Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.mft
File: UjiBmTzw22dOidtYFebxiabGDR8.mft (raw, json)
Hash identifier: 8He2M3Ru3lpaq5oh70dI6O8gMIBXDugWqilOO8jhcz8=
Subject key identifier: 65:35:C1:16:0A:C5:F3:8A:0D:51:D4:A9:71:26:0C:75:4A:2C:CC:33
Authority key identifier: 52:38:81:99:3C:F0:DB:67:4E:89:DB:58:15:E6:F1:89:A6:C6:0D:1F
Certificate issuer: /CN=523881993cf0db674e89db5815e6f189a6c60d1f
Certificate serial: 0195813724A509B623C885E950714D81FA0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjiBmTzw22dOidtYFebxiabGDR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.mft
Manifest number: 0B67
Signing time: Mon 10 Mar 2025 18:00:29 +0000
Manifest this update: Mon 10 Mar 2025 18:00:29 +0000
Manifest next update: Tue 11 Mar 2025 18:00:29 +0000
Files and hashes: 1: QrLxpXcKKlTKVqNWJjfnZ5zQego.roa (hash: JlU34SAKSUABE+VJCPnsQJhW9HL/rg4ccciJ5TxRUSY=)
2: UjiBmTzw22dOidtYFebxiabGDR8.crl (hash: P5XZOnaJ0lJ/ukFMElRL3n4FFBMQYfbx+WV4ieusIAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjiBmTzw22dOidtYFebxiabGDR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Mar 2025 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:81:37:24:a5:09:b6:23:c8:85:e9:50:71:4d:81:fa:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=523881993cf0db674e89db5815e6f189a6c60d1f
Validity
Not Before: Mar 10 18:00:29 2025 GMT
Not After : Mar 11 18:00:29 2025 GMT
Subject: CN=6535c1160ac5f38a0d51d4a971260c754a2ccc33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d4:16:fd:c6:62:79:44:59:c9:74:34:96:9c:
34:db:3b:8f:8b:48:7e:76:05:44:21:11:9c:44:1d:
45:eb:4f:6b:28:ba:ea:97:a7:b9:83:1e:dc:f9:66:
72:ab:57:91:a4:f7:68:89:b6:0d:b6:9d:53:1a:21:
62:86:ea:21:36:f6:43:f1:fe:25:0e:cd:f9:f4:93:
ca:71:fa:6c:12:3d:5c:54:cf:14:52:88:e5:ee:47:
51:ed:8e:74:fe:55:d8:b0:24:ec:31:b4:26:f5:42:
d6:3a:cb:78:0c:3b:5b:6b:5f:11:f4:1b:38:a5:01:
98:97:4f:63:b0:af:e2:82:e7:53:63:33:ca:5d:2b:
8c:e6:d7:f5:ef:96:b9:21:2c:bf:96:51:a9:fe:4a:
8b:01:ec:94:da:2e:45:78:0e:f9:53:57:4e:94:fc:
54:38:0f:74:32:47:93:96:f3:73:98:32:3b:56:cf:
92:db:a9:62:3b:be:52:e2:fd:b6:09:f2:23:2f:ff:
a7:3f:29:b9:72:7e:d4:12:d9:91:eb:81:cd:f2:5a:
57:e3:3a:bd:67:67:dc:ce:7b:37:ac:99:19:76:f1:
a1:6f:77:90:89:1d:e0:6d:10:07:b2:68:5c:cb:c5:
f2:35:17:15:de:7e:96:77:0e:ce:e6:a3:55:88:56:
be:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:35:C1:16:0A:C5:F3:8A:0D:51:D4:A9:71:26:0C:75:4A:2C:CC:33
X509v3 Authority Key Identifier:
keyid:52:38:81:99:3C:F0:DB:67:4E:89:DB:58:15:E6:F1:89:A6:C6:0D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjiBmTzw22dOidtYFebxiabGDR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:5f:77:84:b7:7a:f9:76:ac:85:52:93:ea:ec:b2:fb:6a:41:
0f:33:8a:4d:02:3c:55:3a:44:0b:bc:15:49:20:c9:bd:80:ad:
0d:ca:d8:56:d1:46:76:3b:8f:78:25:20:d1:7a:7a:5e:00:39:
6e:f7:12:c3:fa:5b:e4:fa:f1:9a:b3:85:42:65:53:56:37:96:
69:c5:1a:96:1c:70:01:5c:a3:33:eb:df:98:2e:f5:5c:9c:d4:
01:68:6d:fe:c3:02:3d:f6:25:02:35:4a:07:a8:4b:4f:aa:8e:
79:6b:1b:8f:ab:e2:11:75:23:e7:6d:a9:8a:7e:2f:ec:a5:eb:
45:3e:0b:ff:ed:4d:bf:99:d9:4d:96:38:85:98:da:a4:5c:58:
a1:89:19:9e:95:48:4c:06:c5:97:08:b3:eb:1f:e1:ae:39:e6:
df:37:28:61:dd:fa:fa:74:48:19:36:54:8f:3b:5d:d8:da:96:
9d:1e:cb:e4:c1:d7:e2:26:26:d1:92:46:35:93:3a:2a:74:b0:
67:3a:5c:d4:94:00:dc:b7:1a:8a:de:c1:19:07:dd:0b:65:08:
0e:0d:f3:8b:f7:c0:0d:cd:86:b2:2d:e2:af:d6:2b:39:3c:d8:
7c:dd:d1:e9:fc:60:35:7b:a0:f6:29:50:34:df:d6:11:d7:bd:
35:af:58:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWBNySlCbYjyIXpUHFNgfoLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMzg4MTk5M2NmMGRiNjc0ZTg5ZGI1ODE1ZTZmMTg5YTZj
NjBkMWYwHhcNMjUwMzEwMTgwMDI5WhcNMjUwMzExMTgwMDI5WjAzMTEwLwYDVQQD
Eyg2NTM1YzExNjBhYzVmMzhhMGQ1MWQ0YTk3MTI2MGM3NTRhMmNjYzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69QW/cZieURZyXQ0lpw02zuPi0h+
dgVEIRGcRB1F609rKLrql6e5gx7c+WZyq1eRpPdoibYNtp1TGiFihuohNvZD8f4l
Ds359JPKcfpsEj1cVM8UUojl7kdR7Y50/lXYsCTsMbQm9ULWOst4DDtba18R9Bs4
pQGYl09jsK/igudTYzPKXSuM5tf175a5ISy/llGp/kqLAeyU2i5FeA75U1dOlPxU
OA90MkeTlvNzmDI7Vs+S26liO75S4v22CfIjL/+nPym5cn7UEtmR64HN8lpX4zq9
Z2fczns3rJkZdvGhb3eQiR3gbRAHsmhcy8XyNRcV3n6Wdw7O5qNViFa+/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGU1wRYKxfOKDVHUqXEmDHVKLMwzMB8GA1UdIwQY
MBaAFFI4gZk88NtnTonbWBXm8Ymmxg0fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWppQm1UencyMmRPaWR0WUZlYnhpYWJHRFI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83ZDAzNTMtM2E2Mi00YzM5LWJkM2Et
YzNhMzUyMWU4ZjcwLzEvVWppQm1UencyMmRPaWR0WUZlYnhpYWJHRFI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83ZDAzNTMtM2E2Mi00YzM5LWJkM2EtYzNhMzUyMWU4Zjcw
LzEvVWppQm1UencyMmRPaWR0WUZlYnhpYWJHRFI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApl93hLd6
+XashVKT6uyy+2pBDzOKTQI8VTpEC7wVSSDJvYCtDcrYVtFGdjuPeCUg0Xp6XgA5
bvcSw/pb5PrxmrOFQmVTVjeWacUalhxwAVyjM+vfmC71XJzUAWht/sMCPfYlAjVK
B6hLT6qOeWsbj6viEXUj522pin4v7KXrRT4L/+1Nv5nZTZY4hZjapFxYoYkZnpVI
TAbFlwiz6x/hrjnm3zcoYd36+nRIGTZUjztd2NqWnR7L5MHX4iYm0ZJGNZM6KnSw
Zzpc1JQA3Lcait7BGQfdC2UIDg3zi/fADc2Gsi3ir9YrOTzYfN3R6fxgNXug9ilQ
NN/WEde9Na9Yeg==
-----END CERTIFICATE-----
Generated at Tue Mar 11 05:07:42 2025 by rpki-client