Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
File: uUTKLZktd4WAC91VJNPhE4PZ8d4.mft (raw, json)
Hash identifier: aLYraZ4ERBfga2q1O6Dx3mjHNHHqBeIB2Y+Ot8jl3aw=
Subject key identifier: 5E:9E:E4:FA:F1:EF:B3:93:15:F5:04:2B:EB:BC:C5:DE:BD:F3:10:5B
Authority key identifier: B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE
Certificate issuer: /CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
Certificate serial: 0196545C3D15A316CFC2512B0A631DCF36B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
Manifest number: 1132
Signing time: Sun 20 Apr 2025 18:00:53 +0000
Manifest this update: Sun 20 Apr 2025 18:00:53 +0000
Manifest next update: Mon 21 Apr 2025 18:00:53 +0000
Files and hashes: 1: FWSXCF4qgT0faY_P6PSKnBV7G2M.roa (hash: tFzm3MTdpBb4fBz33ckdkrZ9Nss77FL8hdTAaxqUFls=)
2: uUTKLZktd4WAC91VJNPhE4PZ8d4.crl (hash: MNvnbeCCICl+nqGI7Z+YTQF2aYV+KeSrSfoZ6OfXExs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:3d:15:a3:16:cf:c2:51:2b:0a:63:1d:cf:36:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
Validity
Not Before: Apr 20 18:00:53 2025 GMT
Not After : Apr 21 18:00:53 2025 GMT
Subject: CN=5e9ee4faf1efb39315f5042bebbcc5debdf3105b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:40:1e:a7:7b:6b:fd:76:90:cf:9c:d6:9b:1f:
c0:f0:74:72:c5:7b:b8:1d:b5:9e:08:26:ea:6b:6a:
5e:5b:ef:02:f4:69:7a:2e:fd:d5:3e:d1:b1:67:92:
31:b7:30:4f:6d:e0:01:67:f3:8c:ea:9e:41:b6:3a:
a5:66:54:d2:78:e4:97:62:cf:ae:25:bd:b1:de:5b:
73:f3:c2:6b:4b:03:e1:f0:a8:33:24:2b:c9:fa:94:
cd:90:b3:c5:d5:a5:46:62:e5:36:05:35:a5:de:a1:
c0:f3:c8:d4:0a:c1:f4:d3:32:c5:24:af:b0:63:fd:
77:f5:a0:ee:2c:73:56:c1:18:80:76:99:04:f2:cf:
2d:06:ec:06:e8:61:03:49:72:9a:1a:e9:8e:2e:93:
ff:e3:29:88:85:ca:78:1b:d8:a6:4b:be:38:aa:0e:
d5:09:3c:76:22:16:9b:78:c4:c9:45:40:84:a7:df:
20:be:98:21:a5:99:c0:ea:96:8d:cf:86:45:34:1d:
53:83:d1:4f:0d:c2:e3:86:52:cd:f6:d1:c9:55:51:
ce:74:d5:4b:63:d7:1f:5e:58:4f:f6:9e:31:72:b7:
9d:f4:4d:fd:f8:c7:30:3f:cd:5d:b3:2b:2e:84:59:
82:36:ec:3c:af:66:5d:d0:c8:87:7c:8e:39:01:3c:
f9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9E:E4:FA:F1:EF:B3:93:15:F5:04:2B:EB:BC:C5:DE:BD:F3:10:5B
X509v3 Authority Key Identifier:
keyid:B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:75:b6:1f:d3:3a:78:ce:60:e8:71:2a:98:20:6e:49:3a:f2:
a1:cb:ff:22:7a:8b:e6:16:57:e2:43:2e:f2:94:98:7d:85:d0:
8b:eb:18:8c:3e:76:0e:c9:4b:54:49:41:13:58:e0:f9:aa:f3:
0a:15:fe:d5:81:82:a5:ec:a8:ea:76:4d:9d:a6:6d:07:ea:17:
19:23:59:39:ed:0c:35:23:ae:96:b3:6f:b6:73:43:22:db:51:
b8:e3:b0:41:96:59:c7:da:26:74:8c:e3:a3:88:5b:00:4a:6f:
9f:57:e3:af:9d:7e:84:99:37:e1:87:14:3c:f0:84:35:2b:9d:
46:c2:ee:3e:cf:65:0a:3c:05:aa:98:52:f1:05:ca:f1:e7:1d:
67:e2:f4:76:47:6d:a5:0a:09:4f:58:a2:a8:32:28:21:59:1c:
84:3c:c7:7b:00:e3:1c:3b:df:73:90:25:0c:5e:f5:87:90:35:
76:24:b2:30:ab:5b:fe:d5:54:f5:4a:23:d3:ee:87:45:6e:49:
47:a5:ff:5b:b0:b7:b1:f7:c2:6a:19:7c:3b:5d:4c:e7:7e:a1:
7f:a9:4a:03:66:20:f3:2a:63:7d:e2:17:b8:85:17:f6:fa:70:
02:2d:dc:80:41:8b:b6:43:17:cc:e8:e4:06:c2:18:c5:8b:38:
55:ac:39:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUXD0VoxbPwlErCmMdzza0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NDRjYTJkOTkyZDc3ODU4MDBiZGQ1NTI0ZDNlMTEzODNk
OWYxZGUwHhcNMjUwNDIwMTgwMDUzWhcNMjUwNDIxMTgwMDUzWjAzMTEwLwYDVQQD
Eyg1ZTllZTRmYWYxZWZiMzkzMTVmNTA0MmJlYmJjYzVkZWJkZjMxMDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkAep3tr/XaQz5zWmx/A8HRyxXu4
HbWeCCbqa2peW+8C9Gl6Lv3VPtGxZ5IxtzBPbeABZ/OM6p5BtjqlZlTSeOSXYs+u
Jb2x3ltz88JrSwPh8KgzJCvJ+pTNkLPF1aVGYuU2BTWl3qHA88jUCsH00zLFJK+w
Y/139aDuLHNWwRiAdpkE8s8tBuwG6GEDSXKaGumOLpP/4ymIhcp4G9imS744qg7V
CTx2IhabeMTJRUCEp98gvpghpZnA6paNz4ZFNB1Tg9FPDcLjhlLN9tHJVVHOdNVL
Y9cfXlhP9p4xcred9E39+McwP81dsysuhFmCNuw8r2Zd0MiHfI45ATz5AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6e5Prx77OTFfUEK+u8xd698xBbMB8GA1UdIwQY
MBaAFLlEyi2ZLXeFgAvdVSTT4ROD2fHeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVVUS0xaa3RkNFdBQzkxVkpOUGhFNFBaOGQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iMzRhMzMtMDYyYi00YjcwLWJhNTEt
MDJhMTJiODYxODBkLzEvdVVUS0xaa3RkNFdBQzkxVkpOUGhFNFBaOGQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9iMzRhMzMtMDYyYi00YjcwLWJhNTEtMDJhMTJiODYxODBk
LzEvdVVUS0xaa3RkNFdBQzkxVkpOUGhFNFBaOGQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwHW2H9M6
eM5g6HEqmCBuSTryocv/InqL5hZX4kMu8pSYfYXQi+sYjD52DslLVElBE1jg+arz
ChX+1YGCpeyo6nZNnaZtB+oXGSNZOe0MNSOulrNvtnNDIttRuOOwQZZZx9omdIzj
o4hbAEpvn1fjr51+hJk34YcUPPCENSudRsLuPs9lCjwFqphS8QXK8ecdZ+L0dkdt
pQoJT1iiqDIoIVkchDzHewDjHDvfc5AlDF71h5A1diSyMKtb/tVU9Uoj0+6HRW5J
R6X/W7C3sffCahl8O11M536hf6lKA2Yg8ypjfeIXuIUX9vpwAi3cgEGLtkMXzOjk
BsIYxYs4Vaw5iw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:30:25 2025 by rpki-client