Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
File: UEUj-IEevlqjWYURpI87rwABqOg.mft (raw, json)
Hash identifier: QfHscSbaz3H9Is6EUXSFUFt+fl0MtbEdZJS/rYTDnko=
Subject key identifier: 58:35:AB:C0:D9:C4:3F:AB:9D:92:46:8C:BD:4B:88:C9:46:AD:CD:74
Authority key identifier: 50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8
Certificate issuer: /CN=504523f8811ebe5aa3598511a48f3baf0001a8e8
Certificate serial: 01962A84BA25E0E6D2AF888D77507868272F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
Manifest number: 0F87
Signing time: Sat 12 Apr 2025 15:01:03 +0000
Manifest this update: Sat 12 Apr 2025 15:01:03 +0000
Manifest next update: Sun 13 Apr 2025 15:01:03 +0000
Files and hashes: 1: UEUj-IEevlqjWYURpI87rwABqOg.crl (hash: G3G6Ak5pbs/yysbzz7g2KxquSweUn89pHaVAgo+CcQY=)
2: ZZhPPwqLkt0i32K3myspkarpm7w.roa (hash: I/Su6LLFQ+Dm0Pej9IN4WakV0FZtHq7XZa94FgMwfR8=)
3: _U1q7kl-Gvc0JP4VZVgWjqcMCOs.roa (hash: 3X8IGbj3QMA8V3ptFiyp/tKTSPuKRQ3qYJfTsAQKmxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:84:ba:25:e0:e6:d2:af:88:8d:77:50:78:68:27:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=504523f8811ebe5aa3598511a48f3baf0001a8e8
Validity
Not Before: Apr 12 15:01:03 2025 GMT
Not After : Apr 13 15:01:03 2025 GMT
Subject: CN=5835abc0d9c43fab9d92468cbd4b88c946adcd74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c9:c2:db:1f:6e:8a:ff:f7:9e:47:f5:40:38:
09:ed:23:80:14:46:0f:b9:f5:5f:b8:8e:15:a2:23:
cb:e7:6e:3a:bf:d1:53:52:0e:04:62:e5:2e:6c:da:
3b:f2:cc:c8:28:4c:94:4e:d4:be:30:82:5a:eb:e3:
d0:32:21:6a:c9:dc:b1:32:30:11:06:28:a7:7b:bf:
74:13:70:b2:a8:a9:9c:ef:95:6b:5d:df:d1:c0:2f:
31:e0:62:a2:2d:b2:9c:8d:fa:ea:58:82:f9:79:81:
50:ef:8e:4b:75:e4:66:19:d1:97:a5:37:05:de:b0:
8a:d7:48:b4:02:81:16:cc:2e:06:86:be:ea:10:e8:
9e:93:a4:d0:49:d1:53:e6:98:c2:0b:e9:a7:47:10:
46:d9:c8:ee:17:6c:93:58:fc:2f:8b:5b:1b:a2:5d:
2d:fe:5f:81:a0:a1:7b:85:d2:b3:05:28:16:93:90:
b6:d0:71:0b:86:8c:e5:3b:b3:41:02:61:2e:87:6e:
a8:ee:4e:ef:3a:df:e6:f1:fb:1e:11:cc:a9:6b:78:
74:80:80:a0:a4:60:1c:36:a4:30:cf:6e:05:8c:a1:
18:c5:0e:3f:d7:10:8e:3a:3a:7a:22:f6:dd:d9:88:
2f:97:71:97:be:38:71:50:75:18:45:04:55:68:17:
44:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:35:AB:C0:D9:C4:3F:AB:9D:92:46:8C:BD:4B:88:C9:46:AD:CD:74
X509v3 Authority Key Identifier:
keyid:50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:6a:86:53:d9:b4:a9:b9:0c:ef:d3:70:8f:88:08:c8:b2:dc:
35:8b:fa:86:9e:d9:6d:c3:ae:f8:e9:12:9e:3a:03:34:a0:44:
53:bb:39:f7:a6:00:1f:41:72:9a:9d:38:ac:86:7e:d7:4f:37:
1a:8b:0c:62:65:6b:3a:fc:44:be:5f:74:2e:bd:27:9d:77:70:
f0:30:51:4a:38:84:fc:51:e8:ea:b7:0c:d2:2d:15:68:50:e0:
9b:fd:1b:6c:37:ea:b6:b6:d1:38:57:fb:24:79:71:13:20:72:
54:fe:1e:94:16:fd:cc:16:c5:a3:9d:52:a1:11:c9:2c:44:75:
a2:92:dc:56:39:20:e0:0a:55:7e:e0:8a:ca:62:99:12:b9:3e:
46:16:ed:a0:dd:21:b9:03:6d:af:bb:5f:e0:97:df:38:ed:67:
08:6c:87:0c:0c:4d:44:95:c0:d9:30:ca:93:8b:76:b6:ea:0a:
1f:d5:9b:72:c4:0b:4b:aa:94:f7:98:83:81:9a:17:1b:52:d6:
ca:d8:cc:da:84:e2:d8:4e:d3:de:39:2c:8b:43:50:0b:3d:5e:
1b:aa:c3:d0:3e:1f:08:69:0f:68:bb:d3:e3:cf:97:65:a0:ef:
e9:af:cf:ae:e0:78:37:be:62:5f:43:74:fa:ed:eb:97:40:0c:
8b:61:c8:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYqhLol4ObSr4iNd1B4aCcvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNDUyM2Y4ODExZWJlNWFhMzU5ODUxMWE0OGYzYmFmMDAw
MWE4ZTgwHhcNMjUwNDEyMTUwMTAzWhcNMjUwNDEzMTUwMTAzWjAzMTEwLwYDVQQD
Eyg1ODM1YWJjMGQ5YzQzZmFiOWQ5MjQ2OGNiZDRiODhjOTQ2YWRjZDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMnC2x9uiv/3nkf1QDgJ7SOAFEYP
ufVfuI4VoiPL5246v9FTUg4EYuUubNo78szIKEyUTtS+MIJa6+PQMiFqydyxMjAR
Biine790E3CyqKmc75VrXd/RwC8x4GKiLbKcjfrqWIL5eYFQ745LdeRmGdGXpTcF
3rCK10i0AoEWzC4Ghr7qEOiek6TQSdFT5pjCC+mnRxBG2cjuF2yTWPwvi1sbol0t
/l+BoKF7hdKzBSgWk5C20HELhozlO7NBAmEuh26o7k7vOt/m8fseEcypa3h0gICg
pGAcNqQwz24FjKEYxQ4/1xCOOjp6Ivbd2Ygvl3GXvjhxUHUYRQRVaBdEwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFg1q8DZxD+rnZJGjL1LiMlGrc10MB8GA1UdIwQY
MBaAFFBFI/iBHr5ao1mFEaSPO68AAajoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUVVai1JRWV2bHFqV1lVUnBJODdyd0FCcU9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8zYjAyM2UtYTM5Ny00NmJiLTk0NjUt
YmYzZjYyYjk1ZjEwLzEvVUVVai1JRWV2bHFqV1lVUnBJODdyd0FCcU9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8zYjAyM2UtYTM5Ny00NmJiLTk0NjUtYmYzZjYyYjk1ZjEw
LzEvVUVVai1JRWV2bHFqV1lVUnBJODdyd0FCcU9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa2qGU9m0
qbkM79Nwj4gIyLLcNYv6hp7ZbcOu+OkSnjoDNKBEU7s596YAH0Fymp04rIZ+1083
GosMYmVrOvxEvl90Lr0nnXdw8DBRSjiE/FHo6rcM0i0VaFDgm/0bbDfqtrbROFf7
JHlxEyByVP4elBb9zBbFo51SoRHJLER1opLcVjkg4ApVfuCKymKZErk+RhbtoN0h
uQNtr7tf4JffOO1nCGyHDAxNRJXA2TDKk4t2tuoKH9WbcsQLS6qU95iDgZoXG1LW
ytjM2oTi2E7T3jksi0NQCz1eG6rD0D4fCGkPaLvT48+XZaDv6a/PruB4N75iX0N0
+u3rl0AMi2HI4g==
-----END CERTIFICATE-----
Generated at Sat Apr 12 22:12:19 2025 by rpki-client