Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
File: Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft (raw, json)
Hash identifier: AoQ4Ii+VSFb90gd9njgA/rYaUWq/mslloRCYRWAAUgA=
Subject key identifier: 41:E4:93:50:82:FC:65:0B:97:35:4F:93:B0:09:F4:21:CE:69:11:BF
Authority key identifier: 52:8D:58:14:C7:15:64:20:DE:C3:A3:F7:E5:26:EF:0F:83:33:EE:F6
Certificate issuer: /CN=528d5814c7156420dec3a3f7e526ef0f8333eef6
Certificate serial: 019636F635F8769CBA633B7F4E8F0957AD01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
Manifest number: 138F
Signing time: Tue 15 Apr 2025 01:00:27 +0000
Manifest this update: Tue 15 Apr 2025 01:00:27 +0000
Manifest next update: Wed 16 Apr 2025 01:00:27 +0000
Files and hashes: 1: MmFJokVO4QRlDiGRue7krePTmWQ.roa (hash: 2NjaoaYGPQ9nJqZ5MUASprFLlvmc6uqFQzLhkJlBENc=)
2: Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl (hash: 0pda8xCtnHSr676z1gSwJz/+nofQ3NXECsanjZc5IkU=)
3: a9ojZnfz0fm0UVD2fXdjv-28qnw.roa (hash: s9wsqrb6KjabBhTORHQp4WAcdtQIFP8TAj4IRPzQjYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:36:f6:35:f8:76:9c:ba:63:3b:7f:4e:8f:09:57:ad:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528d5814c7156420dec3a3f7e526ef0f8333eef6
Validity
Not Before: Apr 15 01:00:27 2025 GMT
Not After : Apr 16 01:00:27 2025 GMT
Subject: CN=41e4935082fc650b97354f93b009f421ce6911bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:92:16:94:9f:b2:e5:32:c8:da:da:d5:d8:d1:
43:c1:05:b5:2f:a7:2c:dc:67:83:6f:24:9c:80:de:
00:d8:e2:c3:a0:c1:01:94:f1:d5:9d:10:71:64:46:
97:5d:7a:0f:03:d3:d3:be:6f:24:34:42:56:f9:41:
31:4b:13:8a:0d:27:55:80:d1:c9:68:96:43:14:0c:
91:3a:6f:3c:1f:3d:dd:b0:9e:d1:82:22:76:cb:3d:
27:f0:f1:ef:0b:31:fd:0e:11:ff:0d:84:e1:35:ed:
f0:1b:e1:d5:4d:a0:fc:fd:e5:ab:40:77:ac:2b:9f:
4f:2f:5d:46:5f:a8:65:b6:79:36:f4:ff:69:12:24:
9d:a0:07:86:54:12:ad:0c:32:74:9b:22:5d:3f:a0:
ee:24:58:86:18:a5:21:dd:6a:2e:08:96:53:ca:cf:
18:56:bb:12:39:f9:c2:60:7f:10:79:da:ad:2a:0a:
64:14:00:0c:36:04:23:07:4e:cd:a3:3a:fe:06:36:
59:2d:c7:20:91:52:2f:98:04:16:3b:81:5e:73:74:
eb:38:b6:34:ff:08:4e:bb:c2:9e:58:fc:4a:bc:81:
ad:7c:74:f1:f2:28:91:81:17:9c:53:cc:2c:21:fe:
68:e8:59:1a:2f:cc:b4:6c:a8:37:1e:e0:70:3b:7e:
2c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E4:93:50:82:FC:65:0B:97:35:4F:93:B0:09:F4:21:CE:69:11:BF
X509v3 Authority Key Identifier:
keyid:52:8D:58:14:C7:15:64:20:DE:C3:A3:F7:E5:26:EF:0F:83:33:EE:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ee:ab:7c:f5:90:c7:5c:c7:6f:a1:98:88:b2:4e:c0:fe:a1:
db:54:35:e9:d5:27:83:31:61:a8:06:9a:cd:03:29:ac:8d:f6:
a7:a7:aa:3c:2b:bf:9c:f5:90:fe:0a:7d:68:af:fc:06:01:e6:
58:e1:90:84:4d:a8:2e:d2:26:7e:12:63:4f:3b:22:82:5e:e5:
63:e9:15:b1:c3:8a:f6:62:d9:62:65:21:9d:22:13:7c:d1:89:
38:8b:71:3a:ee:91:06:df:82:63:66:61:2c:06:29:62:3d:be:
1d:1f:44:36:ff:fa:cc:97:70:73:2e:36:17:07:3d:89:60:29:
cc:ed:e5:0c:84:5a:c3:c8:59:69:aa:c7:f1:45:4e:e7:33:02:
96:8a:63:30:f0:93:18:81:00:c9:02:11:34:67:a4:08:d6:d3:
4b:72:be:ab:91:3e:35:8f:e1:bd:3c:66:7a:d8:9d:b1:28:1e:
26:65:f0:48:7d:7a:81:48:62:3a:61:39:c0:9e:fe:ca:6a:34:
64:c6:be:74:e8:a0:a8:54:b4:26:99:4d:97:e0:b4:c7:be:bc:
06:41:39:b9:d8:25:3c:6a:9d:b6:3a:d0:f9:51:8f:50:bc:cc:
9a:2e:cf:b9:0b:95:c9:a1:ff:c6:e7:29:ed:3d:03:de:46:2a:
93:20:41:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY29jX4dpy6Yzt/To8JV60BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyOGQ1ODE0YzcxNTY0MjBkZWMzYTNmN2U1MjZlZjBmODMz
M2VlZjYwHhcNMjUwNDE1MDEwMDI3WhcNMjUwNDE2MDEwMDI3WjAzMTEwLwYDVQQD
Eyg0MWU0OTM1MDgyZmM2NTBiOTczNTRmOTNiMDA5ZjQyMWNlNjkxMWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZIWlJ+y5TLI2trV2NFDwQW1L6cs
3GeDbyScgN4A2OLDoMEBlPHVnRBxZEaXXXoPA9PTvm8kNEJW+UExSxOKDSdVgNHJ
aJZDFAyROm88Hz3dsJ7RgiJ2yz0n8PHvCzH9DhH/DYThNe3wG+HVTaD8/eWrQHes
K59PL11GX6hltnk29P9pEiSdoAeGVBKtDDJ0myJdP6DuJFiGGKUh3WouCJZTys8Y
VrsSOfnCYH8QedqtKgpkFAAMNgQjB07Nozr+BjZZLccgkVIvmAQWO4Fec3TrOLY0
/whOu8KeWPxKvIGtfHTx8iiRgRecU8wsIf5o6FkaL8y0bKg3HuBwO34sawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHkk1CC/GULlzVPk7AJ9CHOaRG/MB8GA1UdIwQY
MBaAFFKNWBTHFWQg3sOj9+Um7w+DM+72MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW8xWUZNY1ZaQ0RldzZQMzVTYnZENE16N3ZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9iZWFjMDktYzQ5Zi00YzcwLTk4MTgt
NDMxYzM5YmI3YjM4LzEvVW8xWUZNY1ZaQ0RldzZQMzVTYnZENE16N3ZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9iZWFjMDktYzQ5Zi00YzcwLTk4MTgtNDMxYzM5YmI3YjM4
LzEvVW8xWUZNY1ZaQ0RldzZQMzVTYnZENE16N3ZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAge6rfPWQ
x1zHb6GYiLJOwP6h21Q16dUngzFhqAaazQMprI32p6eqPCu/nPWQ/gp9aK/8BgHm
WOGQhE2oLtImfhJjTzsigl7lY+kVscOK9mLZYmUhnSITfNGJOItxOu6RBt+CY2Zh
LAYpYj2+HR9ENv/6zJdwcy42Fwc9iWApzO3lDIRaw8hZaarH8UVO5zMClopjMPCT
GIEAyQIRNGekCNbTS3K+q5E+NY/hvTxmetidsSgeJmXwSH16gUhiOmE5wJ7+ymo0
ZMa+dOigqFS0JplNl+C0x768BkE5udglPGqdtjrQ+VGPULzMmi7PuQuVyaH/xucp
7T0D3kYqkyBBbA==
-----END CERTIFICATE-----
Generated at Tue Apr 15 05:12:05 2025 by rpki-client