Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
File: Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft (raw, json)
Hash identifier: abjqTbPdjnGo6oS/TU32TJoYGIwjae7wnq8BEnBddHY=
Subject key identifier: B3:D7:6B:8C:A2:EF:CA:76:C3:21:94:1C:70:9E:45:21:82:D1:18:24
Authority key identifier: 51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
Certificate issuer: /CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Certificate serial: 01975FB8FF458654AB90B29036F4049D310F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
Manifest number: 0EB3
Signing time: Wed 11 Jun 2025 16:00:48 +0000
Manifest this update: Wed 11 Jun 2025 16:00:48 +0000
Manifest next update: Thu 12 Jun 2025 16:00:48 +0000
Files and hashes: 1: Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl (hash: 1ma64B5fR3t5OBke5fuys6hyKKRp9QGj4dvwiEIoJlo=)
2: wcLPDXwZhknfwFVrmzWdaV09zJc.roa (hash: KCyUIbiI7WKGmxPwkUMQCU2Fnp9j24d2NyqBltI+vd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:b8:ff:45:86:54:ab:90:b2:90:36:f4:04:9d:31:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Validity
Not Before: Jun 11 16:00:48 2025 GMT
Not After : Jun 12 16:00:48 2025 GMT
Subject: CN=b3d76b8ca2efca76c321941c709e452182d11824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b3:91:1b:7e:04:03:21:9d:e3:a4:00:e8:6c:
a4:ca:05:c2:d3:c2:bf:d0:bc:9e:fd:62:84:6b:7f:
84:7d:6f:5d:f3:d4:de:03:4c:ca:0d:c1:c8:de:47:
a5:ca:0f:b0:c4:61:2f:ae:f8:49:be:30:70:78:fd:
f7:00:7a:12:bb:65:42:d6:e5:ff:3e:21:9a:a3:30:
0e:fc:f2:b5:5d:e4:c9:4b:0c:bb:ca:af:c0:4b:25:
f5:57:ca:b9:52:19:f3:b9:c2:9a:a3:a9:8d:24:4d:
84:36:36:88:78:aa:37:c6:d0:a7:d7:2a:7a:9d:98:
6f:62:30:d7:36:72:1e:dd:5a:8a:02:53:89:6f:e2:
f2:73:2a:0c:bd:31:0b:e4:fc:5f:17:7e:c8:d3:c2:
71:0e:b7:b5:ec:b7:3c:98:66:20:08:36:b0:41:5c:
52:0a:5c:0d:f5:15:1e:d2:d6:2d:08:4c:a8:1b:18:
6e:2a:e5:c0:b6:50:1a:93:6f:05:84:ef:9e:5a:a9:
59:cf:f3:cf:9f:43:93:96:a4:3e:e7:65:8b:4d:7a:
a8:ad:32:f4:08:39:80:62:77:43:d1:e3:e8:36:9e:
60:3a:87:c1:8f:cd:b4:6e:49:35:09:8f:19:4a:82:
07:e5:5f:c4:f2:a6:f2:bc:93:19:dd:fa:2e:8c:af:
c5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D7:6B:8C:A2:EF:CA:76:C3:21:94:1C:70:9E:45:21:82:D1:18:24
X509v3 Authority Key Identifier:
keyid:51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d8:1d:bf:3d:1d:83:01:57:ea:ad:63:96:4b:64:26:b6:1e:
bb:fc:b2:c6:d5:84:15:26:06:1a:5b:11:bb:73:90:e7:92:03:
a4:5b:99:a8:23:ac:de:09:33:af:71:a2:d4:79:aa:98:06:7b:
9e:4d:28:0e:8f:ea:b0:fc:3a:c6:c5:d6:73:e2:36:3d:65:d4:
ef:9b:c6:1a:b8:17:ca:63:7f:bc:8c:80:99:f5:19:d7:5c:30:
52:62:8d:88:b7:ba:05:e5:a0:c7:c3:b1:2e:63:59:10:60:57:
a1:ba:49:10:ce:3a:62:63:bc:47:ac:5c:2f:70:fd:9c:57:12:
99:ef:78:e2:92:73:07:93:f6:be:bd:88:38:0e:93:b0:17:5f:
ee:00:82:ba:fc:f9:4e:98:b5:39:40:1f:9e:20:e4:a3:44:78:
a9:c4:c9:2e:e7:4c:c9:ca:70:83:df:03:cc:d7:ec:94:2c:11:
54:a4:9b:47:12:5d:7d:2a:f8:43:0b:87:41:ff:8f:cd:7b:e7:
10:ed:fb:e1:05:d7:ef:5c:6a:eb:6e:22:84:c3:f9:4f:20:7f:
ac:b4:2b:0c:f7:16:d4:03:62:18:72:ea:9d:51:54:20:96:bc:
ac:68:b7:e3:d7:83:ee:32:ab:84:5d:10:e4:05:84:35:bb:d3:
0f:0c:10:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdfuP9FhlSrkLKQNvQEnTEPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYWM3ZTMzNzQ0YzI0OGY4N2RlMmRjNjNhYWJmMTlmNmM4
NGIwMzIwHhcNMjUwNjExMTYwMDQ4WhcNMjUwNjEyMTYwMDQ4WjAzMTEwLwYDVQQD
EyhiM2Q3NmI4Y2EyZWZjYTc2YzMyMTk0MWM3MDllNDUyMTgyZDExODI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rORG34EAyGd46QA6GykygXC08K/
0Lye/WKEa3+EfW9d89TeA0zKDcHI3kelyg+wxGEvrvhJvjBweP33AHoSu2VC1uX/
PiGaozAO/PK1XeTJSwy7yq/ASyX1V8q5UhnzucKao6mNJE2ENjaIeKo3xtCn1yp6
nZhvYjDXNnIe3VqKAlOJb+LycyoMvTEL5PxfF37I08JxDre17Lc8mGYgCDawQVxS
ClwN9RUe0tYtCEyoGxhuKuXAtlAak28FhO+eWqlZz/PPn0OTlqQ+52WLTXqorTL0
CDmAYndD0ePoNp5gOofBj820bkk1CY8ZSoIH5V/E8qbyvJMZ3foujK/FAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPXa4yi78p2wyGUHHCeRSGC0RgkMB8GA1UdIwQY
MBaAFFGsfjN0TCSPh94txjqr8Z9shLAyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWF4LU0zUk1KSS1IM2kzR09xdnhuMnlFc0RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9kZjNjNjEtNzhhZS00ZDFjLWE3NTYt
NjM0ODY0OTc3NGEyLzEvVWF4LU0zUk1KSS1IM2kzR09xdnhuMnlFc0RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9kZjNjNjEtNzhhZS00ZDFjLWE3NTYtNjM0ODY0OTc3NGEy
LzEvVWF4LU0zUk1KSS1IM2kzR09xdnhuMnlFc0RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVdgdvz0d
gwFX6q1jlktkJrYeu/yyxtWEFSYGGlsRu3OQ55IDpFuZqCOs3gkzr3Gi1HmqmAZ7
nk0oDo/qsPw6xsXWc+I2PWXU75vGGrgXymN/vIyAmfUZ11wwUmKNiLe6BeWgx8Ox
LmNZEGBXobpJEM46YmO8R6xcL3D9nFcSme944pJzB5P2vr2IOA6TsBdf7gCCuvz5
Tpi1OUAfniDko0R4qcTJLudMycpwg98DzNfslCwRVKSbRxJdfSr4QwuHQf+PzXvn
EO374QXX71xq624ihMP5TyB/rLQrDPcW1ANiGHLqnVFUIJa8rGi349eD7jKrhF0Q
5AWENbvTDwwQ+Q==
-----END CERTIFICATE-----
Generated at Wed Jun 11 21:50:04 2025 by rpki-client