Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
File: UZ5x0bhgWjO53WVLo43fq8HO9es.mft (raw, json)
Hash identifier: uTn1c83Y/013VvWLXWEOKyawuH7nV+SHgLV5V6z7nBs=
Subject key identifier: 0B:E3:5B:D2:63:7D:69:47:D0:F9:49:D6:84:B3:E9:61:C8:54:3F:75
Authority key identifier: 51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB
Certificate issuer: /CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb
Certificate serial: 01958FCEF7297A1B0FB3BE80E595817B29FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
Manifest number: 0451
Signing time: Thu 13 Mar 2025 14:01:00 +0000
Manifest this update: Thu 13 Mar 2025 14:01:00 +0000
Manifest next update: Fri 14 Mar 2025 14:01:00 +0000
Files and hashes: 1: UZ5x0bhgWjO53WVLo43fq8HO9es.crl (hash: HrhlvCUy0Xy/Uu7m31sfShEmuoVhl4H11EDi8GgDwZM=)
2: hQEUB92m80TtbOvBRID9BabLTbg.roa (hash: FkI5eSVTSgPh2a3D5h7cuawbzfvlNnMVkDchwgutjQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:ce:f7:29:7a:1b:0f:b3:be:80:e5:95:81:7b:29:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb
Validity
Not Before: Mar 13 14:01:00 2025 GMT
Not After : Mar 14 14:01:00 2025 GMT
Subject: CN=0be35bd2637d6947d0f949d684b3e961c8543f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7e:f2:2a:de:4d:12:0a:d4:29:ba:5f:8b:46:
7b:e8:ba:43:9d:fa:8a:1d:eb:e7:14:ac:24:17:b2:
20:76:5a:81:9d:dd:a9:2e:a1:96:2d:29:60:16:8b:
86:d7:23:80:7e:34:ed:f8:f5:52:27:6a:14:d9:26:
5c:5e:e7:fc:56:0a:7c:30:b7:e0:e2:6d:e7:14:1e:
06:5a:1e:d3:75:56:82:f3:1c:bf:52:9f:a2:42:9f:
85:35:a6:93:1e:a3:5b:bd:e3:8e:36:62:83:db:8f:
0d:b0:45:93:84:13:09:92:a7:d8:c6:57:fb:ec:a2:
c2:21:79:a1:8c:40:f7:99:db:c2:6f:04:ba:6d:d4:
d2:63:03:f4:6e:aa:19:2f:26:d2:3b:75:63:23:c4:
24:61:6b:21:6b:0a:4a:98:66:a3:50:69:f8:89:7b:
3e:1d:aa:43:57:3c:c8:28:ab:67:b4:1f:eb:47:5c:
92:4f:05:da:a3:ed:9e:c1:7a:99:b7:22:aa:bf:f7:
cb:ca:8d:aa:7c:d2:00:80:ce:3d:f0:68:29:f7:db:
93:bf:41:54:76:67:76:fd:36:50:ce:02:71:e1:ea:
06:e7:de:ed:6b:1a:90:ca:0e:70:8e:92:5f:d9:48:
21:7e:0b:6a:72:85:55:d8:80:2d:a3:e1:08:08:ca:
36:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E3:5B:D2:63:7D:69:47:D0:F9:49:D6:84:B3:E9:61:C8:54:3F:75
X509v3 Authority Key Identifier:
keyid:51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:6b:3b:1f:9c:ff:4e:1c:87:9c:fb:ff:af:89:0d:67:9d:7f:
44:ce:08:c5:9f:0f:55:cc:d7:b6:90:91:6b:b5:86:9a:69:ca:
c2:e5:a2:dc:79:e9:56:a6:12:4d:ac:34:6e:bc:d1:36:0d:a8:
3f:97:a4:b0:41:a0:a0:f2:58:fe:0d:b7:2c:2e:83:84:b5:d6:
e9:f3:04:6f:24:db:ed:c1:81:b3:f5:7b:a0:a0:fd:0d:fd:a4:
02:5f:e4:0c:cd:c5:f8:ab:49:b1:75:3b:e4:63:e8:42:39:0d:
70:a0:20:db:96:45:4a:63:b2:5f:29:06:15:2b:af:d4:a4:25:
9c:54:e7:4c:06:a1:d0:65:f8:04:c3:06:e1:7a:f0:c5:37:cd:
77:1b:69:05:41:c5:2b:62:f9:4a:66:14:03:76:26:19:81:da:
14:2f:64:1a:32:b3:88:22:c1:d1:11:5b:7b:b6:d4:d7:24:6d:
1a:fa:3d:c4:3d:97:fe:27:2e:92:81:40:cd:11:54:d0:c6:91:
2f:52:29:08:31:cb:f1:11:a6:e2:72:9e:37:e6:0c:70:7d:87:
69:d1:2f:c4:c6:bd:9c:7f:ea:91:95:53:9e:a6:6a:36:ad:6c:
43:b4:b5:60:23:e0:46:b2:10:e3:b3:33:84:1e:b8:9c:2a:5d:
e7:54:50:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWPzvcpehsPs76A5ZWBeyn/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxOWU3MWQxYjg2MDVhMzNiOWRkNjU0YmEzOGRkZmFiYzFj
ZWY1ZWIwHhcNMjUwMzEzMTQwMTAwWhcNMjUwMzE0MTQwMTAwWjAzMTEwLwYDVQQD
EygwYmUzNWJkMjYzN2Q2OTQ3ZDBmOTQ5ZDY4NGIzZTk2MWM4NTQzZjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtn7yKt5NEgrUKbpfi0Z76LpDnfqK
HevnFKwkF7IgdlqBnd2pLqGWLSlgFouG1yOAfjTt+PVSJ2oU2SZcXuf8Vgp8MLfg
4m3nFB4GWh7TdVaC8xy/Up+iQp+FNaaTHqNbveOONmKD248NsEWThBMJkqfYxlf7
7KLCIXmhjED3mdvCbwS6bdTSYwP0bqoZLybSO3VjI8QkYWshawpKmGajUGn4iXs+
HapDVzzIKKtntB/rR1ySTwXao+2ewXqZtyKqv/fLyo2qfNIAgM498Ggp99uTv0FU
dmd2/TZQzgJx4eoG597taxqQyg5wjpJf2UghfgtqcoVV2IAto+EICMo29QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAvjW9JjfWlH0PlJ1oSz6WHIVD91MB8GA1UdIwQY
MBaAFFGecdG4YFozud1lS6ON36vBzvXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVo1eDBiaGdXak81M1dWTG80M2ZxOEhPOWVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9mMzVmYjUtMGY2Ny00NGU0LTlhNTQt
ZmQ2ZjIzNWRhZjBiLzEvVVo1eDBiaGdXak81M1dWTG80M2ZxOEhPOWVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9mMzVmYjUtMGY2Ny00NGU0LTlhNTQtZmQ2ZjIzNWRhZjBi
LzEvVVo1eDBiaGdXak81M1dWTG80M2ZxOEhPOWVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf2s7H5z/
ThyHnPv/r4kNZ51/RM4IxZ8PVczXtpCRa7WGmmnKwuWi3HnpVqYSTaw0brzRNg2o
P5eksEGgoPJY/g23LC6DhLXW6fMEbyTb7cGBs/V7oKD9Df2kAl/kDM3F+KtJsXU7
5GPoQjkNcKAg25ZFSmOyXykGFSuv1KQlnFTnTAah0GX4BMMG4XrwxTfNdxtpBUHF
K2L5SmYUA3YmGYHaFC9kGjKziCLB0RFbe7bU1yRtGvo9xD2X/icukoFAzRFU0MaR
L1IpCDHL8RGm4nKeN+YMcH2HadEvxMa9nH/qkZVTnqZqNq1sQ7S1YCPgRrIQ47Mz
hB64nCpd51RQLg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:36:56 2025 by rpki-client