Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
File: Uez5urycprrpCFzikvscLMGNNE8.mft (raw, json)
Hash identifier: fPR4lwPx9OllBjsW3tFjhUSgACroSrAC6UVy0A/UM2g=
Subject key identifier: 9E:3E:3F:FB:BD:7C:44:C2:00:98:FE:36:77:5A:92:B6:95:28:1B:AA
Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
Certificate issuer: /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Certificate serial: 01974A7AE2F7AB1B9B7724117ADF113048DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
Manifest number: 158A
Signing time: Sat 07 Jun 2025 13:00:56 +0000
Manifest this update: Sat 07 Jun 2025 13:00:56 +0000
Manifest next update: Sun 08 Jun 2025 13:00:56 +0000
Files and hashes: 1: Uez5urycprrpCFzikvscLMGNNE8.crl (hash: INtKFp9yBHegBH6MgQ2UWsfhuex4DSgc3jvgCcOKfYU=)
2: j2k6ZwwCoYdbRXccWL_N8jGmvQI.roa (hash: w7ebwT3KJy3faWUvy2fWfZ0lAeoGXL67yLrINDXPUpk=)
3: xxWFbF3tgwbzUuCNrDoHcp9Qoi0.roa (hash: nF/SPLRIzHvrKRFZBuGbHBJ7AWT0/rnH1yU0BqremkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:e2:f7:ab:1b:9b:77:24:11:7a:df:11:30:48:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Validity
Not Before: Jun 7 13:00:56 2025 GMT
Not After : Jun 8 13:00:56 2025 GMT
Subject: CN=9e3e3ffbbd7c44c20098fe36775a92b695281baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:09:c5:ca:65:14:4b:97:b5:cd:2f:97:5f:9a:
ac:36:e6:5f:3d:37:52:58:77:ef:b2:81:e9:f8:16:
eb:b9:25:6b:3e:4e:19:50:06:ab:88:3d:a4:b5:34:
a5:31:c8:1e:76:bb:e0:f7:ed:42:89:64:2a:20:c6:
63:07:ea:6d:be:8c:b4:c0:40:ee:95:90:e4:f9:9d:
04:50:25:61:a3:9d:d3:11:a9:ea:1a:c2:be:39:cc:
95:ef:d4:48:db:67:88:30:eb:ef:fe:ae:e5:c4:53:
f8:5f:10:11:05:02:9b:e6:7a:ff:5a:46:df:b5:4f:
50:c1:73:f9:e6:41:42:09:82:c4:2b:67:1b:cb:25:
c5:d1:4d:d7:2c:ec:84:31:5f:d1:34:b4:2b:85:85:
d0:b0:cd:d6:2b:88:a0:53:42:3c:97:75:73:fe:a4:
9a:23:85:1b:13:43:49:5a:9b:94:67:ce:88:ff:67:
ea:60:d8:82:e3:20:bb:f6:43:b7:cd:93:54:ac:25:
31:32:43:b9:f1:b4:67:b8:92:d1:71:67:be:05:7c:
6c:3f:87:99:df:95:26:7b:72:1c:7e:6f:6c:07:1f:
0c:14:81:e3:8c:1d:c5:4d:b8:be:69:73:39:95:82:
f4:24:7f:16:a2:67:f9:fe:24:c0:56:95:2e:f8:6d:
14:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3E:3F:FB:BD:7C:44:C2:00:98:FE:36:77:5A:92:B6:95:28:1B:AA
X509v3 Authority Key Identifier:
keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e4:ed:94:f6:17:52:5b:9c:ec:0d:0d:37:88:f7:55:4c:0e:
db:42:25:a8:5e:c1:6a:f3:ad:a2:87:12:3a:7b:75:3a:54:70:
6a:de:c2:c3:49:1e:65:09:8a:91:6f:c0:f2:f2:cc:6c:24:10:
63:8f:88:39:95:ad:69:bb:2a:fa:c2:c5:e2:5b:da:28:1b:c6:
59:41:e2:e0:e4:88:8d:5c:9e:c6:33:87:ee:f3:a0:31:95:d4:
bc:27:b1:b0:61:c3:2b:0b:15:c4:bd:1b:43:73:cb:44:2c:86:
26:c8:f5:d8:da:7f:2c:d1:04:e4:36:8d:65:02:4d:22:17:07:
c6:d4:a7:57:20:c2:35:22:f4:63:e5:b6:13:80:cf:dc:23:cb:
cc:94:5b:93:9c:c6:45:fe:25:f8:8b:d0:73:45:01:08:e6:d0:
08:22:60:fd:ad:2f:a1:d0:fc:5a:fa:6f:9e:84:39:71:39:6e:
1f:b4:d0:a6:4c:f0:6f:7c:e7:b6:83:c0:7d:f5:a9:a5:28:d5:
03:6c:46:2f:1d:e3:d3:43:7e:ed:be:c8:0b:a7:42:ca:a7:f6:
10:11:6f:15:ea:f5:9d:fd:82:7e:07:c7:b8:c9:a9:b2:09:c6:
66:18:e1:5c:65:b8:68:7c:19:5e:71:bd:35:17:78:10:f7:fc:
ac:db:dc:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKeuL3qxubdyQRet8RMEjeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZWNmOWJhYmM5Y2E2YmFlOTA4NWNlMjkyZmIxYzJjYzE4
ZDM0NGYwHhcNMjUwNjA3MTMwMDU2WhcNMjUwNjA4MTMwMDU2WjAzMTEwLwYDVQQD
Eyg5ZTNlM2ZmYmJkN2M0NGMyMDA5OGZlMzY3NzVhOTJiNjk1MjgxYmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgnFymUUS5e1zS+XX5qsNuZfPTdS
WHfvsoHp+BbruSVrPk4ZUAariD2ktTSlMcgedrvg9+1CiWQqIMZjB+ptvoy0wEDu
lZDk+Z0EUCVho53TEanqGsK+OcyV79RI22eIMOvv/q7lxFP4XxARBQKb5nr/Wkbf
tU9QwXP55kFCCYLEK2cbyyXF0U3XLOyEMV/RNLQrhYXQsM3WK4igU0I8l3Vz/qSa
I4UbE0NJWpuUZ86I/2fqYNiC4yC79kO3zZNUrCUxMkO58bRnuJLRcWe+BXxsP4eZ
35Ume3Icfm9sBx8MFIHjjB3FTbi+aXM5lYL0JH8Womf5/iTAVpUu+G0U2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4+P/u9fETCAJj+NndakraVKBuqMB8GA1UdIwQY
MBaAFFHs+bq8nKa66Qhc4pL7HCzBjTRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWV6NXVyeWNwcnJwQ0Z6aWt2c2NMTUdOTkU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9mYjA0YzgtNzA1Ny00NWI3LWEzNGMt
ZGNmYzZhOWUwZGM3LzEvVWV6NXVyeWNwcnJwQ0Z6aWt2c2NMTUdOTkU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9mYjA0YzgtNzA1Ny00NWI3LWEzNGMtZGNmYzZhOWUwZGM3
LzEvVWV6NXVyeWNwcnJwQ0Z6aWt2c2NMTUdOTkU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMuTtlPYX
Uluc7A0NN4j3VUwO20IlqF7BavOtoocSOnt1OlRwat7Cw0keZQmKkW/A8vLMbCQQ
Y4+IOZWtabsq+sLF4lvaKBvGWUHi4OSIjVyexjOH7vOgMZXUvCexsGHDKwsVxL0b
Q3PLRCyGJsj12Np/LNEE5DaNZQJNIhcHxtSnVyDCNSL0Y+W2E4DP3CPLzJRbk5zG
Rf4l+IvQc0UBCObQCCJg/a0vodD8WvpvnoQ5cTluH7TQpkzwb3zntoPAffWppSjV
A2xGLx3j00N+7b7IC6dCyqf2EBFvFer1nf2CfgfHuMmpsgnGZhjhXGW4aHwZXnG9
NRd4EPf8rNvcmQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:09:42 2025 by rpki-client