Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.mft
File: uEboVBh_kzKVTGDgjDNRr83xCFs.mft (raw, json)
Hash identifier: 4DEonEItx6zGMGUl9hWLNrsOIJN6zS7yKqwotFAGiMw=
Subject key identifier: 45:BB:55:2D:A6:E8:35:3A:0D:D6:94:8D:3E:D0:FE:BB:BC:EF:A0:D9
Authority key identifier: B8:46:E8:54:18:7F:93:32:95:4C:60:E0:8C:33:51:AF:CD:F1:08:5B
Certificate issuer: /CN=b846e854187f9332954c60e08c3351afcdf1085b
Certificate serial: 01965FBB93D34A81AEDBDEF1D657302CF516
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uEboVBh_kzKVTGDgjDNRr83xCFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.mft
Manifest number: 0534
Signing time: Tue 22 Apr 2025 23:00:50 +0000
Manifest this update: Tue 22 Apr 2025 23:00:50 +0000
Manifest next update: Wed 23 Apr 2025 23:00:50 +0000
Files and hashes: 1: Mg2I9qAx-Tc56L2Aw-rq3BoCH0A.roa (hash: AfRPI9y7vg4qHFtr0NX2m5ItgCXKXzKTz1NVYhVoflo=)
2: uEboVBh_kzKVTGDgjDNRr83xCFs.crl (hash: +0eCB1luyjAmQ3rxS/jH80xmkaXEP+eHFiFZC20vt+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uEboVBh_kzKVTGDgjDNRr83xCFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 20:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:bb:93:d3:4a:81:ae:db:de:f1:d6:57:30:2c:f5:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b846e854187f9332954c60e08c3351afcdf1085b
Validity
Not Before: Apr 22 23:00:50 2025 GMT
Not After : Apr 23 23:00:50 2025 GMT
Subject: CN=45bb552da6e8353a0dd6948d3ed0febbbcefa0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5f:ec:16:07:15:9c:f2:d3:e5:0f:43:28:13:
ac:33:bd:8a:d4:0a:b8:48:60:50:80:01:1f:d9:93:
85:a3:1b:04:68:54:be:37:1c:33:5b:b7:31:67:2a:
45:a1:e1:54:ef:a7:f0:9c:37:36:bb:b1:a2:fa:ab:
7d:a1:e0:c8:59:38:fa:c6:be:4f:e4:ec:25:05:dc:
46:81:62:da:84:83:74:ec:31:2c:fc:0d:b5:e3:68:
2b:ad:ac:1c:41:cd:bc:9f:27:dd:1a:39:2b:ff:b1:
99:1c:cd:5a:a9:fe:8e:64:76:cf:6c:03:95:34:31:
fd:67:65:f1:ce:82:72:f6:8b:4b:ce:b6:49:47:99:
f5:da:4a:7d:65:5f:83:53:2e:d8:e8:53:c3:b9:a3:
55:37:1f:69:25:9f:2a:92:83:f4:fa:c1:7f:ec:7c:
31:22:f0:a2:2d:57:0d:ae:f6:fe:a1:20:cd:e0:71:
d5:b4:af:32:c0:5f:ab:09:8b:82:2c:bc:13:9d:64:
6d:2f:8f:61:bc:c1:86:26:fb:c2:2b:fa:9a:b0:72:
83:de:82:89:8d:e6:d4:3c:41:60:a2:81:ee:59:82:
0d:30:3b:57:d0:2f:66:14:58:bd:6f:fd:ca:67:0e:
3c:7b:c1:f6:11:d9:1d:63:fd:80:15:b6:61:2f:d3:
ad:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BB:55:2D:A6:E8:35:3A:0D:D6:94:8D:3E:D0:FE:BB:BC:EF:A0:D9
X509v3 Authority Key Identifier:
keyid:B8:46:E8:54:18:7F:93:32:95:4C:60:E0:8C:33:51:AF:CD:F1:08:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEboVBh_kzKVTGDgjDNRr83xCFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6d:31:95:6f:9b:90:a1:76:14:ba:44:3b:c8:dd:b1:fc:48:
c2:56:1b:bc:45:9d:15:71:a3:44:8f:68:c9:16:2a:9e:71:74:
6f:d4:4b:30:b4:2b:a1:1b:16:03:87:12:44:b6:be:27:d3:9c:
cd:8a:e8:d3:00:38:03:8c:8b:13:39:77:19:f4:ec:2a:72:96:
62:6e:fa:19:1b:28:be:74:69:67:1a:47:29:ea:11:c1:0f:83:
bd:0e:82:83:9c:86:b5:f6:e7:6a:e7:bb:1b:35:21:7d:4f:a3:
02:a4:57:66:84:ef:62:b2:32:b0:12:d0:c0:d2:6f:28:f9:c2:
59:f1:01:9b:91:fd:54:19:e6:cb:c5:8d:ff:ee:70:d2:6e:dc:
a1:02:8f:20:f0:aa:f9:ea:fa:67:06:75:5b:93:99:f2:14:01:
18:ea:ea:01:75:fc:0d:73:24:b9:6c:c7:59:1d:da:1a:58:b9:
05:66:53:93:e5:df:ef:04:81:e6:f7:14:72:33:04:df:1f:ad:
94:23:8e:07:07:01:85:c8:03:48:69:89:21:d5:89:8f:a6:61:
44:bc:4e:d4:1c:4b:a0:c5:69:3a:62:11:07:de:d8:62:60:c3:
e2:9d:fc:fa:7d:21:ac:ed:30:e2:9a:2b:4b:af:c2:af:dd:fd:
9f:6a:84:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZfu5PTSoGu297x1lcwLPUWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NDZlODU0MTg3ZjkzMzI5NTRjNjBlMDhjMzM1MWFmY2Rm
MTA4NWIwHhcNMjUwNDIyMjMwMDUwWhcNMjUwNDIzMjMwMDUwWjAzMTEwLwYDVQQD
Eyg0NWJiNTUyZGE2ZTgzNTNhMGRkNjk0OGQzZWQwZmViYmJjZWZhMGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvl/sFgcVnPLT5Q9DKBOsM72K1Aq4
SGBQgAEf2ZOFoxsEaFS+NxwzW7cxZypFoeFU76fwnDc2u7Gi+qt9oeDIWTj6xr5P
5OwlBdxGgWLahIN07DEs/A2142grrawcQc28nyfdGjkr/7GZHM1aqf6OZHbPbAOV
NDH9Z2XxzoJy9otLzrZJR5n12kp9ZV+DUy7Y6FPDuaNVNx9pJZ8qkoP0+sF/7Hwx
IvCiLVcNrvb+oSDN4HHVtK8ywF+rCYuCLLwTnWRtL49hvMGGJvvCK/qasHKD3oKJ
jebUPEFgooHuWYINMDtX0C9mFFi9b/3KZw48e8H2EdkdY/2AFbZhL9OtJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEW7VS2m6DU6DdaUjT7Q/ru876DZMB8GA1UdIwQY
MBaAFLhG6FQYf5MylUxg4IwzUa/N8QhbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUVib1ZCaF9rektWVEdEZ2pETlJyODN4Q0ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS81MzYzNzQtZGM2Ni00OGFjLThhMWMt
ZTBlYWIyZjM5NjM3LzEvdUVib1ZCaF9rektWVEdEZ2pETlJyODN4Q0ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS81MzYzNzQtZGM2Ni00OGFjLThhMWMtZTBlYWIyZjM5NjM3
LzEvdUVib1ZCaF9rektWVEdEZ2pETlJyODN4Q0ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJG0xlW+b
kKF2FLpEO8jdsfxIwlYbvEWdFXGjRI9oyRYqnnF0b9RLMLQroRsWA4cSRLa+J9Oc
zYro0wA4A4yLEzl3GfTsKnKWYm76GRsovnRpZxpHKeoRwQ+DvQ6Cg5yGtfbnaue7
GzUhfU+jAqRXZoTvYrIysBLQwNJvKPnCWfEBm5H9VBnmy8WN/+5w0m7coQKPIPCq
+er6ZwZ1W5OZ8hQBGOrqAXX8DXMkuWzHWR3aGli5BWZTk+Xf7wSB5vcUcjME3x+t
lCOOBwcBhcgDSGmJIdWJj6ZhRLxO1BxLoMVpOmIRB97YYmDD4p38+n0hrO0w4por
S6/Cr939n2qExg==
-----END CERTIFICATE-----
Generated at Wed Apr 23 01:18:13 2025 by rpki-client