Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
File: uCMtGd2B1FwlkjrrTZqWhYea76Y.mft (raw, json)
Hash identifier: Js7HGhh8wLLD30bA6fR10yGP2bbWszhdCrrRM67jyx0=
Subject key identifier: 26:40:19:DA:4A:8D:F4:2A:A9:88:96:9F:6C:D1:41:A4:04:F5:1B:1D
Authority key identifier: B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
Certificate issuer: /CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Certificate serial: 01964A7D4F82DCBC854C83E868C15CA2C570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
Manifest number: 148A
Signing time: Fri 18 Apr 2025 20:00:48 +0000
Manifest this update: Fri 18 Apr 2025 20:00:48 +0000
Manifest next update: Sat 19 Apr 2025 20:00:48 +0000
Files and hashes: 1: gjQZAjjkQcupDLhTVfFv8GZji_8.roa (hash: S6LI8locxNS7pJHusatxk4CqHDeNJR2oaMoGw7n3cpU=)
2: nkLmWF2X04pEKbldwQ-XhzCzFtI.roa (hash: drZ+SVUdJNv3IZqPJ450+x2T4QY0zqQN6P9TNIS4M4U=)
3: uCMtGd2B1FwlkjrrTZqWhYea76Y.crl (hash: 7hgDuhF01+VNVcPTB+8oV6XQU9tyOeQUyZ3/WISY3NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7d:4f:82:dc:bc:85:4c:83:e8:68:c1:5c:a2:c5:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Validity
Not Before: Apr 18 20:00:48 2025 GMT
Not After : Apr 19 20:00:48 2025 GMT
Subject: CN=264019da4a8df42aa988969f6cd141a404f51b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3e:51:70:c5:8f:7e:e6:20:2e:78:70:37:04:
db:35:d4:b5:1d:3f:dc:a5:c3:ee:d0:19:00:e5:c8:
41:3d:0a:26:00:ff:aa:3a:cf:b0:01:24:23:c4:3f:
ba:45:b7:29:89:49:55:f2:73:0b:ed:0a:4d:11:61:
de:6f:84:aa:51:bf:10:2f:48:52:d7:cb:d8:ab:45:
67:af:ef:31:93:53:16:5e:4f:89:55:d5:83:aa:20:
1e:af:a1:89:c8:6b:1a:68:60:e6:92:18:10:ff:79:
63:4f:e5:43:2e:f1:7f:33:0f:9a:13:ea:f4:63:c9:
ad:38:28:a6:a2:2b:7a:a6:26:4b:58:97:49:a6:75:
e8:39:53:77:b1:0b:2a:b5:5a:84:48:09:03:57:01:
9a:46:a3:c4:bc:e9:88:44:c3:c8:9c:10:4e:14:8b:
23:6a:ec:60:0f:92:1f:56:d3:e6:51:70:03:38:f0:
2a:3e:57:e3:60:67:03:68:db:87:a0:1b:3e:a1:7e:
91:4c:88:f9:4f:f2:d1:a5:b5:ac:b0:5e:13:51:cf:
c0:90:02:a5:e1:74:ad:d1:40:dd:c9:d0:b2:84:1d:
54:99:d4:52:74:30:7c:29:33:0a:c1:c6:52:72:b8:
60:e9:92:f1:2f:d3:aa:d2:3d:31:39:0f:03:ab:e5:
9a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:40:19:DA:4A:8D:F4:2A:A9:88:96:9F:6C:D1:41:A4:04:F5:1B:1D
X509v3 Authority Key Identifier:
keyid:B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:2c:43:fb:24:d5:ad:2b:d0:f7:c0:6f:55:d1:88:b5:12:b8:
94:4a:f3:bd:1b:32:df:59:28:22:6b:23:31:fc:cc:3b:c6:0e:
1c:a5:f6:99:19:5d:fd:c5:bf:ff:d1:92:7e:90:c5:ac:2e:28:
96:86:13:be:f9:13:62:63:04:f3:74:f9:ad:9d:d7:f9:f4:60:
60:3e:e6:f8:db:39:46:2a:bc:d8:95:ab:24:f6:93:86:a1:5d:
2f:e7:ad:79:b6:90:24:78:a1:12:f1:1a:a0:0c:e8:89:60:d0:
9a:d8:15:d0:a5:5b:cc:90:7f:03:94:d9:b5:c8:e9:64:19:50:
ae:a1:7d:3e:52:d1:22:8e:f8:cc:d4:d7:e0:7d:e1:e8:dd:38:
70:02:cc:cc:7e:9f:15:af:14:4f:bb:73:6e:1c:de:15:e3:62:
56:95:53:dc:98:f3:ce:7d:8f:38:73:72:27:61:f1:18:1f:bc:
24:72:28:c6:df:25:c6:58:3b:9b:e2:32:8f:8a:d3:e0:0a:b0:
40:d0:4e:70:12:52:79:20:89:17:e7:d0:8f:cd:63:0c:39:4f:
92:c5:c7:49:ce:03:6f:91:9c:e1:4d:c5:2e:b7:17:04:d6:61:
fe:56:08:09:79:c9:ae:59:d0:3f:bd:5f:5c:05:fa:44:e9:75:
f6:fc:82:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZKfU+C3LyFTIPoaMFcosVwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MjMyZDE5ZGQ4MWQ0NWMyNTkyM2FlYjRkOWE5Njg1ODc5
YWVmYTYwHhcNMjUwNDE4MjAwMDQ4WhcNMjUwNDE5MjAwMDQ4WjAzMTEwLwYDVQQD
EygyNjQwMTlkYTRhOGRmNDJhYTk4ODk2OWY2Y2QxNDFhNDA0ZjUxYjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT5RcMWPfuYgLnhwNwTbNdS1HT/c
pcPu0BkA5chBPQomAP+qOs+wASQjxD+6RbcpiUlV8nML7QpNEWHeb4SqUb8QL0hS
18vYq0Vnr+8xk1MWXk+JVdWDqiAer6GJyGsaaGDmkhgQ/3ljT+VDLvF/Mw+aE+r0
Y8mtOCimoit6piZLWJdJpnXoOVN3sQsqtVqESAkDVwGaRqPEvOmIRMPInBBOFIsj
auxgD5IfVtPmUXADOPAqPlfjYGcDaNuHoBs+oX6RTIj5T/LRpbWssF4TUc/AkAKl
4XSt0UDdydCyhB1UmdRSdDB8KTMKwcZScrhg6ZLxL9Oq0j0xOQ8Dq+Wa2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZAGdpKjfQqqYiWn2zRQaQE9RsdMB8GA1UdIwQY
MBaAFLgjLRndgdRcJZI6602aloWHmu+mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUNNdEdkMkIxRndsa2pyclRacVdoWWVhNzZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8zZmE3MTgtOTBjNS00MjZjLWI4NWYt
MWRmMDllNzAxNDM0LzEvdUNNdEdkMkIxRndsa2pyclRacVdoWWVhNzZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni8zZmE3MTgtOTBjNS00MjZjLWI4NWYtMWRmMDllNzAxNDM0
LzEvdUNNdEdkMkIxRndsa2pyclRacVdoWWVhNzZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqSxD+yTV
rSvQ98BvVdGItRK4lErzvRsy31koImsjMfzMO8YOHKX2mRld/cW//9GSfpDFrC4o
loYTvvkTYmME83T5rZ3X+fRgYD7m+Ns5Riq82JWrJPaThqFdL+etebaQJHihEvEa
oAzoiWDQmtgV0KVbzJB/A5TZtcjpZBlQrqF9PlLRIo74zNTX4H3h6N04cALMzH6f
Fa8UT7tzbhzeFeNiVpVT3Jjzzn2POHNyJ2HxGB+8JHIoxt8lxlg7m+Iyj4rT4Aqw
QNBOcBJSeSCJF+fQj81jDDlPksXHSc4Db5Gc4U3FLrcXBNZh/lYICXnJrlnQP71f
XAX6ROl19vyCoQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:20:25 2025 by rpki-client