Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
File: ucNjOsv2PC7LECBbm5JYCrtOuH4.mft (raw, json)
Hash identifier: VOLdehp2xDatfS6LAnzh3+u4fVTc7KGoFFNlGbvNWE4=
Subject key identifier: A3:CC:A6:EA:78:68:87:CE:27:84:C3:4B:69:BE:A3:28:50:E3:35:8B
Authority key identifier: B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
Certificate issuer: /CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Certificate serial: 01958C96DC7B0E4F2EE5C87FA3FB1E554FEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
Manifest number: 0D0B
Signing time: Wed 12 Mar 2025 23:00:51 +0000
Manifest this update: Wed 12 Mar 2025 23:00:51 +0000
Manifest next update: Thu 13 Mar 2025 23:00:51 +0000
Files and hashes: 1: SVqYet6gqafuP93fvR-cXcD_lZE.roa (hash: W9VR4dYgi4TiBeDzcyIekcyHyO1LO5e+JjlzGp7Zlac=)
2: jJL_UCt1xKDnehMaxOeWEPnn1w4.roa (hash: OUjyb/sGoJvyBaOSinwB5CR/YZjUj96cHrntVj6IrpM=)
3: ucNjOsv2PC7LECBbm5JYCrtOuH4.crl (hash: V/YgntBEDTmV70fip6O6wTx2TbK0+aTDCc4M6JmOl2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:96:dc:7b:0e:4f:2e:e5:c8:7f:a3:fb:1e:55:4f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Validity
Not Before: Mar 12 23:00:51 2025 GMT
Not After : Mar 13 23:00:51 2025 GMT
Subject: CN=a3cca6ea786887ce2784c34b69bea32850e3358b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1d:14:e7:80:1a:9c:35:2d:cd:73:db:92:7b:
4c:72:9a:bd:30:e3:27:b5:1a:d7:ec:07:18:37:54:
88:a7:55:2a:51:3e:01:eb:1b:6c:70:d7:11:05:eb:
e8:c9:05:76:d3:a9:4c:98:4b:cd:00:fa:8a:c9:97:
ff:53:42:0f:98:3d:a7:0e:ab:f9:1a:29:dc:78:a7:
51:29:8a:90:6d:8a:27:a4:bf:8f:b4:53:eb:1e:19:
76:e8:c5:fa:a9:59:fd:b5:04:81:1a:d8:fd:d8:14:
c8:4d:3d:1e:0a:1d:f6:d1:e8:01:c5:5c:f6:70:21:
37:1e:5d:d7:13:78:74:64:76:41:c9:ab:c6:26:29:
e4:3f:88:ad:9d:0e:c7:2e:c5:1f:44:0a:c9:32:33:
71:1d:88:3e:7a:68:0c:a0:3b:2f:ae:65:d1:de:54:
80:b3:14:0a:8c:cf:1c:63:5a:d5:03:82:13:87:13:
de:93:40:bc:5f:97:93:0b:6d:49:40:49:cd:51:db:
1b:37:94:bc:e8:36:74:40:a7:a7:8b:27:91:14:23:
2c:fe:a9:fe:0a:ce:07:c4:a0:23:bf:7f:38:d1:55:
48:ce:01:81:bb:98:a0:96:6c:b5:56:36:79:91:c5:
5a:97:02:1d:05:14:5e:e0:e5:41:bc:32:cc:03:89:
a1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CC:A6:EA:78:68:87:CE:27:84:C3:4B:69:BE:A3:28:50:E3:35:8B
X509v3 Authority Key Identifier:
keyid:B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f2:9e:1f:79:a4:62:de:1a:56:5e:96:f7:31:1b:b7:c5:ee:
82:3f:e2:74:56:2f:c6:66:11:bf:42:b9:12:0c:93:d1:c3:7b:
bf:42:d3:4b:35:61:36:cc:95:8a:5b:72:0f:47:f7:01:a7:7a:
22:45:c5:3f:3b:9e:9f:1a:f4:10:88:cd:fc:ae:e2:e8:eb:94:
23:e9:2d:ef:1c:3e:10:c9:63:66:52:12:df:25:6d:21:0b:f7:
40:6d:8b:61:d4:3a:c9:22:f6:df:63:57:95:a3:32:be:14:b6:
c5:fd:40:7b:06:b7:25:e5:cc:5a:6b:86:49:91:4c:c8:19:4d:
89:88:e3:a0:81:06:d7:1d:5f:60:a0:34:21:b0:45:ca:97:5a:
cd:26:ec:55:bc:dc:d3:03:9a:e1:85:ab:1e:b2:81:da:b9:23:
33:d8:01:40:79:4e:e6:10:81:24:0f:d8:24:a0:91:df:ce:6c:
ef:83:61:87:a3:7d:f4:7b:6e:a0:d2:ee:62:c0:52:fa:8f:1d:
a3:a3:ff:b0:56:15:3c:0c:70:ae:04:9c:8d:3b:b0:7c:d5:47:
ca:4b:c3:17:63:bc:fb:bf:20:da:f5:d4:89:92:63:67:88:93:
c7:2a:00:a0:74:0a:6a:87:83:74:c3:dd:6a:aa:14:25:c9:74:
bf:b6:0c:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMltx7Dk8u5ch/o/seVU/qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YzM2MzNhY2JmNjNjMmVjYjEwMjA1YjliOTI1ODBhYmI0
ZWI4N2UwHhcNMjUwMzEyMjMwMDUxWhcNMjUwMzEzMjMwMDUxWjAzMTEwLwYDVQQD
EyhhM2NjYTZlYTc4Njg4N2NlMjc4NGMzNGI2OWJlYTMyODUwZTMzNThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx0U54AanDUtzXPbkntMcpq9MOMn
tRrX7AcYN1SIp1UqUT4B6xtscNcRBevoyQV206lMmEvNAPqKyZf/U0IPmD2nDqv5
GinceKdRKYqQbYonpL+PtFPrHhl26MX6qVn9tQSBGtj92BTITT0eCh320egBxVz2
cCE3Hl3XE3h0ZHZByavGJinkP4itnQ7HLsUfRArJMjNxHYg+emgMoDsvrmXR3lSA
sxQKjM8cY1rVA4IThxPek0C8X5eTC21JQEnNUdsbN5S86DZ0QKeniyeRFCMs/qn+
Cs4HxKAjv3840VVIzgGBu5iglmy1VjZ5kcValwIdBRRe4OVBvDLMA4mh7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPMpup4aIfOJ4TDS2m+oyhQ4zWLMB8GA1UdIwQY
MBaAFLnDYzrL9jwuyxAgW5uSWAq7Trh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWNOak9zdjJQQzdMRUNCYm01SllDcnRPdUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8wY2QyZjMtMGY2YS00ZWFhLTk4NDUt
OTllY2E1NjUxMDIzLzEvdWNOak9zdjJQQzdMRUNCYm01SllDcnRPdUg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8wY2QyZjMtMGY2YS00ZWFhLTk4NDUtOTllY2E1NjUxMDIz
LzEvdWNOak9zdjJQQzdMRUNCYm01SllDcnRPdUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAavKeH3mk
Yt4aVl6W9zEbt8Xugj/idFYvxmYRv0K5EgyT0cN7v0LTSzVhNsyViltyD0f3Aad6
IkXFPzuenxr0EIjN/K7i6OuUI+kt7xw+EMljZlIS3yVtIQv3QG2LYdQ6ySL232NX
laMyvhS2xf1Aewa3JeXMWmuGSZFMyBlNiYjjoIEG1x1fYKA0IbBFypdazSbsVbzc
0wOa4YWrHrKB2rkjM9gBQHlO5hCBJA/YJKCR385s74Nhh6N99HtuoNLuYsBS+o8d
o6P/sFYVPAxwrgScjTuwfNVHykvDF2O8+78g2vXUiZJjZ4iTxyoAoHQKaoeDdMPd
aqoUJcl0v7YMEw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:50:34 2025 by rpki-client