Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
File: Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft (raw, json)
Hash identifier: ijin1lRmjs3xTwYpPHCDL7+cBR6jRloq9cugL6oY5B0=
Subject key identifier: CD:82:C5:16:6C:B7:85:54:36:0D:E4:33:84:22:2F:75:EC:28:8C:78
Authority key identifier: 51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
Certificate issuer: /CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Certificate serial: 01976395AE2A345B6352A269B3242AACC098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
Manifest number: 0EB5
Signing time: Thu 12 Jun 2025 10:00:43 +0000
Manifest this update: Thu 12 Jun 2025 10:00:43 +0000
Manifest next update: Fri 13 Jun 2025 10:00:43 +0000
Files and hashes: 1: Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl (hash: SaUepawSSKcKeg0EGCazrNX8OArO3SrMkdoLn2mtF2Y=)
2: wcLPDXwZhknfwFVrmzWdaV09zJc.roa (hash: KCyUIbiI7WKGmxPwkUMQCU2Fnp9j24d2NyqBltI+vd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:95:ae:2a:34:5b:63:52:a2:69:b3:24:2a:ac:c0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Validity
Not Before: Jun 12 10:00:43 2025 GMT
Not After : Jun 13 10:00:43 2025 GMT
Subject: CN=cd82c5166cb78554360de43384222f75ec288c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:56:a1:ab:97:dd:cd:b9:c8:f5:a7:70:89:de:
6f:ed:52:d4:4c:40:53:8e:53:85:b6:ee:33:2f:4f:
b9:69:52:3e:33:b3:7e:7b:66:01:51:97:03:fc:c0:
b3:ce:c0:81:6d:97:d1:34:9c:c8:f2:eb:18:dd:17:
5d:06:4c:2c:c3:5e:8a:75:4a:d5:0a:df:c8:21:f5:
33:71:cb:cc:49:d2:e4:64:b5:88:92:74:57:41:e5:
8b:97:0f:67:0b:70:12:43:4f:02:b4:71:40:59:fd:
54:3e:76:2e:50:6a:aa:d2:fe:50:61:c8:6e:17:1a:
92:a0:d1:29:47:8c:06:31:d2:c5:63:29:0a:4f:a7:
44:99:55:03:3c:fe:5b:9a:bc:4e:5d:86:44:55:b2:
68:f0:3d:a2:81:ed:19:4e:3c:d2:8b:2a:f4:57:05:
79:57:ea:df:a7:21:c4:e4:2c:aa:c6:65:04:ac:54:
03:f1:44:b6:f3:0a:e2:54:b2:60:14:d0:83:f3:f8:
7e:e9:d5:47:ca:24:6a:42:44:62:c6:f9:5e:9c:15:
63:e4:0d:71:e6:cc:28:8b:e7:8c:b7:61:1b:9d:50:
8c:a4:81:e7:be:3d:73:ec:05:fe:35:e5:81:c4:61:
ac:d0:63:f5:9c:8d:91:cb:75:65:27:28:32:be:c3:
8e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:82:C5:16:6C:B7:85:54:36:0D:E4:33:84:22:2F:75:EC:28:8C:78
X509v3 Authority Key Identifier:
keyid:51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:01:c2:01:e3:ce:a8:8f:72:a9:d2:89:d0:71:e2:dd:88:3d:
66:74:92:ea:52:b5:51:a8:ff:5a:05:42:46:6a:79:31:0b:5d:
a2:48:e8:cb:a8:fc:60:e8:5f:d3:74:f4:a3:10:86:68:56:85:
e5:b1:20:ef:23:c1:8d:aa:29:da:fe:ec:23:cd:71:3e:3d:cd:
32:34:46:27:7f:39:b4:dc:6a:c5:f4:90:1e:d5:6f:a9:35:76:
e7:80:8a:b7:b5:19:52:22:46:a2:84:48:f7:09:cc:78:e9:82:
88:33:1d:6d:0b:3f:56:ea:ad:52:c2:60:6e:17:ba:4a:c7:dd:
fa:ac:aa:83:f5:31:23:07:91:81:73:e4:28:0e:0f:9a:74:f6:
1c:7f:80:84:b4:0b:10:4f:b9:42:0b:6d:eb:d1:76:3a:41:a9:
7c:a9:a5:d3:9f:15:2d:fa:b8:1d:2c:5b:c4:f1:21:9f:60:8b:
9c:23:33:21:91:80:38:cd:1a:f6:73:92:9a:b1:83:43:0d:d5:
31:19:8e:ea:38:8b:f9:cb:51:4e:69:f3:0d:1f:28:94:ca:51:
39:0b:9c:ee:a3:a0:f7:74:d6:34:f1:f9:d2:70:86:3f:d3:08:
9d:e6:36:c9:52:1f:4f:26:4d:b3:ce:a8:5e:43:26:c6:6a:dc:
42:14:52:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdjla4qNFtjUqJpsyQqrMCYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYWM3ZTMzNzQ0YzI0OGY4N2RlMmRjNjNhYWJmMTlmNmM4
NGIwMzIwHhcNMjUwNjEyMTAwMDQzWhcNMjUwNjEzMTAwMDQzWjAzMTEwLwYDVQQD
EyhjZDgyYzUxNjZjYjc4NTU0MzYwZGU0MzM4NDIyMmY3NWVjMjg4Yzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Vahq5fdzbnI9adwid5v7VLUTEBT
jlOFtu4zL0+5aVI+M7N+e2YBUZcD/MCzzsCBbZfRNJzI8usY3RddBkwsw16KdUrV
Ct/IIfUzccvMSdLkZLWIknRXQeWLlw9nC3ASQ08CtHFAWf1UPnYuUGqq0v5QYchu
FxqSoNEpR4wGMdLFYykKT6dEmVUDPP5bmrxOXYZEVbJo8D2ige0ZTjzSiyr0VwV5
V+rfpyHE5CyqxmUErFQD8US28wriVLJgFNCD8/h+6dVHyiRqQkRixvlenBVj5A1x
5swoi+eMt2EbnVCMpIHnvj1z7AX+NeWBxGGs0GP1nI2Ry3VlJygyvsOOywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2CxRZst4VUNg3kM4QiL3XsKIx4MB8GA1UdIwQY
MBaAFFGsfjN0TCSPh94txjqr8Z9shLAyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWF4LU0zUk1KSS1IM2kzR09xdnhuMnlFc0RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9kZjNjNjEtNzhhZS00ZDFjLWE3NTYt
NjM0ODY0OTc3NGEyLzEvVWF4LU0zUk1KSS1IM2kzR09xdnhuMnlFc0RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9kZjNjNjEtNzhhZS00ZDFjLWE3NTYtNjM0ODY0OTc3NGEy
LzEvVWF4LU0zUk1KSS1IM2kzR09xdnhuMnlFc0RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArAHCAePO
qI9yqdKJ0HHi3Yg9ZnSS6lK1Uaj/WgVCRmp5MQtdokjoy6j8YOhf03T0oxCGaFaF
5bEg7yPBjaop2v7sI81xPj3NMjRGJ385tNxqxfSQHtVvqTV254CKt7UZUiJGooRI
9wnMeOmCiDMdbQs/VuqtUsJgbhe6Ssfd+qyqg/UxIweRgXPkKA4PmnT2HH+AhLQL
EE+5Qgtt69F2OkGpfKml058VLfq4HSxbxPEhn2CLnCMzIZGAOM0a9nOSmrGDQw3V
MRmO6jiL+ctRTmnzDR8olMpROQuc7qOg93TWNPH50nCGP9MIneY2yVIfTyZNs86o
XkMmxmrcQhRSSA==
-----END CERTIFICATE-----
Generated at Thu Jun 12 18:07:54 2025 by rpki-client