Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
File: UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft (raw, json)
Hash identifier: CBCw0sG1ua3ODwJqWzFqGJpmJ70OxXibYWi6bEa2Zl0=
Subject key identifier: EE:CB:FC:80:6C:C8:A9:1D:A4:AD:14:00:BC:90:4C:F9:69:B6:02:3D
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial: 01975A5C47CEA48CED6E98328112E930DB2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
Manifest number: 1585
Signing time: Tue 10 Jun 2025 15:01:26 +0000
Manifest this update: Tue 10 Jun 2025 15:01:26 +0000
Manifest next update: Wed 11 Jun 2025 15:01:26 +0000
Files and hashes: 1: SDwa_442z28okDepd5smjiOQRww.roa (hash: vI2MQekdn3KI3C4mvdXcQ3gXy8wA7HojYkfFVqdmGF0=)
2: UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl (hash: TrzZfBs3x3GuLd323y8ZYZNQ+k+cEAFGj7sFtF1R1Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:5c:47:ce:a4:8c:ed:6e:98:32:81:12:e9:30:db:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
Validity
Not Before: Jun 10 15:01:26 2025 GMT
Not After : Jun 11 15:01:26 2025 GMT
Subject: CN=eecbfc806cc8a91da4ad1400bc904cf969b6023d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b9:c2:ff:56:88:9f:7a:6c:0b:2e:ff:4b:98:
17:f3:62:2d:43:f0:da:b7:4a:a4:e0:80:22:56:df:
29:6a:e6:4e:60:44:03:75:98:e8:be:d7:d2:94:e3:
2b:82:7d:e9:e2:7d:99:af:0e:69:c1:e1:34:25:ef:
fa:f4:82:97:c8:58:3e:e1:dd:27:4c:8c:d4:14:d5:
5b:2b:93:17:23:65:dd:22:bd:9d:4f:49:0e:8a:30:
6d:6e:bf:0f:56:77:07:45:e6:74:2a:05:4e:91:11:
9c:d2:72:9b:80:8e:26:26:2c:73:5f:a0:6c:42:11:
81:9c:50:54:4d:67:0d:b1:51:8f:14:3a:cd:28:d6:
4f:cf:5d:cd:a0:d0:6f:0f:55:c9:4a:d6:b7:b8:1e:
c1:52:64:49:3b:55:72:dc:f9:7c:b2:3e:b7:88:6d:
e4:46:df:f4:84:5d:e5:e4:12:69:01:d3:15:b3:01:
b6:69:3b:c1:82:f7:37:cc:79:63:8b:8d:02:69:dc:
20:54:ae:81:ac:96:02:42:a7:3f:5f:e0:12:4f:18:
55:07:af:1f:67:f8:5e:19:71:1d:37:ac:bd:31:8a:
14:7c:5a:e8:c0:64:04:20:b4:21:7a:3c:e3:27:82:
85:a9:99:a0:be:66:e8:d9:3b:b2:53:16:72:77:8e:
5c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CB:FC:80:6C:C8:A9:1D:A4:AD:14:00:BC:90:4C:F9:69:B6:02:3D
X509v3 Authority Key Identifier:
keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:61:99:77:ce:d8:da:91:10:f6:90:22:05:4e:91:a5:7f:1d:
51:da:f2:4e:90:a1:4c:ee:9d:70:a7:fd:43:3f:24:96:d0:11:
55:53:27:c3:de:50:51:3a:9a:1e:db:45:a2:85:36:7e:d7:e5:
77:fd:1e:65:de:06:37:bd:50:6c:04:95:b9:e7:f3:12:bc:de:
b1:ac:3b:fb:05:7f:8f:b0:30:8d:d5:9d:ca:89:ad:c3:db:ef:
0c:e4:25:8f:40:5c:4d:08:d4:1b:10:33:c3:8d:9a:b7:ee:08:
08:53:1a:86:b4:e5:71:bb:bc:35:2f:3b:a4:96:de:2a:f2:f8:
6c:ae:d7:4c:74:66:14:09:c6:12:12:d2:0b:6f:89:0e:cb:3c:
52:65:2b:15:91:f0:cc:97:92:eb:64:33:91:c8:2b:c5:4c:18:
ee:59:e9:b4:e9:ee:9b:9c:f1:3b:46:e6:49:61:74:b2:8b:9c:
47:dd:14:e5:55:68:2c:71:fe:de:c5:a1:b6:24:5f:88:fa:78:
c9:b0:c2:a4:fb:1c:cb:c5:f9:45:d0:2e:97:da:2a:88:71:65:
de:01:f3:aa:e6:f0:02:17:5f:14:63:d3:f8:03:44:6f:6d:54:
61:38:d2:eb:54:a9:c3:8e:43:b9:79:ec:f1:81:20:89:4d:f4:
e0:1c:12:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdaXEfOpIztbpgygRLpMNstMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMjI2ZjY3MWMyNjQzYTVjMDQ4NDYyNjRmZWUwMWY5NDNh
YzJiZmMwHhcNMjUwNjEwMTUwMTI2WhcNMjUwNjExMTUwMTI2WjAzMTEwLwYDVQQD
EyhlZWNiZmM4MDZjYzhhOTFkYTRhZDE0MDBiYzkwNGNmOTY5YjYwMjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubnC/1aIn3psCy7/S5gX82ItQ/Da
t0qk4IAiVt8pauZOYEQDdZjovtfSlOMrgn3p4n2Zrw5pweE0Je/69IKXyFg+4d0n
TIzUFNVbK5MXI2XdIr2dT0kOijBtbr8PVncHReZ0KgVOkRGc0nKbgI4mJixzX6Bs
QhGBnFBUTWcNsVGPFDrNKNZPz13NoNBvD1XJSta3uB7BUmRJO1Vy3Pl8sj63iG3k
Rt/0hF3l5BJpAdMVswG2aTvBgvc3zHlji40CadwgVK6BrJYCQqc/X+ASTxhVB68f
Z/heGXEdN6y9MYoUfFrowGQEILQhejzjJ4KFqZmgvmbo2TuyUxZyd45c0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7L/IBsyKkdpK0UALyQTPlptgI9MB8GA1UdIwQY
MBaAFFIib2ccJkOlwEhGJk/uAflDrCv8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8yYjRkMGYtMjE5Zi00YzAwLTg2NDgt
YTEyZGUzYTMzNTUzLzEvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8yYjRkMGYtMjE5Zi00YzAwLTg2NDgtYTEyZGUzYTMzNTUz
LzEvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA2GZd87Y
2pEQ9pAiBU6RpX8dUdryTpChTO6dcKf9Qz8kltARVVMnw95QUTqaHttFooU2ftfl
d/0eZd4GN71QbASVuefzErzesaw7+wV/j7AwjdWdyomtw9vvDOQlj0BcTQjUGxAz
w42at+4ICFMahrTlcbu8NS87pJbeKvL4bK7XTHRmFAnGEhLSC2+JDss8UmUrFZHw
zJeS62QzkcgrxUwY7lnptOnum5zxO0bmSWF0soucR90U5VVoLHH+3sWhtiRfiPp4
ybDCpPscy8X5RdAul9oqiHFl3gHzqubwAhdfFGPT+ANEb21UYTjS61Spw45DuXns
8YEgiU304BwSOg==
-----END CERTIFICATE-----
Generated at Tue Jun 10 20:47:28 2025 by rpki-client