Ni00NmYxLTkyOGUtNDhjMTBhOTc4YmQw
LzEvdWtROWhrTlZlRmRyUWpGVldnN1NFX1VpdnZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOUw9ZORd
26QU6OV12crhy0VMTTMAbrTs3ztGB+30CpCu+1K6ieP1NqwkU3+e1gbx0dG2jfuX
xEM5T1+CcF2thHGdbF5j8o/Qp0HKW1vkOOqSK2z5QEMTKGNgfMfAk5iOtsP5inpi
qu1XAqZ15UHqt6o988/x+GrZ1Pui2w+vTCZmhUnsXuWEuVpnei0VJXcjYIm/FDS2
rXp9Y/EUpXN+i3gGf+5pZFDC2xardYGdDBbDmSmW2+48/blCAtOzkLgh5PJJaUcH
6QTEVsRc/T28BjvjT5C+4TTXwZtx7Jor1YD0n7RYXyzXc4aBGZ/Wozu+d8wArCvD
C/uxaYJ+TvX2gg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:57:50 2025 by rpki-client