Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
File: UHDcUgTez3q-pQcNdfoFjIrAE9U.mft (raw, json)
Hash identifier: aC/fnZ6FRL+kt1HK5UpNNoDLCRBrtFmywXJ9XGsnuLc=
Subject key identifier: 0C:D0:7E:F7:25:4F:D7:9B:AB:CC:3C:6B:5A:D8:52:67:BF:1F:E9:07
Authority key identifier: 50:70:DC:52:04:DE:CF:7A:BE:A5:07:0D:75:FA:05:8C:8A:C0:13:D5
Certificate issuer: /CN=5070dc5204decf7abea5070d75fa058c8ac013d5
Certificate serial: 019626DF2AFEA9C4E08FA1ABC5FD5988A1EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
Manifest number: 1207
Signing time: Fri 11 Apr 2025 22:01:21 +0000
Manifest this update: Fri 11 Apr 2025 22:01:21 +0000
Manifest next update: Sat 12 Apr 2025 22:01:21 +0000
Files and hashes: 1: 1qF2qpZ4KDEQgCHi8Zz6Mofp1Bw.roa (hash: ZUGdPkmwhsuvGIfhBFvpGPh0RIr8NwcoDU94MyjHlG0=)
2: UHDcUgTez3q-pQcNdfoFjIrAE9U.crl (hash: QbDn/DyGSTmB3p+ugDByQ1cN0bC7apRyKq8nMy88+BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:26:df:2a:fe:a9:c4:e0:8f:a1:ab:c5:fd:59:88:a1:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5070dc5204decf7abea5070d75fa058c8ac013d5
Validity
Not Before: Apr 11 22:01:21 2025 GMT
Not After : Apr 12 22:01:21 2025 GMT
Subject: CN=0cd07ef7254fd79babcc3c6b5ad85267bf1fe907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:45:41:7b:34:3b:d0:f6:b0:fc:41:e5:f0:9f:
53:08:16:8a:44:a8:2a:b8:08:60:38:d6:af:00:fb:
12:f2:e4:7d:77:53:67:e1:27:7d:69:ce:08:62:ff:
eb:16:68:9a:6e:69:51:33:6c:2b:45:67:40:63:5d:
d6:51:8a:1b:e2:11:88:c9:2d:e5:41:1e:96:0f:54:
cb:65:a7:0a:25:ed:44:14:6a:f1:5c:0c:30:3f:ac:
74:b6:36:49:23:bb:53:67:fd:f9:72:fc:94:fe:fd:
84:5d:48:be:a2:76:71:95:fc:f7:1b:34:6e:2f:9b:
66:43:f1:d2:fd:33:6f:2a:f1:c0:e8:12:99:79:0a:
68:6c:04:83:bd:d7:4c:0d:f9:19:c1:e3:47:cd:e6:
9d:9c:18:5d:81:80:19:3b:45:65:a0:9c:c0:39:7c:
7a:bb:8b:d4:1a:b4:e4:92:87:fa:07:18:41:c5:25:
8b:a8:58:cd:88:9e:f1:d1:5b:d9:a2:1f:d4:0f:8d:
20:c7:34:ed:a5:f0:82:de:51:27:33:ab:a6:9c:66:
a5:87:64:81:3e:c0:61:51:71:db:de:14:fb:35:ff:
90:53:3b:db:2d:4f:52:2a:b0:e6:4e:2d:26:39:0b:
cb:20:45:a7:5f:14:e1:d2:c4:13:2d:66:2d:8f:eb:
e2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D0:7E:F7:25:4F:D7:9B:AB:CC:3C:6B:5A:D8:52:67:BF:1F:E9:07
X509v3 Authority Key Identifier:
keyid:50:70:DC:52:04:DE:CF:7A:BE:A5:07:0D:75:FA:05:8C:8A:C0:13:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:cb:0c:e9:53:e0:56:b6:3e:24:98:c5:3a:1b:71:41:4b:5f:
13:2a:9d:0e:c1:a4:f9:ca:04:79:df:70:bf:a6:9e:7d:33:2d:
c9:56:f6:25:ee:0c:49:7f:a6:c4:1d:09:86:dd:79:8c:26:78:
bf:78:f4:41:81:29:4b:a8:45:9d:fd:45:e0:0b:89:2b:e9:ea:
cd:7b:8b:a5:11:5c:6e:df:88:82:8e:ed:59:0d:32:d7:bf:20:
9c:d4:d6:1f:01:b5:af:5a:2d:73:91:ae:35:60:bf:52:a2:a1:
f9:68:a0:b1:01:55:02:f3:c8:38:b4:69:f1:c4:99:42:c9:cb:
bd:af:63:e1:7e:d0:29:ec:76:1d:14:7b:a4:26:68:f2:f0:5f:
73:2c:ba:a1:bc:7c:fe:d2:58:21:87:02:0e:30:20:ef:7d:62:
16:4f:37:98:06:ad:52:58:08:f4:e7:43:ec:d5:a5:ad:78:9e:
fa:2d:4e:24:95:8c:b4:df:82:bd:b0:bb:ee:85:31:31:45:07:
6b:3e:49:7a:4d:9c:d7:35:fa:63:41:0a:83:c9:9b:4a:03:ad:
7c:f0:43:46:14:34:ac:34:58:17:49:69:73:22:73:00:e5:5a:
52:4b:22:cd:21:b2:cd:41:6d:c1:ee:23:63:f5:43:f9:6f:68:
cc:81:1b:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYm3yr+qcTgj6Grxf1ZiKHrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNzBkYzUyMDRkZWNmN2FiZWE1MDcwZDc1ZmEwNThjOGFj
MDEzZDUwHhcNMjUwNDExMjIwMTIxWhcNMjUwNDEyMjIwMTIxWjAzMTEwLwYDVQQD
EygwY2QwN2VmNzI1NGZkNzliYWJjYzNjNmI1YWQ4NTI2N2JmMWZlOTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60VBezQ70Paw/EHl8J9TCBaKRKgq
uAhgONavAPsS8uR9d1Nn4Sd9ac4IYv/rFmiabmlRM2wrRWdAY13WUYob4hGIyS3l
QR6WD1TLZacKJe1EFGrxXAwwP6x0tjZJI7tTZ/35cvyU/v2EXUi+onZxlfz3GzRu
L5tmQ/HS/TNvKvHA6BKZeQpobASDvddMDfkZweNHzeadnBhdgYAZO0VloJzAOXx6
u4vUGrTkkof6BxhBxSWLqFjNiJ7x0VvZoh/UD40gxzTtpfCC3lEnM6umnGalh2SB
PsBhUXHb3hT7Nf+QUzvbLU9SKrDmTi0mOQvLIEWnXxTh0sQTLWYtj+vilQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzQfvclT9ebq8w8a1rYUme/H+kHMB8GA1UdIwQY
MBaAFFBw3FIE3s96vqUHDXX6BYyKwBPVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUhEY1VnVGV6M3EtcFFjTmRmb0ZqSXJBRTlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9hMjhiNWMtODhkNy00YWQ0LTllMWQt
OGFjMTdlOWM0MGRiLzEvVUhEY1VnVGV6M3EtcFFjTmRmb0ZqSXJBRTlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9hMjhiNWMtODhkNy00YWQ0LTllMWQtOGFjMTdlOWM0MGRi
LzEvVUhEY1VnVGV6M3EtcFFjTmRmb0ZqSXJBRTlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA08sM6VPg
VrY+JJjFOhtxQUtfEyqdDsGk+coEed9wv6aefTMtyVb2Je4MSX+mxB0Jht15jCZ4
v3j0QYEpS6hFnf1F4AuJK+nqzXuLpRFcbt+Igo7tWQ0y178gnNTWHwG1r1otc5Gu
NWC/UqKh+WigsQFVAvPIOLRp8cSZQsnLva9j4X7QKex2HRR7pCZo8vBfcyy6obx8
/tJYIYcCDjAg731iFk83mAatUlgI9OdD7NWlrXie+i1OJJWMtN+CvbC77oUxMUUH
az5Jek2c1zX6Y0EKg8mbSgOtfPBDRhQ0rDRYF0lpcyJzAOVaUksizSGyzUFtwe4j
Y/VD+W9ozIEbTQ==
-----END CERTIFICATE-----
Generated at Sat Apr 12 06:52:20 2025 by rpki-client