Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
File: Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft (raw, json)
Hash identifier: mQdNYjDBmLqgeZXwU5QT4708+fNXnMO3pWXoPbca+yE=
Subject key identifier: 59:DD:53:C2:5E:A8:15:68:C3:5E:EF:7A:AA:64:A3:0C:BE:EB:C8:69
Authority key identifier: 51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
Certificate issuer: /CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Certificate serial: 01975BDC066FF6B44F75424D859DD97BF3D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
Manifest number: 0EB1
Signing time: Tue 10 Jun 2025 22:00:35 +0000
Manifest this update: Tue 10 Jun 2025 22:00:35 +0000
Manifest next update: Wed 11 Jun 2025 22:00:35 +0000
Files and hashes: 1: Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl (hash: xo+21CP349ODaJUCtWWfTIJ4+BD79ziIBnXe+qdrwYw=)
2: wcLPDXwZhknfwFVrmzWdaV09zJc.roa (hash: KCyUIbiI7WKGmxPwkUMQCU2Fnp9j24d2NyqBltI+vd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:dc:06:6f:f6:b4:4f:75:42:4d:85:9d:d9:7b:f3:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Validity
Not Before: Jun 10 22:00:35 2025 GMT
Not After : Jun 11 22:00:35 2025 GMT
Subject: CN=59dd53c25ea81568c35eef7aaa64a30cbeebc869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6c:d9:74:5a:59:d7:7a:8b:f5:91:95:93:66:
f6:cc:95:fb:d6:ab:48:a7:62:e6:3c:a4:fe:a6:e7:
ee:24:e4:c5:89:6c:12:b3:59:b3:4c:2a:91:93:03:
03:98:88:52:97:0b:10:f1:a3:8a:d0:4c:60:90:e4:
5f:87:c8:78:19:d5:ee:c6:f8:1e:7f:96:2f:d4:4d:
68:41:d3:3c:0e:d8:a8:5f:c8:e0:26:20:a5:9e:56:
98:7b:46:d5:df:d5:b9:90:99:12:f6:00:35:09:ba:
72:d3:8f:b1:99:de:8e:0d:66:0c:d4:76:ec:80:16:
7b:51:6c:4a:25:1d:31:30:b6:dd:61:e5:d2:23:06:
30:60:f5:8e:b2:7b:c4:ab:6e:47:d5:64:45:5e:5f:
7e:b9:d6:eb:97:eb:f0:17:35:35:14:50:66:2d:ae:
29:e7:e4:e5:f1:9b:de:a7:69:00:bf:4e:b5:0f:b1:
c8:2b:b7:7b:48:28:d6:85:3a:76:9c:01:7d:fc:3d:
de:57:ab:be:79:cc:e3:41:73:fc:30:ea:20:33:c6:
ee:73:f4:99:83:37:bd:8a:cb:f7:28:d3:e6:84:8a:
f0:2b:df:87:2d:4e:3a:1a:ad:3c:ad:f5:f7:bf:48:
d1:5d:f8:91:36:60:ee:21:62:ad:5d:1a:08:7a:35:
7a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DD:53:C2:5E:A8:15:68:C3:5E:EF:7A:AA:64:A3:0C:BE:EB:C8:69
X509v3 Authority Key Identifier:
keyid:51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:43:07:e9:cd:f4:d6:2a:01:d8:53:ab:76:a0:49:6a:4f:24:
77:9f:88:a0:4b:d4:2b:40:fb:9d:ad:70:47:1e:1e:57:a1:49:
04:ab:d6:d1:d7:ff:a8:4f:19:b6:00:ae:19:63:58:e9:e4:66:
2e:ed:5c:d6:07:db:48:64:16:e2:80:68:36:6c:c6:f4:bd:15:
6a:d8:76:c5:f8:6a:70:93:52:ba:6f:0c:85:37:c2:81:29:c9:
43:20:e5:1f:5c:2f:39:47:e0:74:53:87:ae:b9:7e:f6:8e:eb:
43:c8:af:3e:42:d0:2a:8e:c3:bf:00:63:1a:d6:16:45:73:e3:
aa:d8:a1:a4:4e:c8:a8:d7:71:45:34:03:4c:27:3d:a5:be:94:
05:09:ae:a0:ed:e6:ed:00:5b:e3:94:9d:51:64:ef:cb:ac:65:
2a:ec:b8:15:43:53:ed:d1:44:ef:94:45:19:51:3a:e0:21:d7:
01:99:da:fd:55:a4:c9:30:da:29:33:90:f6:8e:79:e8:20:a1:
0e:e1:61:4a:d7:b6:35:aa:7e:a4:7e:a0:ed:e5:17:c8:7f:d2:
53:96:00:cc:75:13:5b:79:28:ff:15:57:92:ca:ca:c6:c1:9b:
5b:e0:a7:e4:4b:26:ff:c7:75:e6:8b:b1:13:50:8b:81:d9:10:
8f:29:ba:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdb3AZv9rRPdUJNhZ3Ze/PYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYWM3ZTMzNzQ0YzI0OGY4N2RlMmRjNjNhYWJmMTlmNmM4
NGIwMzIwHhcNMjUwNjEwMjIwMDM1WhcNMjUwNjExMjIwMDM1WjAzMTEwLwYDVQQD
Eyg1OWRkNTNjMjVlYTgxNTY4YzM1ZWVmN2FhYTY0YTMwY2JlZWJjODY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWzZdFpZ13qL9ZGVk2b2zJX71qtI
p2LmPKT+pufuJOTFiWwSs1mzTCqRkwMDmIhSlwsQ8aOK0ExgkORfh8h4GdXuxvge
f5Yv1E1oQdM8DtioX8jgJiClnlaYe0bV39W5kJkS9gA1Cbpy04+xmd6ODWYM1Hbs
gBZ7UWxKJR0xMLbdYeXSIwYwYPWOsnvEq25H1WRFXl9+udbrl+vwFzU1FFBmLa4p
5+Tl8Zvep2kAv061D7HIK7d7SCjWhTp2nAF9/D3eV6u+eczjQXP8MOogM8buc/SZ
gze9isv3KNPmhIrwK9+HLU46Gq08rfX3v0jRXfiRNmDuIWKtXRoIejV6owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFndU8JeqBVow17veqpkowy+68hpMB8GA1UdIwQY
MBaAFFGsfjN0TCSPh94txjqr8Z9shLAyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWF4LU0zUk1KSS1IM2kzR09xdnhuMnlFc0RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9kZjNjNjEtNzhhZS00ZDFjLWE3NTYt
NjM0ODY0OTc3NGEyLzEvVWF4LU0zUk1KSS1IM2kzR09xdnhuMnlFc0RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9kZjNjNjEtNzhhZS00ZDFjLWE3NTYtNjM0ODY0OTc3NGEy
LzEvVWF4LU0zUk1KSS1IM2kzR09xdnhuMnlFc0RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAEMH6c30
1ioB2FOrdqBJak8kd5+IoEvUK0D7na1wRx4eV6FJBKvW0df/qE8ZtgCuGWNY6eRm
Lu1c1gfbSGQW4oBoNmzG9L0Vath2xfhqcJNSum8MhTfCgSnJQyDlH1wvOUfgdFOH
rrl+9o7rQ8ivPkLQKo7DvwBjGtYWRXPjqtihpE7IqNdxRTQDTCc9pb6UBQmuoO3m
7QBb45SdUWTvy6xlKuy4FUNT7dFE75RFGVE64CHXAZna/VWkyTDaKTOQ9o556CCh
DuFhSte2Nap+pH6g7eUXyH/SU5YAzHUTW3ko/xVXksrKxsGbW+Cn5Esm/8d15oux
E1CLgdkQjym6Ag==
-----END CERTIFICATE-----
Generated at Wed Jun 11 04:35:41 2025 by rpki-client