Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
File: Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft (raw, json)
Hash identifier: YPRgY3wgV8wZtXcqsGaTF29vd61/cGD+so+5+eoe82g=
Subject key identifier: 58:08:AE:4C:CE:53:D9:46:D0:99:CB:63:C7:DC:28:EF:05:88:2B:45
Authority key identifier: 51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
Certificate issuer: /CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Certificate serial: 01975DCAC8F9729522EE9036E32265FB7C12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
Manifest number: 0EB2
Signing time: Wed 11 Jun 2025 07:01:00 +0000
Manifest this update: Wed 11 Jun 2025 07:01:00 +0000
Manifest next update: Thu 12 Jun 2025 07:01:00 +0000
Files and hashes: 1: Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl (hash: bke+sr2RYvkr5K3462QkogFqFI119MADCm5nhVNKWno=)
2: wcLPDXwZhknfwFVrmzWdaV09zJc.roa (hash: KCyUIbiI7WKGmxPwkUMQCU2Fnp9j24d2NyqBltI+vd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:ca:c8:f9:72:95:22:ee:90:36:e3:22:65:fb:7c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Validity
Not Before: Jun 11 07:01:00 2025 GMT
Not After : Jun 12 07:01:00 2025 GMT
Subject: CN=5808ae4cce53d946d099cb63c7dc28ef05882b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bc:b8:e7:f9:05:fa:3b:3c:c3:c9:d7:d3:cd:
8e:cc:10:84:a5:02:89:e9:b4:ab:c1:84:6c:01:a4:
21:b0:a7:f5:f7:0c:63:12:39:97:7e:4e:d6:93:e2:
60:05:1f:40:ad:c5:b6:5a:db:28:06:a7:da:83:3e:
f9:44:bd:0d:20:de:58:a8:e9:14:d7:25:96:6b:9f:
50:cf:c1:38:85:02:29:28:1b:a2:6a:0f:ff:2a:87:
8d:4d:cf:5e:d9:8c:63:60:18:a3:82:c3:12:ab:41:
b4:49:0a:bd:76:80:1d:6d:d0:df:8e:08:ee:fd:58:
fb:78:9f:41:a4:c4:16:cc:56:49:6c:9d:d5:40:dc:
31:4a:7b:0e:56:80:ed:d9:df:4e:fb:fa:f5:17:7c:
2c:e0:fb:87:8f:73:25:ad:a9:91:fc:bb:b7:51:49:
07:fe:69:20:da:b6:07:5a:6e:2f:be:95:9f:b6:84:
e3:3a:58:2b:65:bb:99:04:af:63:27:25:38:50:db:
4a:e6:db:eb:29:45:b5:9f:34:cc:56:32:5b:00:aa:
a4:3d:2e:e4:eb:40:8c:0f:06:cb:0d:fa:67:15:41:
8c:6a:91:94:d9:76:d6:1e:8b:13:01:c5:b2:db:f2:
f0:02:44:2c:db:95:28:c4:b2:0f:af:98:5c:7c:d3:
20:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:08:AE:4C:CE:53:D9:46:D0:99:CB:63:C7:DC:28:EF:05:88:2B:45
X509v3 Authority Key Identifier:
keyid:51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d8:b8:a0:e9:da:d3:2e:0b:f0:72:ef:87:db:93:cb:76:73:
08:77:ce:01:72:15:a6:aa:9f:7f:df:fc:24:6a:e1:0c:53:dc:
df:d7:0f:d3:75:4e:89:c0:b0:66:22:a4:6d:eb:57:41:f4:8e:
24:8b:98:a7:c7:bb:42:b4:d8:0d:e4:c1:8a:32:0f:0a:47:44:
83:ec:c0:6b:79:da:b8:c9:b3:46:5d:fb:61:20:55:0c:6b:79:
a0:3c:eb:bd:72:fc:af:70:d6:2b:67:64:eb:dd:d9:d0:a4:f5:
55:ee:e1:ee:12:4a:f4:ea:2f:85:5b:6f:9d:02:59:b2:3c:57:
6f:d7:57:b1:d6:9e:ba:5b:0a:f1:2e:32:e9:5e:16:6d:ec:e3:
96:e0:16:ca:87:a3:3f:cd:ce:dc:ae:ff:d3:a6:88:91:d5:ce:
f1:45:f2:50:d8:f1:8a:7a:02:b1:c2:79:41:ba:ca:46:0b:78:
95:47:95:76:64:3a:65:99:1e:4a:09:e2:56:9f:d5:ee:42:db:
bb:ec:71:f9:4f:47:96:94:1e:c2:05:36:30:b5:5d:59:df:fe:
e4:63:36:38:1e:8a:d7:4a:ef:b9:ca:e7:8e:c0:73:10:3c:a7:
a3:43:9a:75:ae:43:29:82:8b:49:39:cb:53:7d:c2:3e:4e:17:
00:01:01:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZddysj5cpUi7pA24yJl+3wSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYWM3ZTMzNzQ0YzI0OGY4N2RlMmRjNjNhYWJmMTlmNmM4
NGIwMzIwHhcNMjUwNjExMDcwMTAwWhcNMjUwNjEyMDcwMTAwWjAzMTEwLwYDVQQD
Eyg1ODA4YWU0Y2NlNTNkOTQ2ZDA5OWNiNjNjN2RjMjhlZjA1ODgyYjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7y45/kF+js8w8nX082OzBCEpQKJ
6bSrwYRsAaQhsKf19wxjEjmXfk7Wk+JgBR9ArcW2WtsoBqfagz75RL0NIN5YqOkU
1yWWa59Qz8E4hQIpKBuiag//KoeNTc9e2YxjYBijgsMSq0G0SQq9doAdbdDfjgju
/Vj7eJ9BpMQWzFZJbJ3VQNwxSnsOVoDt2d9O+/r1F3ws4PuHj3MlramR/Lu3UUkH
/mkg2rYHWm4vvpWftoTjOlgrZbuZBK9jJyU4UNtK5tvrKUW1nzTMVjJbAKqkPS7k
60CMDwbLDfpnFUGMapGU2XbWHosTAcWy2/LwAkQs25UoxLIPr5hcfNMgAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgIrkzOU9lG0JnLY8fcKO8FiCtFMB8GA1UdIwQY
MBaAFFGsfjN0TCSPh94txjqr8Z9shLAyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWF4LU0zUk1KSS1IM2kzR09xdnhuMnlFc0RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9kZjNjNjEtNzhhZS00ZDFjLWE3NTYt
NjM0ODY0OTc3NGEyLzEvVWF4LU0zUk1KSS1IM2kzR09xdnhuMnlFc0RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9kZjNjNjEtNzhhZS00ZDFjLWE3NTYtNjM0ODY0OTc3NGEy
LzEvVWF4LU0zUk1KSS1IM2kzR09xdnhuMnlFc0RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFNi4oOna
0y4L8HLvh9uTy3ZzCHfOAXIVpqqff9/8JGrhDFPc39cP03VOicCwZiKkbetXQfSO
JIuYp8e7QrTYDeTBijIPCkdEg+zAa3nauMmzRl37YSBVDGt5oDzrvXL8r3DWK2dk
693Z0KT1Ve7h7hJK9OovhVtvnQJZsjxXb9dXsdaeulsK8S4y6V4WbezjluAWyoej
P83O3K7/06aIkdXO8UXyUNjxinoCscJ5QbrKRgt4lUeVdmQ6ZZkeSgniVp/V7kLb
u+xx+U9HlpQewgU2MLVdWd/+5GM2OB6K10rvucrnjsBzEDyno0Oada5DKYKLSTnL
U33CPk4XAAEBhA==
-----END CERTIFICATE-----
Generated at Wed Jun 11 09:48:20 2025 by rpki-client