Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
File: UxR_m8-R0qz49DW6ULgFBUXNH48.mft (raw, json)
Hash identifier: szdBaTDDevXrNgWuQFa12G5jhJvsQETOMudosaxYhfM=
Subject key identifier: E3:00:18:41:FA:9C:3A:19:74:BF:66:57:E3:2A:BA:91:58:3C:F4:A1
Authority key identifier: 53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F
Certificate issuer: /CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f
Certificate serial: 0194C3F57558068383BC4BF6B675C179F238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
Manifest number: 3D
Signing time: Sun 02 Feb 2025 00:00:30 +0000
Manifest this update: Sun 02 Feb 2025 00:00:30 +0000
Manifest next update: Mon 03 Feb 2025 00:00:30 +0000
Files and hashes: 1: 6PsTHYIIX51kdSojaJW-z28646w.roa (hash: e4+ExkBHfbgESlNinbHszCcxcrVC7TRY4A/vynG1b6A=)
2: UxR_m8-R0qz49DW6ULgFBUXNH48.crl (hash: DaV5jRAX6caw/Qz13Xgqtb5mAIJlR6itp4al44M4o4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:75:58:06:83:83:bc:4b:f6:b6:75:c1:79:f2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f
Validity
Not Before: Feb 2 00:00:30 2025 GMT
Not After : Feb 3 00:00:30 2025 GMT
Subject: CN=e3001841fa9c3a1974bf6657e32aba91583cf4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:38:58:8a:1b:4c:d6:0c:e8:9d:d1:1a:a4:0f:
03:48:91:19:5a:d6:3f:1a:6a:c5:5a:b4:bc:37:fd:
12:f7:dc:de:04:49:95:0a:34:a6:d9:40:8b:5b:34:
c1:b1:2d:13:09:57:f2:70:64:b5:f1:3d:5c:93:f6:
d3:a4:b2:59:c2:00:19:ec:d2:6f:7b:86:50:a2:30:
ef:dc:bf:70:14:9e:95:8f:fa:21:f3:c1:8a:ec:69:
5b:91:b8:b3:13:4b:e6:cf:f6:bb:ac:93:5c:3b:68:
46:73:56:af:ae:f6:db:73:38:fc:61:af:2f:6c:23:
03:b8:5e:d6:1c:31:8b:6c:97:d4:47:b3:61:11:5f:
56:6e:2f:8d:01:0c:74:80:c2:01:6c:ac:5e:ac:96:
d3:d9:a5:3a:2f:e3:1e:8d:c5:e3:0d:b5:bb:3e:82:
44:ff:61:e7:3b:75:1b:75:7e:6c:55:fd:d7:35:96:
7b:63:5f:1e:dc:41:b5:b2:53:43:e7:03:81:16:ae:
5f:53:1e:05:a7:7e:01:11:b5:a1:11:83:32:8d:ab:
fa:0b:54:10:78:1f:40:33:31:10:d2:94:1c:a4:df:
fb:31:dc:c2:6d:7a:21:a4:86:69:e8:45:52:a4:64:
19:b4:b8:93:e2:77:f3:e4:81:17:b6:14:df:97:4a:
45:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:00:18:41:FA:9C:3A:19:74:BF:66:57:E3:2A:BA:91:58:3C:F4:A1
X509v3 Authority Key Identifier:
keyid:53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d7:6d:dd:31:eb:14:07:34:df:38:1f:ea:32:3d:1f:ac:31:
c7:6d:1e:5b:24:29:46:92:03:43:9c:b4:12:d5:92:af:bc:3d:
ae:75:da:ac:b4:9a:0e:fa:cf:ed:be:96:5d:ca:f7:b2:52:9b:
14:4f:03:2b:90:c8:52:a3:31:9e:ef:6f:84:6e:c8:ea:0b:82:
c9:f5:31:40:ec:69:84:a1:01:10:4f:95:6e:bb:1a:9c:7e:48:
a3:e8:73:e7:17:32:93:78:0b:14:f1:b5:2a:4e:b8:7b:44:a8:
f5:a5:2b:36:29:61:ae:f3:da:49:1b:69:df:9d:11:f8:f3:e2:
7d:aa:56:fc:3e:24:f7:a2:09:a3:00:64:7f:e5:1b:ea:26:7c:
e7:9e:fe:b0:d7:2d:b5:40:32:51:5b:1d:ba:24:4c:c0:1c:eb:
99:2c:22:10:98:b7:f2:6e:71:c6:76:3a:0e:e7:97:46:2a:d9:
20:18:23:1a:b3:74:ec:c5:dc:ea:f5:50:2a:56:92:96:a5:d7:
3d:6d:8f:6d:e9:bf:98:2f:f4:c8:73:2b:92:dd:50:5f:af:75:
f7:b3:f3:1c:e8:66:4d:46:74:e2:37:8d:45:23:07:de:b8:04:
d5:eb:4d:ba:2c:f9:41:68:8e:fc:66:5e:75:0a:b4:a6:ef:ab:
9c:17:cf:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTD9XVYBoODvEv2tnXBefI4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMTQ3ZjliY2Y5MWQyYWNmOGY0MzViYTUwYjgwNTA1NDVj
ZDFmOGYwHhcNMjUwMjAyMDAwMDMwWhcNMjUwMjAzMDAwMDMwWjAzMTEwLwYDVQQD
EyhlMzAwMTg0MWZhOWMzYTE5NzRiZjY2NTdlMzJhYmE5MTU4M2NmNGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszhYihtM1gzondEapA8DSJEZWtY/
GmrFWrS8N/0S99zeBEmVCjSm2UCLWzTBsS0TCVfycGS18T1ck/bTpLJZwgAZ7NJv
e4ZQojDv3L9wFJ6Vj/oh88GK7GlbkbizE0vmz/a7rJNcO2hGc1avrvbbczj8Ya8v
bCMDuF7WHDGLbJfUR7NhEV9Wbi+NAQx0gMIBbKxerJbT2aU6L+MejcXjDbW7PoJE
/2HnO3UbdX5sVf3XNZZ7Y18e3EG1slND5wOBFq5fUx4Fp34BEbWhEYMyjav6C1QQ
eB9AMzEQ0pQcpN/7MdzCbXohpIZp6EVSpGQZtLiT4nfz5IEXthTfl0pFgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOMAGEH6nDoZdL9mV+MqupFYPPShMB8GA1UdIwQY
MBaAFFMUf5vPkdKs+PQ1ulC4BQVFzR+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXhSX204LVIwcXo0OURXNlVMZ0ZCVVhOSDQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iNDU3YmItYjVjNy00YjU0LTg5NmYt
ZWIwMDkyYTk0ZmNhLzEvVXhSX204LVIwcXo0OURXNlVMZ0ZCVVhOSDQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9iNDU3YmItYjVjNy00YjU0LTg5NmYtZWIwMDkyYTk0ZmNh
LzEvVXhSX204LVIwcXo0OURXNlVMZ0ZCVVhOSDQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ9dt3THr
FAc03zgf6jI9H6wxx20eWyQpRpIDQ5y0EtWSr7w9rnXarLSaDvrP7b6WXcr3slKb
FE8DK5DIUqMxnu9vhG7I6guCyfUxQOxphKEBEE+VbrsanH5Io+hz5xcyk3gLFPG1
Kk64e0So9aUrNilhrvPaSRtp350R+PPifapW/D4k96IJowBkf+Ub6iZ8557+sNct
tUAyUVsduiRMwBzrmSwiEJi38m5xxnY6DueXRirZIBgjGrN07MXc6vVQKlaSlqXX
PW2Pbem/mC/0yHMrkt1QX69197PzHOhmTUZ04jeNRSMH3rgE1etNuiz5QWiO/GZe
dQq0pu+rnBfPHA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:05:54 2025 by rpki-client