Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft
File: Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft (raw, json)
Hash identifier: YLVDxBCUKJqA9mMRS9Bfve8sp1fhZLfPrYRg3JIkI9g=
Subject key identifier: EC:94:92:6C:02:92:D3:0F:8A:67:3C:29:BE:A2:F7:A5:E2:A2:8D:CD
Authority key identifier: 52:4E:5F:79:61:22:5F:BF:E3:41:F6:BF:D6:BE:8E:1A:21:EF:8C:0F
Certificate issuer: /CN=524e5f7961225fbfe341f6bfd6be8e1a21ef8c0f
Certificate serial: 0194C3BE3F5D6DB33BBD59283732B4E3E0AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uk5feWEiX7_jQfa_1r6OGiHvjA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft
Manifest number: 0A99
Signing time: Sat 01 Feb 2025 23:00:12 +0000
Manifest this update: Sat 01 Feb 2025 23:00:12 +0000
Manifest next update: Sun 02 Feb 2025 23:00:12 +0000
Files and hashes: 1: NwhX1fpUUKISwRaP6RgnnH_Cl-k.roa (hash: 46uueaf8TwY6xllVk4bGf8Po+XSFPtY1TUSEHJE8zWc=)
2: Uk5feWEiX7_jQfa_1r6OGiHvjA8.crl (hash: ZOsYgdYy0vzRKEpHqKorEZK6RZsruW0JNScGPilgzMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uk5feWEiX7_jQfa_1r6OGiHvjA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:3f:5d:6d:b3:3b:bd:59:28:37:32:b4:e3:e0:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=524e5f7961225fbfe341f6bfd6be8e1a21ef8c0f
Validity
Not Before: Feb 1 23:00:12 2025 GMT
Not After : Feb 2 23:00:12 2025 GMT
Subject: CN=ec94926c0292d30f8a673c29bea2f7a5e2a28dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:42:02:56:29:23:f1:ca:5f:d7:6e:7f:e6:c0:
b0:eb:d2:6a:3d:8d:0f:14:25:86:88:cf:e2:01:2b:
ec:33:cc:51:e6:43:f3:83:f7:bb:16:bd:e5:bc:7d:
f0:39:b4:4a:7f:1a:68:77:25:39:f7:eb:95:e6:07:
88:1c:03:77:8a:e1:c6:bb:45:e3:69:93:82:9f:1a:
3b:31:49:93:9b:95:86:b8:25:1f:c4:43:cf:e8:27:
18:5e:47:cf:e8:bd:76:0f:5f:17:57:92:2e:8a:f8:
ee:cc:5a:16:c4:c6:31:31:ca:58:54:82:9a:81:9e:
3f:40:c8:56:c2:c9:5a:f9:19:0d:0a:b7:1c:7d:4e:
95:38:28:e2:fe:1c:b9:d4:e1:40:ca:21:fd:f3:0c:
93:f0:2b:79:3f:d6:06:9e:34:8d:a1:13:e6:79:a3:
94:f0:db:49:1b:60:b5:ad:9a:22:c2:5c:1e:6b:5d:
cb:02:3f:85:07:36:14:35:c6:23:72:61:e3:cb:af:
83:b7:b4:6d:34:d5:5f:e4:9e:e4:9c:48:ee:78:51:
68:15:d6:3e:ec:7d:4b:7b:5e:49:0d:fe:49:d3:1b:
e1:3f:f8:d8:d4:54:ac:1a:33:97:19:9d:ab:e9:8d:
63:1e:fc:b0:96:82:04:ea:38:43:61:fe:07:e6:e8:
9b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:94:92:6C:02:92:D3:0F:8A:67:3C:29:BE:A2:F7:A5:E2:A2:8D:CD
X509v3 Authority Key Identifier:
keyid:52:4E:5F:79:61:22:5F:BF:E3:41:F6:BF:D6:BE:8E:1A:21:EF:8C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uk5feWEiX7_jQfa_1r6OGiHvjA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a7:e8:ff:1a:3c:c6:2f:e5:2a:40:07:b7:e5:7a:35:9f:cf:
57:22:7b:e1:1b:68:c2:3a:e8:4c:76:9f:f1:34:e9:dd:43:d7:
ca:cf:ea:bd:49:0e:af:21:77:6e:a4:3e:5b:67:a4:d2:11:7f:
01:9d:3c:dd:6e:46:e7:83:a9:a8:52:79:55:b9:a4:95:39:27:
1a:2d:34:a9:51:1a:3c:d8:34:c2:ec:7f:0d:0b:62:6f:fe:01:
be:60:76:5b:db:79:f2:61:42:c9:aa:40:68:da:fb:eb:2c:ba:
64:a9:9c:93:27:84:d1:52:ff:d6:b9:2f:4e:cc:f0:3e:f8:60:
21:7a:87:c2:1e:8f:7a:cf:ca:b4:e3:0a:2f:6e:8f:95:24:cf:
9a:70:cc:1d:01:ba:22:b4:14:35:17:de:e4:64:1d:e4:40:a0:
04:6c:1a:31:9d:9b:ce:01:f4:8a:9a:46:ec:c0:1e:0b:53:29:
eb:79:f0:9e:af:08:a8:49:34:a1:c8:55:95:f0:5e:1f:e3:b8:
c1:da:3a:54:6e:7c:6c:7a:1d:20:9f:a0:29:2c:0a:8a:83:cd:
97:e3:13:fd:d6:44:ff:3e:c4:f8:d9:e1:04:ce:6e:cb:00:27:
ba:c3:45:39:f4:d9:ee:c1:e5:fa:f8:2b:a8:70:2c:79:eb:29:
ed:db:ef:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDvj9dbbM7vVkoNzK04+CtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNGU1Zjc5NjEyMjVmYmZlMzQxZjZiZmQ2YmU4ZTFhMjFl
ZjhjMGYwHhcNMjUwMjAxMjMwMDEyWhcNMjUwMjAyMjMwMDEyWjAzMTEwLwYDVQQD
EyhlYzk0OTI2YzAyOTJkMzBmOGE2NzNjMjliZWEyZjdhNWUyYTI4ZGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUICVikj8cpf125/5sCw69JqPY0P
FCWGiM/iASvsM8xR5kPzg/e7Fr3lvH3wObRKfxpodyU59+uV5geIHAN3iuHGu0Xj
aZOCnxo7MUmTm5WGuCUfxEPP6CcYXkfP6L12D18XV5IuivjuzFoWxMYxMcpYVIKa
gZ4/QMhWwsla+RkNCrccfU6VOCji/hy51OFAyiH98wyT8Ct5P9YGnjSNoRPmeaOU
8NtJG2C1rZoiwlwea13LAj+FBzYUNcYjcmHjy6+Dt7RtNNVf5J7knEjueFFoFdY+
7H1Le15JDf5J0xvhP/jY1FSsGjOXGZ2r6Y1jHvywloIE6jhDYf4H5uibZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyUkmwCktMPimc8Kb6i96Xioo3NMB8GA1UdIwQY
MBaAFFJOX3lhIl+/40H2v9a+jhoh74wPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWs1ZmVXRWlYN19qUWZhXzFyNk9HaUh2akE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi85YzY1NDYtNTgxMS00MTk0LWJmZWIt
MmFiOTA0NmViYzExLzEvVWs1ZmVXRWlYN19qUWZhXzFyNk9HaUh2akE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi85YzY1NDYtNTgxMS00MTk0LWJmZWItMmFiOTA0NmViYzEx
LzEvVWs1ZmVXRWlYN19qUWZhXzFyNk9HaUh2akE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXqfo/xo8
xi/lKkAHt+V6NZ/PVyJ74RtowjroTHaf8TTp3UPXys/qvUkOryF3bqQ+W2ek0hF/
AZ083W5G54OpqFJ5VbmklTknGi00qVEaPNg0wux/DQtib/4BvmB2W9t58mFCyapA
aNr76yy6ZKmckyeE0VL/1rkvTszwPvhgIXqHwh6Pes/KtOMKL26PlSTPmnDMHQG6
IrQUNRfe5GQd5ECgBGwaMZ2bzgH0ippG7MAeC1Mp63nwnq8IqEk0ochVlfBeH+O4
wdo6VG58bHodIJ+gKSwKioPNl+MT/dZE/z7E+NnhBM5uywAnusNFOfTZ7sHl+vgr
qHAseesp7dvvNQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:41:49 2025 by rpki-client